Edit tour

Windows Analysis Report
http://www.justjared.com

Overview

General Information

Sample URL:	http://www.justjared.com
Analysis ID:	1428755
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4716 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=19136 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.justjared.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: about:blank

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.5:49764 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 198MB

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 216.34.207.82
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.43.146

Source: global traffic	HTTP traffic detected: GET /jsapi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /justjared/stg/main.css HTTP/1.1Host: d188m5xxcpvuue.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ht/p/191040-27970744739601.js HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/wrapperMessagingWithoutDetection.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed-assets/load.min.js HTTP/1.1Host: cdn.sided.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /justjared/main/main.js?template=homepage HTTP/1.1Host: 01.cdn.mediatradecraft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /galleryloader.js HTTP/1.1Host: mediatradecraft-com.videoplayerhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/castbox/player/id3921236?v=8.22.11&autoplay=0 HTTP/1.1Host: castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fwww.justjared.com%2F&account_id=1247 HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tag?h=mediatradecraft-com&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity?pid=2&rt=envelope HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/ie/any HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=casale&fmt=json&p=191040 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/meta-data?hasCsp=true&accountId=1247&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%2C%22ccpa%22%3A%7B%7D%7D&propertyId=7443&ch=null&scriptVersion=4.21.0&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/castbox/static/css/slick.min.css HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/manifest.173670c1.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.vendor.6f338e46.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.player.e8375b72.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.justjared.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services.js HTTP/1.1Host: js.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/4.5.4/accessibility.js HTTP/1.1Host: aacdn.nagich.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.justjared.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets.js HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/ HTTP/1.1Host: r.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fwww.justjared.com%2F&account_id=1247 HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/4.21.0/custom.1a28bbe027bd69b90733.bundle.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/ie/any HTTP/1.1Host: idx.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=casale&fmt=json&p=191040 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1247%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22ccpa%22%3A%7B%22alwaysDisplayDNS%22%3Afalse%2C%22hasLocalData%22%3Afalse%2C%22targetingParams%22%3A%7B%7D%7D%2C%22custom%22%3A%7B%22targetingParams%22%3A%7B%7D%7D%2C%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D&localState=null&metadata=%7B%22ccpa%22%3A%7B%22applies%22%3Atrue%7D%2C%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=4414543004414543003154&scriptVersion=4.21.0&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/4.21.0/gdpr-tcf.326dc0fcac2e9cce1493.bundle.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202404150101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/search/ads.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/4.21.0/ccpa.e4cc64d4573eb818690d.bundle.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /justjared/main/95.590f6028e7dfe1219d0d.js HTTP/1.1Host: 01.cdn.mediatradecraft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/robots.txt?__skimjs_preflight__please_ignore__=true&rnd=0.7968783611185342 HTTP/1.1Host: t.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=8.172352690297082 HTTP/1.1Host: p.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=8.172352690297082 HTTP/1.1Host: p.skimresources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=a17587e6f7df45ea7319feb1b1d06d23 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.justjared.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.5486801981214138 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.justjared.com HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/style.css HTTP/1.1Host: aacdn.nagich.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/btncolor.css HTTP/1.1Host: aacdn.nagich.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/locale/en.json HTTP/1.1Host: aacdn.nagich.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/scripts/classManager.js HTTP/1.1Host: aacdn.nagich.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/css/playerpage.24722ef5.chunk.css HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.vendors~audiobooks~audiobooks.genre~castbox.main~categories~ch~channellist~claim~claim.failed~claim.~b62a876c.e28b21f0.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.vendors~audiobooks~audiobooks.genre~categories~ch~channellist~claim~claim.failed~claim.link_claimed~~48565954.976d7da0.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.vendors~audiobooks~castbox.main~ch~creator.analytics~creator.ch~creator.ch.des~creator.comments~crea~60d4e606.5fba21ae.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.vendors~castbox.main~creator.analytics~creator.ch~creator.ch.des~creator.comments~creator.ep~creator~546696e9.f3d7572b.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/js/page.playerpage.89c87f35.js HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zones/jstjared/services?dp=https%3A%2F%2Fwww.justjared.com%2F&pu=https%3A%2F%2Fwww.justjared.com%2F&ogu=https%3A%2F%2Fwww.justjared.com&rf=&r=3.88.29&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=10240&bf=f42f33720e241642e593da0d840ca6c8d6073588&ce=true&fs=false&dpr=1&sch=1024&scw=1280&lt=1713532349547&to=-120&vpii=false&vph=907&vpw=1280 HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/castbox-desktop/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b?c1=7&c2=31732370&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1713532348771&ns_c=UTF-8&c3=874156489745619&gdpr=0&gdpr_p1t=&gdpr_li=&gdpr_purps=&gdpr_pcc=&cs_cmp_nc=1&cs_cmp_id=6&cs_cmp_sv=1&cs_cmp_rt=845&c7=https%3A%2F%2Fwww.justjared.com%2F&c8=Just%20Jared%3A%20Celebrity%20News%20and%20Gossip%20%7C%20Entertainment&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country?o=5668060692217856 HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=0eJaeNs0&w=5662170614333440&o=5668060692217856&cv=2.1.41&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.justjared.com%2F&sid=juMcPKUMdX&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/11.svg HTTP/1.1Host: aacdn.nagich.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules-p-2bXhGE9g7fCno.js HTTP/1.1Host: rules.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/78a541f2-9748-4ba5-9cda-85fd7a44b234 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3479/i.js HTTP/1.1Host: tag.bounceexchange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2jaxeuX_Hk3GKMTpqiBqy0Msxd_NxEovD1J9sWXnOcZpltQROR4DIwU HTTP/1.1Host: baitbaseball.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /db356nau468gk/script.js HTTP/1.1Host: cadmus.script.acConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /as1.js?uri=https%3A%2F%2Fwww.justjared.com HTTP/1.1Host: silo40.p7cloud.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ats.js HTTP/1.1Host: ats.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A1%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fthank-you-aimee-song-lyrics.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A613%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22%27thanK%20you%20aIMee%27%20Lyrics%3A%20Is%20Taylor%20Swift%27s%20Song%20About%20Kim%20Kardashian%20Feud%3F%20Listen%20Now!%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350573&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A2%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fkourtney-kardashian-shuts-down-fan-comment.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A1636%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22Kourtney%20Kardashian%20Shuts%20Down%20Fan%20Who%20Assumed%20She%20Wouldn%27t%20Like%20Kim%27s%20Birthday%20Post%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350575&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1Host: g2.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /b2?c1=7&c2=31732370&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1713532348771&ns_c=UTF-8&c3=874156489745619&gdpr=0&gdpr_p1t=&gdpr_li=&gdpr_purps=&gdpr_pcc=&cs_cmp_nc=1&cs_cmp_id=6&cs_cmp_sv=1&cs_cmp_rt=845&c7=https%3A%2F%2Fwww.justjared.com%2F&c8=Just%20Jared%3A%20Celebrity%20News%20and%20Gossip%20%7C%20Entertainment&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1A8656fff7c75542b3fed171713532351; PID=181656fff7ac2542b3feb641713532351; XID=1A8656fff7c75542b3fed171713532351
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/meta-data?hasCsp=true&accountId=1247&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%2C%22ccpa%22%3A%7B%7D%7D&propertyId=7443&ch=null&scriptVersion=4.21.0&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/images/player_sticker_bg.d9d306ff.png HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s3.castbox.fm/webstatic/css/playerpage.24722ef5.chunk.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/castbox/static/images/episodeDefault.png HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1247%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22ccpa%22%3A%7B%22alwaysDisplayDNS%22%3Afalse%2C%22hasLocalData%22%3Afalse%2C%22targetingParams%22%3A%7B%7D%7D%2C%22custom%22%3A%7B%22targetingParams%22%3A%7B%7D%7D%2C%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D&localState=null&metadata=%7B%22ccpa%22%3A%7B%22applies%22%3Atrue%7D%2C%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=4414543004414543003154&scriptVersion=4.21.0&scriptType=unified HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/images/des_btn.2466a7a5.svg HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/btncolor.css HTTP/1.1Host: aacdn.nagich.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.5486801981214138 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=8.172352690297082 HTTP/1.1Host: p.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=8.172352690297082 HTTP/1.1Host: p.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.b0798.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Notice.c6498.css HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Notice.6d786.js HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/locale/en.json HTTP/1.1Host: aacdn.nagich.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/page HTTP/1.1Host: t.skimresources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zones/jstjared/services?dp=https%3A%2F%2Fwww.justjared.com%2F&pu=https%3A%2F%2Fwww.justjared.com%2F&ogu=https%3A%2F%2Fwww.justjared.com&rf=&r=3.88.29&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=10240&bf=f42f33720e241642e593da0d840ca6c8d6073588&ce=true&fs=false&dpr=1&sch=1024&scw=1280&lt=1713532349547&to=-120&vpii=false&vph=907&vpw=1280 HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /style/style.css HTTP/1.1Host: aacdn.nagich.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/updateSession HTTP/1.1Host: api2.sided.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=0&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_Mid_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F2%22%7D%2C%7B%22sd%22%3A%22home_Top_Right_300x250_InnerRail%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F1%22%7D%2C%7B%22sd%22%3A%22home_Bot_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22160x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F3%22%7D%2C%7B%22sd%22%3A%22home_Top_728x90%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Ftop%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=1&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22highImpactDFP%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fhigh_impact%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=2&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_InContent1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fincontent%2Fhome%2F1%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/572262379840831?v=2.9.154&r=stable&domain=www.justjared.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/images/logo_gray.0b75f9d4.png HTTP/1.1Host: s3.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=373946354429396&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cinsticator%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=320x50%7C300x250%7C1x1&fluid=height&ifi=1&didk=2376894448&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1713532353032&lmt=1713532038&adxs=301&adys=2469&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x50&msz=300x50&fws=0&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dconnatix_video%26pos%3Dconnatix_video%26refresh_count%3D0&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=826837274&frm=20&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://www.justjared.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /if.html?gdpr=false&gdprConsent=false&tpd=false&md=false HTTP/1.1Host: silo40.p7cloud.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/channel/v3?cid=3921236&raw=1&web=1&m=20240419&n=92c75641391bc21cf7585973d7d93510&r=1 HTTP/1.1Host: everest.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Access-Token-Secret: sec-ch-ua-mobile: ?0X-Suid: X-Web: trueUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Uid: X-CastBox-UA: localTime=2024-04-19-15-12-30;timeZone=Europe/Zurich;deviceType=web;lang=;countryCode=;uid=X-Access-Token: sec-ch-ua-platform: "Windows"Accept: /Origin: https://castbox.fmSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/episodes/overview?cids=3921236&web=1&m=20240419&n=667accfeb78aeb12da97930e8573ee61&r=1 HTTP/1.1Host: everest.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Access-Token-Secret: sec-ch-ua-mobile: ?0X-Suid: X-Web: trueUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Uid: X-CastBox-UA: localTime=2024-04-19-15-12-30;timeZone=Europe/Zurich;deviceType=web;lang=;countryCode=;uid=X-Access-Token: sec-ch-ua-platform: "Windows"Accept: /Origin: https://castbox.fmSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20240419 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssztw9ZVvoGFptdeR10bYUzk_EccIfJes2mzOa77nY41VSf6N5tcEQSfNSdZ8U8ATbj_jl2BbBoNI5yfoZer0UzsP-VvPU4cKCY4m9iWJdrEuJrhsrV0DmwxYNIO9hgmwnToqdhI9UA2DNgmzew09zbi8We-hygmHAg8klPoEl2pOp3fqfWiU66sZqmeFeBsLt8v9B72iL0wuKOuuWMPGjjgbyuNIWenU-WpZWXTj1yWrZRP_NpbEJ_zS8Cp1iz2JUGZ-hDxDL7USrO60o99Qtp5a0DfSFSXGGZWsFUEcgkziOzKrvnJON2ey3axDLjPksxOG1faiXJ3G-KeK9dIqkwOaUZpPnXOEX_WhcvpICOKPvIp0l-MOnrztSWJnQt5BQ&sai=AMfl-YTR1o9fNzxNqQ2pqIJ-RT_ePTgquLGb3m1Qt0dQ9YB4VSu6mBkuuAorKR6OyOPpbe7NH7UkEpkLSiwVnUfvFXX62VcY2DwMLAckvXoQyPCbOSg6x9YCQxmtYPPqXR3u5v84129cstANQdT2Ef0oCp00&sig=Cg0ArKJSzJzoKOOjfT4fEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20240418-18-RELEASE.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=581348282174153&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Chigh_impact%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=1x1&ifi=2&didk=461368580&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354220&lmt=1713532038&adxs=155&adys=8499&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=18x18&msz=0x0&fws=4&ohw=18&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3DhighImpactDFP%26pos%3DhighImpactDFP%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=829439793&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://www.justjared.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0\|t
Source: global traffic	HTTP traffic detected: GET /tr/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=1045438816811072924&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=3333872983477502&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Crail%2Chome%2C2%2C1%2C3%2Ctop&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F8%2F4&prev_iu_szs=320x50%7C300x600%7C300x250%7C160x600%2C320x50%7C300x250%2C320x50%7C160x600%7C300x250%7C300x600%2C728x90&fluid=height%2Cheight%2Cheight%2C0&ifi=3&didk=4152496204~1812581917~2418314740~3894687449&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354753&lmt=1713532038&adxs=812%2C812%2C812%2C268&adys=1511%2C564%2C3374%2C365&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3%7C0%7C4%7C0&ucis=3%7C4%7C5%7C6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x800%7C300x403%7C300x600%7C1000x184&msz=300x800%7C300x250%7C300x600%7C728x90&fws=4%2C4%2C4%2C0&ohw=300%2C300%2C300%2C0&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_Mid_Right_300xFlex_InnerRail%26pos%3Dhome_Mid_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_Right_300x250_InnerRail%26pos%3Dhome_Top_Right_300x250_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%26hb_format_rubicon%3Dbanner%26hb_size_rubicon%3D300x250%26hb_pb_rubicon%3D0.06%26hb_adid_rubicon%3D7038d15946e9bf6%26hb_bidder_rubicon%3Drubicon%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.06%26hb_adid%3D7038d15946e9bf6%26hb_bidder%3Drubicon%7CdivID%3Dhome_Bot_Right_300xFlex_InnerRail%26pos%3Dhome_Bot_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_728x90%26pos%3Dhome_Top_728x90%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_
Source: global traffic	HTTP traffic detected: GET /libtrc/google-topics-api.20240418-18-RELEASE.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/spa-detector.20240418-18-RELEASE.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/episode_list/v2?cid=3921236&eids=567018231%2C564032508%2C553681366%2C548039517%2C544843609%2C544583019%2C542830300%2C537719976%2C532957961%2C528241106%2C522708940%2C518691930%2C514502604%2C512792695%2C504436661%2C502372444%2C500147724%2C497914708%2C495593596%2C493582438&raw=1&web=1&m=20240419&n=b9bfd31ff99871909a72499e059ffbbd&r=1 HTTP/1.1Host: everest.castbox.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Access-Token-Secret: sec-ch-ua-mobile: ?0X-Suid: X-Web: trueUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Uid: X-CastBox-UA: localTime=2024-04-19-15-12-34;timeZone=Europe/Zurich;deviceType=web;lang=;countryCode=;uid=X-Access-Token: sec-ch-ua-platform: "Windows"Accept: /Origin: https://castbox.fmSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp.js HTTP/1.1Host: oa.openxcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /settings?session_id=c64088ae7581f5b176ec67ae1f128e4313177360 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvkuUY5zRKwdmMMlKdNwx9nfkDCogBThn2K07lcyzABgaO-Lc3HVFHZ3yypOF2sqH6wrrfUiWliPQYgbZVRNJfNe6NQKRCR93TGj34cCO5pOJmog6qgAWS1VPdi_c3HjLbFD_GXB5j8kwNoBewPLIoJ4PT6UcQVs523W0bRMUGvgiUa3lmGRSzeOFBv6R5--cDSvYOe90sI6TreTkZ55IIfS4ebEohlZfx1uvbE7PUiLuSHQ-vSanQCsjyAuGsm0gQc8_z6uQgutq_wRGMuBUmavjbOERAMFJxxBswWgWlPJNY8y90w9BTdl7GvffjohNlQ8A9_mGf8dcgZPk30eu8ryCpxr4jVQwhzzhuLe-H3hzExAvjiugLlUKMycXdZxS8EejktM1riQXmTAU83JiII2iYBgwkkYgpsPPxxA2W8Lg&sai=AMfl-YSoC8ABPPkz30SA3fxlyCD0rt-HCxK7mC4SMkZd1LJkVo8patGS5HtSzAWTDN96sc0k6VFfY1vM-K3iV8muYRDZ36THj_O0XvATLJEU44EYQ7g0e3479YtpqXoTKiI&sig=Cg0ArKJSzBusx6ZbMrSDEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstniLsn00JE5pwwHYTXOWEc3VxGkzRQAowr1SeQ821M-aNLjMzhwoWB9_iLAsUPmGac4Jxv6GG6vPFCy_4w4G5iwtWFhltdUo_jZ856svr7DR0FyoF03BZxiAvSWcAZ1O_a7Jo729AKoiMlIiNy54K9kUlWDw8JKUCDFHzJkcbOztxBtN-RzO5toIpM2-kWfQ3IJtFrSXxPXmoc7qPa1ikB7fh4dM0eaEleggsJLx4jTkWSN0ElbDbYgcubUcJyK6qmjEEhVXlMhBaL98HSxalf5cmeP6IBq5XLE2rlxRxloA5nDpzaIayl2nmQt3COLmfL1zerjVoIzt07QuR5m1oDqjefPudqJENREH7o0d7GOz3AWH2QDKCueehkmPhsVy7eQ7xnua_4dTrJXvmMYEjUCA&sai=AMfl-YTFfeMk1q-Lm6x_flSI28_PSA5kva1Oa9RlW29D9O14xlWrm6CV5l24PE0gLyuicorkiOuvsA_x5tyHrqEHRzUVVqWSL7qbYrRC7RulcizSJWoOcdJcD0yxs7ACu_I&sig=Cg0ArKJSzMi-Zm3CjwWlEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /js/infolinks_main.js HTTP/1.1Host: resources.infolinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads-code/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssB_KA48xkfaSraJTum5AKsL8TwE8yll4cg4dH2niDn5nGhBnX-4yu0BuiQPaX0Fl7WZ4OP0NNEvX5X-txK249dOiG7INeR-x1txdQYuwsM1xBe1Nzv0G8-C5okl-lglFbgyKyQyLVTIM1XC8CwyWghdAbdxUPtQLQqEZED3luGLn18M5EOJQKjJtPxsOaI_BTtpTxuY_1vQT_QZQ-0haXo1HATgv8mSEL8C0g6U81dGZCF4NzN4QYTN5LPgf99hcn2bbqX_XYPVTdFGbkb6n3_BTpTNSL2EdbIyDKh1MFcOrC-gRRx1WbDPchlzM3rVnhC7h1YUmSuUA8fDC26jeowq7AUluKrlT4BnIp5HYeQ3FrL8BoAWEoj2MmvbRsejrn94A5i3bg1hcVqJOOihuLFuJmW&sai=AMfl-YR6dBGHKmcE_1GqshfVxUUXRV7lk2gbDTAHUbmSP0MpYfQA1Yqc5brqmzEBJhhH0n78rUCETs1AU-PlrHiGe80YqoVASj8z-nq234I1RADJx57AcfS5Mdw7UbMKzBE&sig=Cg0ArKJSzNYEFKiBSSO6EAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjst6ST3WbaTkEkBGVPMqEeVNo8N1tbU9FiLhNTn4Ef37nYKSFPnCLDtxKlxmJdm3JcvgDgKJGI1YvlFu3QtL4rX7SzpusHmRdwQ23MuuJAvHqdgGUGlHIbOQLp8QZ8VxJBuTWp168Ox5_r1G0BbhSeCT3a9xEP5HNiwT1R9KTclBlI3LcbM4oDF4MN51KSVR9xU1pemsSl8ZaqgKZJwY6q0jQWkHrBQuwiC4UkjOmDrlfUyPvvlzmynDSseNvX53jOER4ckKfhqspQOeQvwTspJROqJf_6Aov3BSZyvaNQGq3fm0LrYDxZcQPbOQhk6HIvO2Q1TML5cexwHsMY0VUo-fEuW1MdafWoj9zHP2dsllyuUez_KPWyk3eCHQvIBKntEpdhGTUINdBp5qqs4&sai=AMfl-YQP0wT5uFsi4XFzAk5Tb5N1-aVkH4ueTr5A0aghmurEJvqMxe3MvLC9ZQqOf38fzyy4f9gT10cAalW86exdexK8oeasVBs7lK-jS36CmNNZLMvRvo9zO61tYY5VZzU&sig=Cg0ArKJSzNG3oG-rSsJPEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=2920935011648889&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cincontent%2Chome%2C1&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=300x250&ifi=7&didk=3656293417&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532356746&lmt=1713532038&adxs=309&adys=1231&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=5&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=610x-1&msz=300x-1&fws=516&ohw=1280&psts=AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR%2CAOrYGslC9W3W_3AujtsHnyKtJMzQcYpr29r_5ZsX6pG6_BNMAK-nIoeky6P_RVwjaPSfPclOilDIK7goP-od-fRqMNHEBgF2Smxd6_f4hUde5MH9o3CL%2CAOrYGsnbkBJrfC_SMFmhI3gHn7Jbpoegxe5Tygpb8xpqz8X_Ccj3kILwyL1gliBCXmc5cwrDFAzR2NL0OvXhP2KjkGmw83sDL02mdFW4VBm1WIr2pwyN%2CAOrYGsnsJAV7ez72LGmmn6d2Ht2A1Jn70sMm93fMBjaT35p272D3_9exGuvZfel5_89_mevwxZnFTZISElsmYFWRA8HzuOEWjshP8ez0zEdgLw%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_InContent1%26pos%3Dhome_InContent1%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=3508217207&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: htt
Source: global traffic	HTTP traffic detected: GET /check/1260 HTTP/1.1Host: check.analytics.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fwww.justjared.com%2F&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/11.svg HTTP/1.1Host: aacdn.nagich.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A2%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fkourtney-kardashian-shuts-down-fan-comment.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A1636%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22Kourtney%20Kardashian%20Shuts%20Down%20Fan%20Who%20Assumed%20She%20Wouldn%27t%20Like%20Kim%27s%20Birthday%20Post%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350575&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=1260 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A1%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fthank-you-aimee-song-lyrics.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A613%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22%27thanK%20you%20aIMee%27%20Lyrics%3A%20Is%20Taylor%20Swift%27s%20Song%20About%20Kim%20Kardashian%20Feud%3F%20Listen%20Now!%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350573&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1Host: g2.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /consent/tcfv2/vendor-list/categories?siteId=7443 HTTP/1.1Host: cdn.privacy-mgmt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=qvrl0w8&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/1.0/t/sync?_c=app27ow1713532354208&usPrivacy=1YNN HTTP/1.1Host: pre.ads.justpremium.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; 83481_313785=0_0_0; 83481_313787=1_8_0; 83481_313788=1_8_0; 83481_313789=1_8_0; 83481_313795=0_0_0; 83481_453288=0_0_0; 83481_454035=1_8_0
Source: global traffic	HTTP traffic detected: GET /files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10-hb.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=2&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_InContent1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fincontent%2Fhome%2F1%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10-dmp.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38-dmp.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38-hb.js HTTP/1.1Host: d3lcz8vpax4lo2.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country?o=5668060692217856 HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=373946354429396&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cinsticator%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=320x50%7C300x250%7C1x1&fluid=height&ifi=1&didk=2376894448&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1713532353032&lmt=1713532038&adxs=301&adys=2469&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x50&msz=300x50&fws=0&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dconnatix_video%26pos%3Dconnatix_video%26refresh_count%3D0&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=826837274&frm=20&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /v1/openrtb HTTP/1.1Host: ex.ingage.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /tr/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; __amc=2_1713532355_1713532355
Source: global traffic	HTTP traffic detected: GET /c/hb/bid HTTP/1.1Host: s.seedtag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
Source: global traffic	HTTP traffic detected: GET /webstatic/images/player_sticker_bg.d9d306ff.png HTTP/1.1Host: s3.castbox.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webstatic/images/des_btn.2466a7a5.svg HTTP/1.1Host: s3.castbox.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=0&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_Mid_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F2%22%7D%2C%7B%22sd%22%3A%22home_Top_Right_300x250_InnerRail%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F1%22%7D%2C%7B%22sd%22%3A%22home_Bot_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22160x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F3%22%7D%2C%7B%22sd%22%3A%22home_Top_728x90%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Ftop%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20240419 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/castbox/static/images/episodeDefault.png HTTP/1.1Host: s3.castbox.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssztw9ZVvoGFptdeR10bYUzk_EccIfJes2mzOa77nY41VSf6N5tcEQSfNSdZ8U8ATbj_jl2BbBoNI5yfoZer0UzsP-VvPU4cKCY4m9iWJdrEuJrhsrV0DmwxYNIO9hgmwnToqdhI9UA2DNgmzew09zbi8We-hygmHAg8klPoEl2pOp3fqfWiU66sZqmeFeBsLt8v9B72iL0wuKOuuWMPGjjgbyuNIWenU-WpZWXTj1yWrZRP_NpbEJ_zS8Cp1iz2JUGZ-hDxDL7USrO60o99Qtp5a0DfSFSXGGZWsFUEcgkziOzKrvnJON2ey3axDLjPksxOG1faiXJ3G-KeK9dIqkwOaUZpPnXOEX_WhcvpICOKPvIp0l-MOnrztSWJnQt5BQ&sai=AMfl-YTR1o9fNzxNqQ2pqIJ-RT_ePTgquLGb3m1Qt0dQ9YB4VSu6mBkuuAorKR6OyOPpbe7NH7UkEpkLSiwVnUfvFXX62VcY2DwMLAckvXoQyPCbOSg6x9YCQxmtYPPqXR3u5v84129cstANQdT2Ef0oCp00&sig=Cg0ArKJSzJzoKOOjfT4fEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /webstatic/images/logo_gray.0b75f9d4.png HTTP/1.1Host: s3.castbox.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=581348282174153&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Chigh_impact%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=1x1&ifi=2&didk=461368580&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354220&lmt=1713532038&adxs=155&adys=8499&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=18x18&msz=0x0&fws=4&ohw=18&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3DhighImpactDFP%26pos%3DhighImpactDFP%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=829439793&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=1&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22highImpactDFP%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fhigh_impact%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/recordVendorsLoaded HTTP/1.1Host: prod.us-east-1.cxm-bcn.publisher-services.amazon.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/2.0/t/xhr?i=1713532353390 HTTP/1.1Host: pre.ads.justpremium.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; 83481_313785=0_0_0; 83481_313787=1_8_0; 83481_313788=1_8_0; 83481_313789=1_8_0; 83481_313795=0_0_0; 83481_453288=0_0_0; 83481_454035=1_8_0
Source: global traffic	HTTP traffic detected: GET /check/1260 HTTP/1.1Host: check.analytics.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.justjared.com%2F&domain=www.justjared.com&cw=1&lsw=1&us_privacy=1YNN&gdpr=0 HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; __amc=2_1713532355_1713532355
Source: global traffic	HTTP traffic detected: GET /c/hb/bid HTTP/1.1Host: s.seedtag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
Source: global traffic	HTTP traffic detected: GET /v1/openrtb HTTP/1.1Host: ex.ingage.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /data/channel/v3?cid=3921236&raw=1&web=1&m=20240419&n=92c75641391bc21cf7585973d7d93510&r=1 HTTP/1.1Host: everest.castbox.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/episodes/overview?cids=3921236&web=1&m=20240419&n=667accfeb78aeb12da97930e8573ee61&r=1 HTTP/1.1Host: everest.castbox.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /check/1260 HTTP/1.1Host: check.analytics.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1YNN&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzcuMOgCAYgDw9uJsQaoA0fqAyRlZmRiYjc3Yy00MjRhLTQxNWUtYjA3ZS03ODAxNzdiMGNmMWGqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0
Source: global traffic	HTTP traffic detected: GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=R8615it8y0YaQPszR6coElZIGEItDzQiAFhobUFaD0cNSlVrWTVnR05jVVNfWENcGlVuAjNyX1hkAgIODRAAG1FqBTNoRRwzV1IOXk1ZT1J7TXNlFUk3AlNXUBdaTgc4V2FgQk0xVVdaDUAaVRJvUmU1SkJiAgENWhdcT1M8BWNgEEllAwFNRVYNHwNsUjQ2RR5lAldeCkQISAc9AjRnEB5wGkFZXUMOSQhpVDM2RktgV1QMD00OTwBqVGByX1hkBVFeC0QBTwdoUGlkRkIxB1peXRUNTAV7PH1yEBUnWBdNU0QUW1c9ESNySQEvGkEcDAdLEF83Q2tyS0liV1VdX0AVTwY7WXxhRBwxG1AKDEUVQAE7BzRpQU02BQdeS1gaGl83DzQzBxM9WCoLS04aTwQ7AjQ2QUliVQULWU0BTlVhB2FlQ09lFB4%3D
Source: global traffic	HTTP traffic detected: GET /cs.html?pt=6173-7821-01&pc=US&cmp=true&us=1YNN HTTP/1.1Host: cs.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
Source: global traffic	HTTP traffic detected: GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: sync.kueezrtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdzj1_be32264c=Wao15B8eChMpoPz3idC4ORoVIho5HgoiCRFTP2ECcQ8EdVovQF4xGQVdVnQAdgBTJVF9RFhyVhFfV3RQcglRdFEuQ1liSAJeByJXIwBVIl9vXE1mSFVcU3tVegAAIA1%2FRlxlGAVQBXMHdA1Hb0p7Q1gxTANZV3JVIQ5RcV95RFdmHAtQVHIWbhpTcF8sRl5jQgBaVHQDdwBXcFt8FVZmGwVLSGECcQ8EdVguFlszTlVbBXJWdQ4GdF0vRllyVhFfV3RVdwBUe1ksE1lkSARdUHsCJAsAJVtvXE1mSQQIUSZXJgtWc196RVdiSQBYAXtRJAxHb0p7Q1gxTAIPUHJVIQ5RcV95RFdmHAsMBiEWbhpTcF17El1iS1JZUSZScF5dd1ksR1hpQgtLSGECcQgDd1p%2FFF1nTFcLBiUDegxQIAp0SA1yJx9LByxBLExHeVhhUgg0CkFLXjhJbhoWJhs%2BGQA%2BWAlLUSIFdw0Ac1lgQg1hHB4LViUBbwEAe1pgFl1hQ1INXCUFIAhVYURvEwA%2BFFYKECpbLHEBYVJvRlpoSgdfByEMcwBcJVAsE181SQReBSIHYEU%3D; vdz_sync=5f2f51a7-e226-bbae-76c9-2d8714f31edc; vdzj1_a0c8efe3=2RI12ROiiFoxOeSyOKW0ZCDQbFioXIFt1CW1fWnEOTn0HY0guMXldW3FbTHdTNUB%2FZnhLRWRZS3gBY0h7ZXYKWnBdSn5SMBgsM3dZCHFNVG1TYR96ZXcIUX4KGypXZUp6MHlQCHZcTnpHf1t5YXgIX3ZfS34EME97YHhdXX5ZHndcY0htfm1fWnEOTn5Wa0p8YnheXH5dS3xUNkB5M3lLRWRZS3gEZUksNHsKXSBdGX4HZE8sZXoLX3BNVG1TYE4uZ3dYUXcOG3lRYU57ZndfD3UKHnxHf1t5YXgIXCMMHHxWY054Z3dbWnVeHXcANU1tfm1fWnEOTn4DZ0guMXldW3FbTHdTNUEqMC1LRWRZS3pTMUt9Yy5ZXCMJSildZ0guZXhQUX5NVG1TYEkpZn1bDXRYTisHMR94antcCiRWQC1Hf1t5YXgIX3VbHHsGZx99M34LXnAMT3lUN0Ftfm1fWnEOTSoDYk0sZilbCHcNT3kGZEx7NHlLNGpNGyAQPQ1taH9FSyELCD1HaQIyfm0aDDUcESALcUNtN3tfXHQJS31INUh%2FZWJYWnNfVX5RN0piYipRCiJWSHsBMk4scGNLCikBFioGJxAgPAYNS3xNTnpUYB0sYHkMC3YLTnpcZUsuZ3leCHBaWjI%3D
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=1&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2F84007c2a-d31f-425a-b5e3-a16088ed1608%3Fuid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; __amc=2_1713532355_1713532355
Source: global traffic	HTTP traffic detected: GET /usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https://cs.ingage.tech/v1/sync/openx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dminutemedia.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1Host: cs-tam.minutemedia-prebid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/usersync.php?type=iframe&ruid=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dtappx.com%26id%3D%7B%7BTPPXUID%7D%7D&gdpr=0 HTTP/1.1Host: ssp.api.tappx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0010b00002cG8kQAAS&gdpr=0&src=pbjs&ver=8.37.0&coppa=0&us_privacy=1YNN HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1YNN& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=aps&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/syncPage/rubicon?userId=84007c2a-d31f-425a-b5e3-a16088ed1608&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /auth/index.html HTTP/1.1Host: auth.instiengage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amazon/sync?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dogury.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ms-cookie-sync.presage.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/amazon?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jwumXNuB/v1/?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsharethrough.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drise.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1Host: cs-tam.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D?gdpr=0 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D?gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: geoip.instiengage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc.html?pubid=91e92b73fd&gdpr=0 HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /production/podcast_uploaded_episode400/36252507/36252507-1675129791406-55c48aea3e968.jpg HTTP/1.1Host: d3t3ozftmdmh3i.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://castbox.fm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/user/html/65354ca311421d643073bbdb?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dvidazoo.com%26id%3D%24%7BvdzUserSyncMacro%7D&gdpr=0 HTTP/1.1Host: syncaps.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=R8615it8y0YaQPszR6coElZIGEItDzQiAFhobUFaD0cNSlVrWTVnR05jVVNfWENcGlVuAjNyX1hkAgIODRAAG1FqBTNoRRwzV1IOXk1ZT1J7TXNlFUk3AlNXUBdaTgc4V2FgQk0xVVdaDUAaVRJvUmU1SkJiAgENWhdcT1M8BWNgEEllAwFNRVYNHwNsUjQ2RR5lAldeCkQISAc9AjRnEB5wGkFZXUMOSQhpVDM2RktgV1QMD00OTwBqVGByX1hkBVFeC0QBTwdoUGlkRkIxB1peXRUNTAV7PH1yEBUnWBdNU0QUW1c9ESNySQEvGkEcDAdLEF83Q2tyS0liV1VdX0AVTwY7WXxhRBwxG1AKDEUVQAE7BzRpQU02BQdeS1gaGl83DzQzBxM9WCoLS04aTwQ7AjQ2QUliVQULWU0BTlVhB2FlQ09lFB4%3D
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=2&gdpr=0 HTTP/1.1Host: ssbsync-us.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1961765009388584&correlator=3333872983477502&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Crail%2Chome%2C2%2C1%2C3%2Ctop&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F8%2F4&prev_iu_szs=320x50%7C300x600%7C300x250%7C160x600%2C320x50%7C300x250%2C320x50%7C160x600%7C300x250%7C300x600%2C728x90&fluid=height%2Cheight%2Cheight%2C0&ifi=3&didk=4152496204~1812581917~2418314740~3894687449&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354753&lmt=1713532038&adxs=812%2C812%2C812%2C268&adys=1511%2C564%2C3374%2C365&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3%7C0%7C4%7C0&ucis=3%7C4%7C5%7C6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x800%7C300x403%7C300x600%7C1000x184&msz=300x800%7C300x250%7C300x600%7C728x90&fws=4%2C4%2C4%2C0&ohw=300%2C300%2C300%2C0&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_Mid_Right_300xFlex_InnerRail%26pos%3Dhome_Mid_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_Right_300x250_InnerRail%26pos%3Dhome_Top_Right_300x250_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%26hb_format_rubicon%3Dbanner%26hb_size_rubicon%3D300x250%26hb_pb_rubicon%3D0.06%26hb_adid_rubicon%3D7038d15946e9bf6%26hb_bidder_rubicon%3Drubicon%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.06%26hb_adid%3D7038d15946e9bf6%26hb_bidder%3Drubicon%7CdivID%3Dhome_Bot_Right_300xFlex_InnerRail%26pos%3Dhome_Bot_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_728x90%26pos%3Dhome_Top_728x90%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: geoip.instiengage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=triplelift&user_id=3059573620546902553906&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fwww.justjared.com%2F&rid=esp&cc=1 HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvuSMVtDXu38TnSbwkJgKTkrIOiIeT0ZQpdSqoBNfyNjtgTtUT3CmcL0eKCDplQDkkjxNZldv7nTke4z0_BLe7q2EPKvNbGRUOmmzr_isrJXXJcENpx0TpRdx9gupp5Dg_bKKsZVSkrbT00eFDKmpzT50CrvUUPmf-6hrLfFRSa8JoLyAsyNHDJC4KBEVAYPdPyIzDcI5vHYeMTVL_U3MjqBfMVPwXlg69KUUqL0lM9ghKO-fK2fBlB65OR4x7ovpH2WOnRd-UloVEDH9nKVtz9sWl1vnqGavMWrqx9YtZps8v34fmWGABE6hOU2C0GYcnt1IhiJkQADqwtDNipJNK4JdzNho9DGnOWWKoBW9FblIeT5K1zBRtBUZ4pomRuFRvCBfB-HPhebIiFtaEnkN-sEsqnij8C&sai=AMfl-YQ5wZ5vRgsnlTVsgkP2PM-HECGBckr-1wceku4Sd71tMRUaWZbauwKUla0bHXayoYU4hvIjNfWu8RyoH4CC8heQtm0VTeIElZZiNiMcDddLLr7Upx2M65ZEgqxjaq8&sig=Cg0ArKJSzP4QoyRuNtWfEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstDmDtUufBTIj2KqpckLilY7hhp4nUho-6vBiM6DLgWgSGzRoxxGjagfLvwtVUkkhQQoRPQsNw97EU-nJ9dFT1TO0pkE-Co8GRyjHoN_JRyeQg8Kmo-lDt4rbDC02LIh_ZkVmZ4Z3L6w8G00b3W2IvOz4ekOar4Vcqh3cVa7SVMii8cXrRr4CpfyaTv9AuTS2lBS9fs_bktoAPrbalYSDMnA0Uoh3xZyZcd3kKvx9twabJhfDbJUotvJocSanVlksO_SzQnmDkWnZeV3glz9qW2-P6hKzDAGweCQMSVnUaGd-PII7-3Hbogth3w3z4a147K_hZ2GvouSx2KqRGCVwKPuvXQMJqfQxYIe5DzNLnvgl_IVQDICWQC5DreIO13cp49jbE-xceMV4op5l0VLA&sai=AMfl-YTTp31p25LwAy1y6HXiexm_8qqLem_ik1Et7zxJNtFeZLxOqFekMz2ZaUCucU7ltVDH7Jt2PsHbMP4WpwBflqx6s67JnqcK2jgDAAY2Q-X4o2W9MH9WKPcu8VcKwsA&sig=Cg0ArKJSzEdhBQzSN4XyEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p.png?visit=page&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed={%22p%22:%22https://www.justjared.com/%22,%22r%22:%22%22,%22tpc%22:1,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22loc%22:{},%22cbd%22:%2220240419%22,%22ids%22:%22%22,%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22grp%22:23,%22cohorts%22:[%22avM7hHWe%22,%228FWC3Bns%22]}&cb=1713532360462 HTTP/1.1Host: silo40.p7cloud.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://silo40.p7cloud.net/if.html?gdpr=false&gdprConsent=false&tpd=false&md=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _t=777; arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6; cohorts={}
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvkuUY5zRKwdmMMlKdNwx9nfkDCogBThn2K07lcyzABgaO-Lc3HVFHZ3yypOF2sqH6wrrfUiWliPQYgbZVRNJfNe6NQKRCR93TGj34cCO5pOJmog6qgAWS1VPdi_c3HjLbFD_GXB5j8kwNoBewPLIoJ4PT6UcQVs523W0bRMUGvgiUa3lmGRSzeOFBv6R5--cDSvYOe90sI6TreTkZ55IIfS4ebEohlZfx1uvbE7PUiLuSHQ-vSanQCsjyAuGsm0gQc8_z6uQgutq_wRGMuBUmavjbOERAMFJxxBswWgWlPJNY8y90w9BTdl7GvffjohNlQ8A9_mGf8dcgZPk30eu8ryCpxr4jVQwhzzhuLe-H3hzExAvjiugLlUKMycXdZxS8EejktM1riQXmTAU83JiII2iYBgwkkYgpsPPxxA2W8Lg&sai=AMfl-YSoC8ABPPkz30SA3fxlyCD0rt-HCxK7mC4SMkZd1LJkVo8patGS5HtSzAWTDN96sc0k6VFfY1vM-K3iV8muYRDZ36THj_O0XvATLJEU44EYQ7g0e3479YtpqXoTKiI&sig=Cg0ArKJSzBusx6ZbMrSDEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /usync/jp?r=https%3A%2F%2Fmatch.justpremium.com%2Fmatch%2Fgg%3Fjp_uid%3Dr-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319%26ex_uid%3D%5BUID%5D&gdpr=1&gdpr_consent=&us_privacy=1YNN&limit=16 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pre.ads.justpremium.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=Ew75cZqQhtpEcO-Pru61
Source: global traffic	HTTP traffic detected: GET /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint&reat=1 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fid%3D%2524UID%26ex%3Dappnexus.com%26gdpr%3D0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQqLzzs-8xCgoI5gEQqLzzs-8xCgoIhwIQqLzzs-8xCgoItwIQqLzzs-8xCgkIOhCovPOz7zEKCQgbEKi887PvMQoKCIwCEKi887PvMQoKCKwCEKi887PvMQoKCK0CEKi887PvMQoJCF8QqLzzs-8x; receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/sync/amx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid=&gdpr=1 HTTP/1.1Host: cs.ingage.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=3lift.com&id=3059573620546902553906 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https://cs.ingage.tech/v1/sync/openx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubapi/3.0/1/911237.3/0/0/ADTECH;v=2;cmd=bid;cors=yes HTTP/1.1Host: adserver.adtech.advertising.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: geoip.insticator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/3059573620546902553906?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/authIframe.js?v=1 HTTP/1.1Host: auth.instiengage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.instiengage.com/auth/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=smart.com&id=1845939505169848484&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fgdpr%3D0%26ex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=1045438816811072924&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /js/usersync.html?partnerid=59&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dundertonenew%26userId%3D%24%7BUIDENC%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D%26us_privacy%3D%24%7Bus_privacy%7D HTTP/1.1Host: cdn.undertone.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?id=187107314970053313&ex=appnexus.com&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87101066&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=Ew75cZqQhtpEcO-Pru61&gdpr=0 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: geoip.insticator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%22309a673c375b1f8%22%3A%227ae64792559ccec02f40%7C300x250%7Cgpid%3Ddiv-insticator-ad-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.justjared.com%2F&s=354c41da-5925-4862-bf2e-734a4ff4c737&pv=d0bdcf95-ea8f-4ed4-9bbc-9c3074fd511d&vp=mobile&lib_name=prebid&lib_v=8.38.0&us=50&iqid=%7B%22pcid%22%3A%22d1fa2879-9319-40e4-9b46-403bde911876%22%2C%22pcidDate%22%3A1713532364487%7D&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22justjared.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22justjared.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22insticator.com%22%2C%22sid%22%3A%22bd45a367-d5fa-4207-9aec-1acba8ec52eb%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJtz
Source: global traffic	HTTP traffic detected: GET /sync?bidswitch_ssp_id=triplelift&bsw_custom_parameter=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1Host: r.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
Source: global traffic	HTTP traffic detected: GET /lt/c/16589/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322; ts=1713532366
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /configs/70fb13d1-ab65-42ac-a7ca-0b4e680d5c92 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=5 HTTP/1.1Host: google-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=MsG0RONB99OMG&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-3%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_3%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_3%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /bidSwitch.gif?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=1845939505169848484
Source: global traffic	HTTP traffic detected: GET /trinity.json?key_maker=%7B%2288db99055de143%22%3A%2221855274bc2de6152cb9%7C300x250%7Cgpid%3Ddiv-insticator-ad-5%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.justjared.com%2F&s=145f5a0e-3c81-490b-ba9b-be9333b307b0&pv=1df90e2f-8482-4a03-a221-2cb3848e46db&vp=mobile&lib_name=prebid&lib_v=8.38.0&us=50&iqid=%7B%22pcid%22%3A%22d1fa2879-9319-40e4-9b46-403bde911876%22%2C%22pcidDate%22%3A1713532364487%7D&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22justjared.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22justjared.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22insticator.com%22%2C%22sid%22%3A%22bd45a367-d5fa-4207-9aec-1acba8ec52eb%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1Host: apex.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJtz
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: geoip.insticator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=gg.com&id=u_bd73a985-3ef7-4416-a679-3a9309181613 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.ids.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=bUAiigz35TDj7&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-4%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_4%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_4%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=NC48x6hCLCCbC&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-5%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_5%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_5%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /lt/c/16576/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/9234/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0010b00002cG8kQAAS&src=esp&ver=1.9.0&us_privacy=1YNN HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=ZiJtzsCo8X8AAFvXhEgAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /hadron.js?url=about%3Asrcdoc&ref=&_it=amazon&partner_id=450 HTTP/1.1Host: cdn.hadronid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hadron.js?url=https%3A%2F%2Fwww.justjared.com%2F&ref=&_it=amazon&partner_id=628 HTTP/1.1Host: cdn.hadronid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1.0/id5-api.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=media.net&id=3565339623115671000V10 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=36A9D4BEDC8C49329C57B49CB04880F6&ex=simpli.fi&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=smaato.com&id=5a11a496f1 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=baidu.com&id=22210ca737cf7b3c2itoor00lv6oxcmr HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /load/?p=233&g=001&j=d HTTP/1.1Host: loadus.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=Ew75cZqQhtpEcO-Pru61
Source: global traffic	HTTP traffic detected: GET /ul_cb/check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D?gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
Source: global traffic	HTTP traffic detected: GET /skeleton.gif?adslot=ad_300x250_8001271 HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncframe?origin=publishertagids&topUrl=www.justjared.com&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/smart-tag/versioned/runtime_6459738026535cda4232dc813c61447d.js HTTP/1.1Host: assets.bounceexchange.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-86316-1&cid=315527398.1713532348&jid=1870324937&_u=YADAAUAAAAAAACAAI~&z=844830423 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0010b00001rrPUnAAM&src=aps&ver=1.9.0&us_privacy=1YNN HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0010b00002cG8kQAAS&src=aps&ver=1.9.0&us_privacy=1YNN HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /load/?p=233&g=001&j=d&xl8blockcheck=1 HTTP/1.1Host: loadus.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="6fe6a4603177c372840da1d3a0d7528b"; ud="eJxrXxzq6XKLQcEsLdUs0cTMwNjQ3DzZ2NzIwsQgJdEwxTjRIMXc1MgiaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UZD%252F4qKUNMZFJcWngo9X2wEAKUQmyA%253D%253D"
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-OutbrainAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=mediagrid.com&id=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /consent/set?ct=skip&ca=1&ccd=1&cds=1&cta=1&c=9217&fp=2647d031a51b7a31cc96fbee0c73c78c&src=LTJS HTTP/1.1Host: privacy.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=49574e61&gdpr=0&gdpr_consent=&tappx=1 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd
Source: global traffic	HTTP traffic detected: GET /us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN%26userId%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.kueezrtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJt0; _usd_justjared.com=1df90e2f-8482-4a03-a221-2cb3848e46db
Source: global traffic	HTTP traffic detected: GET /sync?nid=286 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562615&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11592%26uid%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D28%26type%3Diframe%26id%3D%24UID%26auxuid%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D32%26type%3Diframe%26id%3D%24UID%26auxuid%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3565339623115671000V10
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/dv?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=5926d422&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd
Source: global traffic	HTTP traffic detected: GET /us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D115667%26uid%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJt0; _usd_justjared.com=1df90e2f-8482-4a03-a221-2cb3848e46db
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sonobi&ttd_tpi=1&ttd_puid=91e92b73fd&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11603%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BUSER_CONSENT%5D%26uid%3D$%7BBSW_UUID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=aps&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SCM=5a11a496f1; SCMaps=5a11a496f1
Source: global traffic	HTTP traffic detected: GET /amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D?gdpr=0 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=36A9D4BEDC8C49329C57B49CB04880F6
Source: global traffic	HTTP traffic detected: GET /ju/cs/amazon?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca737cf7b3c2itoor00lv6oxcmr
Source: global traffic	HTTP traffic detected: GET /sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drise.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1Host: cs-tam.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=P2oHoy7zC
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sonobi HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322; ts=1713532366
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=1934&r=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D253%26type%3Diframe%26id%3D%7BPUB_USER_ID%7D%26auxuid%3D HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=2cd32817-436f-4a0b-8d96-e539ff9a7ea5; tuuid_lu=1713532355
Source: global traffic	HTTP traffic detected: GET /sync?ssp=sonobi&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
Source: global traffic	HTTP traffic detected: GET /s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=1845939505169848484
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_9ac5c5704fa24c0696323; CDIPARTNERS=%7B%221%22%3A%2220240419%22%7D
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=140&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119
Source: global traffic	HTTP traffic detected: GET /assets/imp/logging?reqId=b04b991a-07d0-4d85-8276-27bd9407659f&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280 HTTP/1.1Host: va-lb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync/img?cs_wd_sy=1&dp=43&redir=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dif%26nuid%3D[MM_UUID] HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-index_n-adMediaV1_rx_n-acuityads_cnv_n-onetag_pm-db5_ym_rbd_ppt_sovrn_n-Rise_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-OutbrainAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /bh/rtset?do=add&pid=560606&ev=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb&daaqp=1&rurl=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dpp%26nuid%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=0&gdpr_consent=&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=IhHYAPZHgyDtLY4rTVmqUZsu&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=43929&callback_url=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D724%26type%3Diframe%26id%3D%24%7BUSER_ID%7D%26auxuid%3D HTTP/1.1Host: ads.betweendigital.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=Ew75cZqQhtpEcO-Pru61
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/index/?us_privacy=&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=Ew75cZqQhtpEcO-Pru61
Source: global traffic	HTTP traffic detected: GET /match/gg?ex_uid=u_bd73a985-3ef7-4416-a679-3a9309181613 HTTP/1.1Host: match.justpremium.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; 83481_313785=0_0_0; 83481_313787=1_8_0; 83481_313788=1_8_0; 83481_313789=1_8_0; 83481_313795=0_0_0; 83481_453288=0_0_0; 83481_454035=1_8_0
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=amazon&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&gdpr=0 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=61723701&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /cs?aid=11592&uid=part_d3pYBt4hoB3q&ev=1&us_privacy=[US_PRIVACY]&pid=562615&gdpr_consent=&gdpr=0 HTTP/1.1Host: cs-tam.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=P2oHoy7zC
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=tappx.com&id=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cs?aid=11603&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&uid=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1Host: cs-tam.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=P2oHoy7zC
Source: global traffic	HTTP traffic detected: GET /cs?aid=115667&uid=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb HTTP/1.1Host: cs-tam.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=P2oHoy7zC
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gdpr=0 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=17&external_user_id=Ew75cZqQhtpEcO-Pru61&puid=&gdpr=0 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-index_n-adMediaV1_n-onetag_pm-db5_ym_rbd_ppt_rx_n-acuityads_cnv_sovrn_n-Rise&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-OutbrainAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/?ssp=1601&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadmedia.com%26id%3D%5BUID%5D HTTP/1.1Host: pixel.s3xified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZiJtysAoIp0AACTzAsBeOAAA%262584&gpdr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a
Source: global traffic	HTTP traffic detected: GET /tamptsync?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dym.com%26id%3D%24UID&gdpr=0 HTTP/1.1Host: sync-amz.ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1Host: cs.krushmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_&gdpr=0 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=185&cm=IhHYAPZHgyDtLY4rTVmqUZsu&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub6192414557248&gdpr=0&consent=&us_privacy={{US_PRIVACY}} HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11571%26id%3D%7Bdevice_id%7D HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/usync?idmn=50&type=iframe&id=1045438816811072924&auxuid= HTTP/1.1Host: ssp.api.tappx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lijit_dbm&google_hm=SWhIWUFQWkhneUR0TFk0clRWbXFVWnN1&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0010b00001rrPUnAAM&gdpr=0&src=pbjs&ver=8.38.0&coppa=0 HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NDEwMjllODQzYjk1NTgzNTE3YjE0NjU5MjgxZjYxNzJiMGYwMWNhOA&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /ecm3?id=36A9D4BEDC8C49329C57B49CB04880F6&ex=simpli.fi&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=media.net&id=3565339623115671000V10 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=smaato.com&id=5a11a496f1 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=0&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Fopenx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyRhYzFjZjZiZC02N2MyLTQyMjktOTdmNC0xZjk4MmJkMTFiNDmqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
Source: global traffic	HTTP traffic detected: GET /v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/TwYhSmfTCxUlMg_vgydP9Mn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13406715 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=1845939505169848484 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /usersync?b=dit&i=di_9ac5c5704fa24c0696323 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11580%26puid%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd HTTP/1.1Host: insticator-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyQ1MDcyNWQ4My0xYWU5LTRkYTktYjg1Yi03YmI0NzA3YjliYjKqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=58ceaaf5-c766-4c17-869a-d76e43401714&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11563%26id%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=1YNN&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253De8ba6a97-4f0e-4f17-a097-1f0587909fd0%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=187107314970053313 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtc/cmd/remote.js HTTP/1.1Host: d188m5xxcpvuue.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /sync/prebid?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=0&gpp=&gpp_sid=&google_gid=CAESELL55Lb_r68ETm1PZvTsUw8&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
Source: global traffic	HTTP traffic detected: GET /ups/58570/occ?uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=mp4hjl8&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=vidazoo.com&id=a2cfff08-e3a1-d49f-dccd-86df76cdf804 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /u?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Damx_com%26uid%3D HTTP/1.1Host: id.a-mx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=77&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=1845939505169848484
Source: global traffic	HTTP traffic detected: GET /cs?aid=11587&uid=7456771a-49ee-4e2a-b013-668de61e15dd&gdpr=0 HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wrvUserID=P2oHoy7zC
Source: global traffic	HTTP traffic detected: GET /id?c=17248 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c
Source: global traffic	HTTP traffic detected: GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TFY2T1g3TFMtMVUtRzFUQg==&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adaptmx&user_id=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=baidu.com&id=22210ca737cf7b3c2itoor00lv6oxcmr HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=amazon&zcc=1&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&cb=1713532368939 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /merge?pid=102&3pid=ba8f4e41-72ae-5bc7-8225-d78d77656ddb HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /c3593fe4-fdef-4a92-9a1a-9726d1dddf30.gif?gdpr=0&gdpr_consent=[GDPR_CONSENT]&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11608%26id%3D%5BUID%5D HTTP/1.1Host: us.shb-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /usersync?b=mag&i=LV6OX7LS-1U-G1TB&gdpr=0&gdpr_consent=undefined HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cs/usync?idmn=28&type=iframe&id=3059573620546902553906&auxuid= HTTP/1.1Host: ssp.api.tappx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=43929&callback_url=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D724%26type%3Diframe%26id%3D%24%7BUSER_ID%7D%26auxuid%3D&crf=1&rts=4947430377108709478 HTTP/1.1Host: ads.betweendigital.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dc=was1; tuuid=2d9d0769-dca8-536e-84e5-cf7ce2c7a2ad; ut=ZiJt0QAB-9C5lWSbK-bh2P2zsM_RIvC-v_fZxg==; ss=1
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=typeaholdings HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LV6OX7LS-1U-G1TB&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /cksync?cs=30&type=vdz&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dmedianet%26userId%3D%3Cvsid%3E%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3565339623115671000V10
Source: global traffic	HTTP traffic detected: GET /cs/usync?idmn=32&type=iframe&id=187107314970053313&auxuid= HTTP/1.1Host: ssp.api.tappx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
Source: global traffic	HTTP traffic detected: GET /cs/usync?idmn=728&id=nXZup0qoCvW1rWLB0W0iZg HTTP/1.1Host: ssp.api.tappx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
Source: global traffic	HTTP traffic detected: GET /cs/usync?consent=&gdpr=0&id=OPUf67e9fe0c71146baa5554ff263871c94&idmn=1135&us_privacy=%7B%7BUS_PRIVACY%7D%7D HTTP/1.1Host: ssp.api.tappx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Fopenx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=185&cm=IhHYAPZHgyDtLY4rTVmqUZsu&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiJt0-EedLilJRkb8yqXAxW4; chs=[{"ch":"185","t":"2024-04-19 13:12:51"}]
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /api/cookie?partnerId=appnexus&userId=187107314970053313&gdpr=0&gdpr_consent=&us_privacy=1YNN&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.cootlogix.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=Fbl140c8GLP7ktNCANAS0FIJj4kWQ4GPWF7FWMFBQtyfzUFUxB5d3V%2FIgBTCXAoM1JcFyxhbWx3BAJZIyhoVQpHKiF5eCdRAgkme2lWXRZsb2N7JwMGDHd0aVQJQ3kid35xAVRbJHhlU19WYmF3fXVVWgB3eDJVWBcqdSIrJQJTW3R7ZVVJWGx2J310AwZecShnA19FLXNxf3ZUAF1wLzQVR1Z4d3Z4cQhTDSUqZQZZFXkgJ3d3BlMLcn1yG0lCfXFwLHEJVQ92fWgDXkwtcnh%2FdVFWDXJuDRtJFyE2LzpjClMUZSs0RxlWdDhjJzJ1Nhp9KjFbGBFiYSYqMUJBAmV8chtJEyozMw0uXhBdKThyDUlWYmE0PRFCCk4mLykVUVZ%2FGg8AY01PGjQpI0QCGyBhe2x5A1NZcX5mA0ZCeCF5Y3AHBVtqfzVSWll3ciMoJAlRDyN%2FNAZJWGwgLiAvVQBMLiM%2Bfg9WdGF3eiNTBl51f2BUDRB%2Benh5JAgFCHJ8ZQBJWGwqMgcnQgJVIm5qQxkBKz4%3D
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dpubmatics2s%26userId%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&redir=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dtriplelift%26userId%3D$UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dsovrn%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0&us_privacy=1YNN HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /c/441/441/9/1.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#1
Source: global traffic	HTTP traffic detected: GET /ecm3?gdpr=0&ex=index.com&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LV6OX7LS-1U-G1TB&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dgrid%26userId%3D%24%7BBSW_UUID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D?gdpr=0&gdpr_consent=&us_privacy=&uid=${BSW_UUID}&cookie_age=${COOKIE_AGE} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LV6OX7LS-1U-G1TB&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D&cb=1713532364186 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd HTTP/1.1Host: insticator-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
Source: global traffic	HTTP traffic detected: GET /v1/syncPage/rubicon?uid=LV6OX7LS-1U-G1TB&gdpr=0&gdpr_consent=undefined HTTP/1.1Host: cs.ingage.techConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11596%26id%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13406715 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=ZUN4s6npS8GwWOHs-pEJnQ&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=140&gdpr={0,1}&gdpr_consent={empty,consent%20string}&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=1845939505169848484
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid=&redir=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dsovrn%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
Source: global traffic	HTTP traffic detected: GET /ecm3?id=IhHYAPZHgyDtLY4rTVmqUZsu&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dappnexus%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cchain/0?gdpr=0&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13406715 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; ljtrtbexp=eJxdjLERgDAMA3dxncKyHSthNY7dc5ACTPmnf50yVA4QwcBMNhnxMtEEalWAejXMq2D5sHf2vh%2FyF3AznLiDad%2F9WoYWHV8%3D
Source: global traffic	HTTP traffic detected: GET /id?c=17248 HTTP/1.1Host: id.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c
Source: global traffic	HTTP traffic detected: GET /sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D%26partnerId%3Dsundaysky%26userId%3D%24%7Bssky_uuid%7D HTTP/1.1Host: vop.sundaysky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://syncaps.cootlogix.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB
Source: global traffic	HTTP traffic detected: GET /product-loader-code/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js HTTP/1.1Host: product.instiengage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=amx&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&do=www.justjared.com HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPUf67e9fe0c71146baa5554ff263871c94
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=3&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22photo_Top_Left_160x600_OuterRail%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fadhesion%2Fphoto%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%2C%22vendors%22%3A%7B%22arcspan%22%3A%7B%22data%22%3A%7B%22default%22%3A%7B%22site%22%3A%7B%22name%22%3A%22arcspan%22%2C%22cat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22sectioncat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22pagecat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22keywords%22%3A%22Outlander%20(TV%20series)%2CTony%20DiNozzo%20and%20Ziva%20David%2CJamie%20Fraser%20(character)%2CClaire%20Fraser%20(character)%2CEntertainment%2CTelevision%2CDiana%20Gabaldon%2CRichard%20Lewis%20(comedian)%2CavM7hHWe%2C8FWC3Bns%22%2C%22content%22%3A%7B%22data%22%3A%5B%7B%22name%22%3A%22arcspan%22%2C%22segment%22%3A%5B%7B%22id%22%3A%22640%22%7D%2C%7B%22id%22%3A%22432%22%7D%5D%2C%22ext%22%3A%7B%22segtax%22%3A6%7D%7D%5D%7D%2C%22domain%22%3A%22www.justjared.com%22%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22ref%22%3A%22%22%7D%7D%7D%7D%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQbh-g0iSq-f0OBcz9MuQmnAowUO-LuRsTL7YanjewYN-Qyfr1I0gL8oVYjOoQzxqwev8OAme6fN1e3KcT1VZ_4Nbpm8w HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=amx_com&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; amdgt_lk%40cfs=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvu454L7TOz9sdjwmXrM5a8yjQWbv_7qp3dcm1HAemUkrL6-WOcFIv0gwccwUlGJsRJigPOROSIkx6RYKhVRf_FLksxANdhDe2yA0lEhMq9M8wUn0558BUTSI3CpozqMWjaGgqeiwXUd-Qw3w0OYjbtyZlzO3OfOxU7HG7exbrJPYNxYuoBn7gTwDlBcU0s_ICvIouBYcS3EGpiwE8Zc6FvZNuTehqIbp_WS9JkS4bNBhmVUBdS5YkzRTj_WrORuGJQdnYn8THi9NQpfYwqLNA-W84uJ-XYejauF5s6LhupOQ9ep5i7IKqtyf3CDcKuq9QyJILnvhZQhVsiUF4ba-kudHTYwNjmcHQtER3ODD0Hb6w2rJOJCfrBhiC0wGLkPucibw&sai=AMfl-YQ-zp7vGKh1QJZdz7UfSYnKdvuvereZNjVO7zvSYrRtdqtFGCaPXtRxQt60UmvWZsYTNm6cP6y0zwkbmGo152ee_C8HZs5IomPAGAogSFoF8bfTUMhgAjcFxEtmqhOSi3JrFBDWkHOSER7UF59LthTw&sig=Cg0ArKJSzE4SBJAOezbrEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3565339623115671000V10
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1Host: ssum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
Source: global traffic	HTTP traffic detected: GET /skeleton.js?adslot=hluad_728x90_ HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3205&partner_device_id=58637582-4b7e-42fe-b59a-889f13122ef7&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dadaptmx%26user_id%3D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=87880&dpuuid=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.go.sonobi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3355&partner_device_id=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hadron.js?partner_id=450&sync=1&url=about%3Asrcdoc HTTP/1.1Host: cdn.hadronid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/sync/adform/d420a613-8395-4234-83fd-2a89fd387f7e?uid=1045438816811072924 HTTP/1.1Host: cs.ingage.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
Source: global traffic	HTTP traffic detected: GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&adnxs_id=$UID&gdpr=0 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==
Source: global traffic	HTTP traffic detected: GET /merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB
Source: global traffic	HTTP traffic detected: GET /setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=adform&uid=1045438816811072924 HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; amdgt_lk%40cfs=1
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001713532371-GGRRVTZ5-BL2N&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=amx&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&do=www.justjared.com HTTP/1.1Host: ow.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.a-mo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001713532371-GGRRVTZ5-BL2N%26tapad_id%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
Source: global traffic	HTTP traffic detected: GET /pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cs-tam.yellowblue.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; _sv3_7=1

Source: chromecache_527.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=572262379840831&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_1015.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_768.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_965.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_1002.2.dr	String found in binary or memory: Ux.prototype.l=function(a){switch(a.type){case "playing":Wx(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&0<Vx(this)&&(this.B=!0,Wx(this))}};var Wx=function(a){!a.g.enabled&&a.B&&(a.F=1E3Vx(a),a.C=Date.now(),a.o=!1,a.g.start())};Ux.prototype.G=function(){var a=Date.now(),b=a-this.C,c=1E3Vx(this);c-this.F<.5b?this.o\|\|(this.o=!0,this.dispatchEvent("playbackStalled")):this.o=!1;this.F=c;this.C=a};var Xx="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Yx=/\bocr\b/;function Zx(a){if(pb(Sh(a))\|\|oc&&2048<a.length)return!1;try{if((new S(a)).F().match(Yx))return!0}catch(b){}return null!=Xx.find(function(b){return null!=a.match(b)})};function $x(a,b){return pb(b)?!1:(new RegExp(a)).test(b)}function ay(a){var b={};a.split(",").forEach(function(c){var d=c.split("=");2==d.length&&(c=qb(d[0]),d=qb(d[1]),0<c.length&&(b[c]=d))});return b} equals www.youtube.com (Youtube)
Source: chromecache_1015.2.dr	String found in binary or memory: __d("LiveChatPluginConstants",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="LiveChatEvent/";c="mqtt";d=b("$InternalEnum")({CONNECTED:"Connected",CONNECTING:"Connecting",DISCONNECTED:"Disconnected"});e=250;b=a+"close_timestamps";var g=a+"reset_badging",h=a+"state",i=a+"switch_account",j=a+"typing",k=a+"unread_count",l=a+"update_message_list",m="platform/plugins/connect/guest",n=a+"guest_upgrade_success",o=a+"guest_upgrade_success_incognito",p=a+"navigate_to_welcome_page",q="platform/plugins/connect/access_token";a=a+"start_re_engagement";var r=124,s=187,t=24,u=424,v=288,w=313,x=219,y=40,z=36,A=24,B=18,C=708,D=540,E=244,F=202,G=509,H=430,I=6,J=0,K=1,L=-1,M="messaging_plugin",N=8634e4,O="#8A8D91",P="entrypoint:customer_chat_plugin",Q=0,R=1,S=2,T=3,U="new_message_update",V="initial_fetch",W=5e3,X="https://www.facebook.com/business/help/1661027437357021";f.MQTT=c;f.MQTTGatewayConnectionState=d;f.LOGIN_CHECK_INTERVAL=e;f.CLOSE_TIMESTAMPS=b;f.RESET_BADGING=g;f.STATE_UPDATE=h;f.SWITCH_ACCOUNT=i;f.TYPING_UPDATE=j;f.UNREAD_COUNT_UPDATE=k;f.UPDATE_MESSAGE_LIST=l;f.GUEST_MODE_CONNECT=m;f.GUEST_UPGRADE_SUCCESS=n;f.GUEST_UPGRADE_SUCCESS_INCOGNITO=o;f.NAVIGATE_TO_WELCOME_PAGE=p;f.ACCESS_TOKEN_LOGIN=q;f.START_RE_ENGAGEMENT=a;f.PROMPT_FALLBACK_HEIGHT=r;f.PROMPT_REDESIGN_FALLBACK_HEIGHT=s;f.PROMPT_CONTAINER_PADDING_HEIGHT=t;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT=u;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT=v;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=w;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=x;f.WELCOME_PAGE_ATTRIBUTION_OFFEST_HEIGHT=y;f.WELCOME_PAGE_ATTRIBUTION_OFFSET_HEIGHT_WITH_COMPACT=z;f.MAIN_IFRAME_PADDING_HEIGHT=A;f.MAIN_IFRAME_PADDING_HEIGHT_WITH_COMPACT=B;f.THREAD_PAGE_HEIGHT=C;f.THREAD_PAGE_HEIGHT_COMPACT=D;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT=E;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT_COMPACT=F;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT=G;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT_COMPACT=H;f.GREETING_TEXT_BOTTOM_SPACING_OFFEST=I;f.LOGGED_IN_CHAT_MODE=J;f.GUEST_CHAT_MODE=K;f.INVALID_CHAT_MODE=L;f.MESSENGING_PLUGIN=M;f.GUEST_SESSION_STORAGE_VALIDITY_MS=N;f.GUEST_SEND_BUTTON_COLOR_EMPTY_INPUT=O;f.LIVE_CHAT_ENTRYPOINT_ATTRIBUTION_TAG=P;f.ITP_CONSISTENCY_UNKNOWN_LOGGED_OUT=Q;f.ITP_CONSISTENCY_CONSISTENT_LOGGED_IN=R;f.ITP_CONSISTENCY_INCONSISTENT=S;f.ITP_CONSISTENCY_CONSISTENT_NO_ITP=T;f.NEW_MESSAGE_UPDATE=U;f.INITIAL_FETCH=V;f.PLUGIN_FADE_DELAY=W;f.HELP_DEX_LINK=X}),66); equals www.facebook.com (Facebook)
Source: chromecache_463.2.dr	String found in binary or memory: break;case "MediaFiles":for(var Fd=[],rf=[],be=[],Ce=q(Yf(G)),sf=Ce.next();!sf.done;sf=Ce.next()){var xb=sf.value;switch(xb.nodeName){case "MediaFile":var Dc=void 0,yb=U(xb);if(null==yb)var De=null;else{-1!=yb.indexOf("www.youtube.com/get_video")?P(Q(),"hgvu","1"):-1!=yb.indexOf("redirector.gvt1.com/get_video")&&P(Q(),"hgvuc","1");var Ec={};Ec.height=KF(xb,"height");Ec.width=KF(xb,"width");Ec.tb=xb.getAttribute("delivery");Ec.bitrate=KF(xb,"bitrate");Ec.Ca=KF(xb,"minBitrate");Ec.maxBitrate=KF(xb, equals www.youtube.com (Youtube)
Source: chromecache_965.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Tg:d,Rg:e,Sg:f,Dh:g,Eh:h,xe:m,zb:b},p=D.YT,q=function(){FC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(IC(w,"iframe_api")\|\|IC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!zC&&GC(x[A],n.xe))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr	String found in binary or memory: l.Bm=function(){this.A&&rG(this.l,xH,null)};l.Km=function(){Z(this,"adBuffering")};var B1=function(a){var b,c=a.qa;if(c.g&&c.g.g)if(c.j){var d=void 0===d?null:d;(b=void 0===b?null:b)\|\|(b="//www.youtube.com/");d?b+=d:(c=C(c.j.id),b=B(c)?null:b+"channel/"+(0==c.lastIndexOf("UC",0)&&24==c.length?c:"UC"+c))}else b=null;else b=null;b&&(a.pause(),a.Ea(b,null))};m1.prototype.Mb=function(){r0.prototype.Mb.call(this);null!=this.A&&this.A.me()}; equals www.youtube.com (Youtube)
Source: chromecache_733.2.dr, chromecache_798.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr	String found in binary or memory: this.Oh=h;this.Da=k;this.cf=n;this.Cb=m;this.be=p;this.Le=r;this.resources=t};var lD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.mimeType?null:c.mimeType;var d=void 0===c.fa?null:c.fa;c=void 0===c.ve?null:c.ve;this.Ja=a;this.fa=d;this.mimeType=b;this.ve=c},mD=function(a){return"Url"===a.Ja.resourceType?a.Ja.dd:null},nD=function(a){return"Html"===a.Ja.resourceType?a.Ja.dd:null};var oD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.tb?null:c.tb;var d=void 0===c.mimeType?null:c.mimeType,e=void 0===c.codec?null:c.codec,f=void 0===c.width?null:c.width;c=void 0===c.height?null:c.height;this.url=a;this.tb=b;this.mimeType=d;this.codec=e;this.width=f;this.height=c};var pD=function(a,b){b=void 0===b?{}:b;var c=void 0===b.fa?null:b.fa,d=void 0===b.bitrate?null:b.bitrate,e=void 0===b.Ca?null:b.Ca,f=void 0===b.maxBitrate?null:b.maxBitrate,g=void 0===b.Ia?null:b.Ia;oD.call(this,a,{tb:void 0===b.tb?null:b.tb,mimeType:void 0===b.mimeType?null:b.mimeType,codec:void 0===b.codec?null:b.codec,width:void 0===b.width?null:b.width,height:void 0===b.height?null:b.height});this.fa=c;this.Ca=e\|\|f\|\|d\|\|0;this.maxBitrate=f\|\|e\|\|d\|\|0;this.Ia=g};w(pD,oD);var qD=function(a){a=void 0===a?{}:a;var b=void 0===a.qc?[]:a.qc,c=void 0===a.Ee?[]:a.Ee;this.Qb=void 0===a.Qb?null:a.Qb;this.qc=b;this.Ee=c};var rD=function(a){a=void 0===a?{}:a;var b=void 0===a.Ob?null:a.Ob,c=void 0===a.W?[]:a.W,d=void 0===a.yc?[]:a.yc,e=void 0===a.Wa?[]:a.Wa,f=void 0===a.nh?[]:a.nh,g=void 0===a.gd?null:a.gd,h=void 0===a.ia?null:a.ia,k=void 0===a.Oa?[]:a.Oa;this.duration=void 0===a.duration?null:a.duration;this.ia=h;this.Ob=b;this.W=c;this.yc=d;this.Wa=e;this.nh=f;this.gd=g;this.Oa=k};var sD=function(a){a=void 0===a?{}:a;var b=void 0===a.fa?null:a.fa,c=void 0===a.height?null:a.height,d=void 0===a.width?null:a.width,e=void 0===a.Yc?null:a.Yc,f=void 0===a.resources?[]:a.resources,g=void 0===a.ng?null:a.ng,h=void 0===a.og?[]:a.og,k=void 0===a.ia?null:a.ia;this.id=void 0===a.id?null:a.id;this.fa=b;this.height=c;this.width=d;this.Yc=e;this.resources=f;this.ng=g;this.og=h;this.ia=k};var tD=function(a,b){b=void 0===b?[]:b;this.g=a;this.W=b};var uD=function(a){a=void 0===a?{}:a;var b=void 0===a.Me?"unknown":a.Me;this.Ne=(void 0===a.Ne?"unknown":a.Ne)\|\|"unknown";this.Me=b\|\|"unknown"};var vD=function(a){a=void 0===a?{}:a;var b=void 0===a.id?null:a.id,c=void 0===a.adId?null:a.adId,d=void 0===a.Sb?null:a.Sb,e=void 0===a.ke?null:a.ke,f=void 0===a.Ud?null:a.Ud,g=void 0===a.Xa?[]:a.Xa;this.La=void 0===a.La?null:a.La;this.id=b;this.adId=c;this.Sb=d;this.ke=e;this.Ud=f;this.Xa=g};var wD=function(a,b){this.url=a;this.g=void 0===b?null:b};var xD=function(a){a=void 0===a?{}:a;var b=void 0===a.re?null:a.re,c=void 0===a.Ec?null:a.Ec,d=void 0===a.parameters?null:a.parameters,e=void 0===a.W?[]:a.W;this.vendor=void 0===a.vendor?null:a.vendor;this.re=b;this.Ec=c;this.parameters=d;this.W=e};var yD=function(a){a=void 0===a?{}:a;var b=void 0===a.errors?[]:a.errors,c=void 0===a.uc?[]:a.uc,d=void 0===a.pa?[]:a.pa,e=void 0===a.pb?[]:
Source: chromecache_463.2.dr	String found in binary or memory: this.qa;if(b.g&&b.g.g)if(a=b.g.id,b=b.o,b=void 0===b?!1:b,null==a)a=null;else{c=new L("//www.youtube.com/watch");var d=c.g;d.set("v",a);d.set("feature",b?"trueview-instream":"instream");tw(c,d);a=c.toString()}else a=null;null!==a&&(this.pause(),this.Ea(a,null));break;case "muteClicked":this.va=this.I;this.setVolume(0);break;case "unmuteClicked":this.setVolume(this.va);case "skipShown":Z(this,"skippableStateChanged");break;case "skip":Z(this,"skip");this.destroy();break;case "fullscreen":Z(this,"fullscreen"); equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr	String found in binary or memory: var ZE=function(a,b){var c=a.Sa.j;a.Sa.g.forEach(function(d){Sy(b,new Oy("error",d))});c.forEach(function(d){Sy(b,Qy("impression",d.url,d.g))})},$E=function(a,b){a=q(a.pa);for(var c=a.next();!c.done;c=a.next())if((c=c.value.Sb)&&c.Wa&&0<c.Wa.length){a=q(c.Wa);for(c=a.next();!c.done;c=a.next())c=c.value,b.Wa.push(new Ly(mD(c),nD(c),c.mimeType,c.fa,c.ve));break}};var aF=function(a){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack)};w(aF,Error);var bF=function(a){this.j=a;this.g=Date.now()};bF.prototype.reset=function(){this.g=Date.now()};var cF=function(a){a=a.g+a.j-Date.now();return 0<a?a:0};var dF="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),eF=/\bocr\b/;function fF(a){if(B(C(a))\|\|Be&&2048<a.length)return!1;try{if((new L(a)).O().match(eF))return!0}catch(b){}return null!=dF.find(function(b){return null!=a.match(b)})};var gF=function(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a};w(gF,Error);var hF=function(){if(!Be)return!1;try{return new ActiveXObject("MSXML2.DOMDocument"),!0}catch(a){return!1}},iF=Be&&hF(),jF=function(a){if("undefined"!=typeof DOMParser){var b=new DOMParser;a=oz(a);return b.parseFromString(Pd(a),"application/xml")}if(iF){b=new ActiveXObject("MSXML2.DOMDocument");b.resolveExternals=!1;b.validateOnParse=!1;try{b.setProperty("ProhibitDTD",!0),b.setProperty("MaxXMLSize",2048),b.setProperty("MaxElementDepth",256)}catch(c){}b.loadXML(a);return b}throw Error("Your browser does not support loading xml documents"); equals www.youtube.com (Youtube)
Source: chromecache_1015.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (e) {var i = new Image();i.crossOrigin = 'anonymous';i.dataset.testid = 'fbSDKErrorReport';i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script\|\|"sdk.js")+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1012906458","namespace":"FB","message":"'+e.message+'"}}');document.body.appendChild(i);} equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: www.justjared.com

Source: unknown

HTTP traffic detected: POST /api/ HTTP/1.1Host: r.skimresources.comConnection: keep-aliveContent-Length: 199sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://www.justjared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.justjared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 13:12:32 GMTContent-Type: application/json; charset=utf-8Content-Length: 75Connection: closeSet-Cookie: AWSALBTG=Mvc2KCQ7x3d/TguITr019jDWYHF5dCngRQPLIPQzAfBjqF4LBSVgUIRMRXQi0dqSbvXBe4lAJsun/0xcmhbp9QDpL8jsPVQTq753iumclVM5qhZFbqb4xLva4nQU3DGRgK+KatQYe3L9L7e/RD8dPhDobp3MLQ0dYq76aaA/ZkZY; Expires=Fri, 26 Apr 2024 13:12:32 GMT; Path=/Set-Cookie: AWSALBTGCORS=Mvc2KCQ7x3d/TguITr019jDWYHF5dCngRQPLIPQzAfBjqF4LBSVgUIRMRXQi0dqSbvXBe4lAJsun/0xcmhbp9QDpL8jsPVQTq753iumclVM5qhZFbqb4xLva4nQU3DGRgK+KatQYe3L9L7e/RD8dPhDobp3MLQ0dYq76aaA/ZkZY; Expires=Fri, 26 Apr 2024 13:12:32 GMT; Path=/; SameSite=None; SecureX-Powered-By: ExpressAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Content-Type, authorization,x-access-token,apikeyAccess-Control-Allow-Methods: GET,PUT,POST,DELETE,PATCH,OPTIONSETag: W/"4b-nSeICKrpkE+GGlmuyzC4q2GhRMQ"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Fri, 19 Apr 2024 13:12:41 GMTserver: envoyx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Fri, 19 Apr 2024 13:12:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 152Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffAccess-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEADAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-TypeVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 13:12:41 GMTContent-Type: application/javascriptTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: pre.ads.justpremium.comAccess-Control-Allow-Credentials: true
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 13:12:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 82Connection: closevary: Originaccess-control-allow-credentials: trueCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 876d25cb1d107bde-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Fri, 19 Apr 2024 13:12:41 GMTserver: envoyx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Fri, 19 Apr 2024 13:12:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 152Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffAccess-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEADAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-TypeVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 13:12:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 82Connection: closevary: Originaccess-control-allow-credentials: trueCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 876d25cc0fd5b060-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:12:52 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:12:52 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:12:53 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:12:56 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:01 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:03 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ServerDate: Fri, 19 Apr 2024 13:13:08 GMTContent-Type: text/htmlContent-Length: 517Connection: closex-amz-rid: 303S3YHH7XZAQPC4T3P7Vary: Content-Type,Accept-Encoding,User-AgentStrict-Transport-Security: max-age=47474747; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:09 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:12 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:12 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: no-storecontent-length: 0strict-transport-security: max-age=15552000alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:29 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:33 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:33 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:33 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Fri, 19 Apr 2024 13:13:41 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: no-storecontent-length: 0strict-transport-security: max-age=15552000alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900connection: close

Source: chromecache_1026.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_749.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_1176.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_1176.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_1174.2.dr	String found in binary or memory: http://justjared.com
Source: chromecache_621.2.dr	String found in binary or memory: http://lesterchan.net
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_1176.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_463.2.dr	String found in binary or memory: http://tpc.googlesyndication.com/pagead/js/loader21.html
Source: chromecache_572.2.dr, chromecache_862.2.dr, chromecache_722.2.dr, chromecache_429.2.dr, chromecache_783.2.dr, chromecache_543.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_463.2.dr, chromecache_722.2.dr, chromecache_1002.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_463.2.dr	String found in binary or memory: http://www.google.com/adsense/support
Source: chromecache_885.2.dr, chromecache_682.2.dr	String found in binary or memory: http://www.justjared.com/privacy/
Source: chromecache_743.2.dr	String found in binary or memory: http://www.justjaredjr.com/
Source: chromecache_775.2.dr	String found in binary or memory: http://www.spoutpodcast.com
Source: chromecache_1141.2.dr, chromecache_841.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_743.2.dr	String found in binary or memory: https://01.cdn.mediatradecraft.com/justjared/main/main.js?template=homepage
Source: chromecache_1150.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b20&redirect=https%3A%2F%2Fdsum-sec.casalemedia.com/crum%3F
Source: chromecache_743.2.dr	String found in binary or memory: https://aacdn.nagich.com/
Source: chromecache_494.2.dr, chromecache_644.2.dr, chromecache_699.2.dr, chromecache_583.2.dr, chromecache_1158.2.dr, chromecache_461.2.dr, chromecache_849.2.dr, chromecache_1027.2.dr, chromecache_690.2.dr, chromecache_1175.2.dr, chromecache_1116.2.dr	String found in binary or memory: https://aax-us-east.amazon-adsystem.com
Source: chromecache_743.2.dr	String found in binary or memory: https://access.nagich.com/
Source: chromecache_459.2.dr	String found in binary or memory: https://ad-cdn.technoratimedia.com/html/usersync.html?&srv=cs&source=admedia&UID=b775784632323f34fcd
Source: chromecache_470.2.dr	String found in binary or memory: https://ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-hzO_O-m8TG6iSewK5gxT49SGTn5Bf6f
Source: chromecache_459.2.dr	String found in binary or memory: https://ad.360yield.com/server_match?partner_id=1669&r=https%3A%2F%2Fpixel.s3xified.com%2Fdspsync%2F
Source: chromecache_1098.2.dr	String found in binary or memory: https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F
Source: chromecache_683.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_683.2.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_492.2.dr	String found in binary or memory: https://ads.betweendigital.com/match?bidder_id=44808&gdpr=0&gdpr_consent=&callback_url=https%3A%2F%2
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_492.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=3686&gdpr=0&gdpr_consent=
Source: chromecache_1150.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZiJtysAoIp0AACTzAsBeOAAA
Source: chromecache_470.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-registering?dataProviderId=434&userId=k-BcN---m8TG6iSewK5gxT49SGTn6
Source: chromecache_1142.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=0&gdpr_consent=&is=mmed&ismms2s=1&redirectUri=https%3A%2F%2Fcs-r
Source: chromecache_995.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_472.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?is=kueez&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirectUri=https%3A%2F
Source: chromecache_492.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?is=mmed&gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_814.2.dr, chromecache_1101.2.dr, chromecache_670.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs
Source: chromecache_689.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_1111.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/%
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_1136.2.dr	String found in binary or memory: https://analytics.twitter.com/i/adsct?p_user_id=6fe6a4603177c372840da1d3a0d7528b&p_id=28539
Source: chromecache_1178.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=4&cm=9edac919-938e-435c-b808-9c3d4416339d&redir=https%3A%2F%
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_612.2.dr, chromecache_706.2.dr, chromecache_1049.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?&gdpr=
Source: chromecache_796.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=&gdpr_consent=&redir=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%
Source: chromecache_814.2.dr, chromecache_1101.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs
Source: chromecache_670.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%
Source: chromecache_492.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3
Source: chromecache_901.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%
Source: chromecache_995.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dsovrn%2
Source: chromecache_477.2.dr, chromecache_1068.2.dr	String found in binary or memory: https://api.crazyegg.com/abtests/preview
Source: chromecache_1068.2.dr	String found in binary or memory: https://api.crazyegg.com/surveys/preview
Source: chromecache_829.2.dr	String found in binary or memory: https://api.intentiq.com
Source: chromecache_1055.2.dr, chromecache_435.2.dr, chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/envelope?pid=
Source: chromecache_978.2.dr	String found in binary or memory: https://api2.sided.co/embed/updateSession
Source: chromecache_1068.2.dr	String found in binary or memory: https://app.crazyegg.com
Source: chromecache_1010.2.dr	String found in binary or memory: https://ara.paa-reporting-advertising.amazon/register-source
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_612.2.dr, chromecache_706.2.dr, chromecache_1049.2.dr	String found in binary or memory: https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US
Source: chromecache_1149.2.dr, chromecache_593.2.dr	String found in binary or memory: https://assets.a-mo.net/js/idw.js?
Source: chromecache_950.2.dr	String found in binary or memory: https://auth.instiengage.com/auth/app.html
Source: chromecache_950.2.dr	String found in binary or memory: https://auth.instiengage.com/auth/index.html
Source: chromecache_1044.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_
Source: chromecache_875.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/index/?us_privacy=&gdpr=0&gdpr_consent=&gpp=&gpp
Source: chromecache_492.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/minutemedia/?&cb=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3F
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://beacon.krxd.net/usermatch.gif?partner=undertone&partner_uid=
Source: chromecache_1044.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_1098.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG
Source: chromecache_492.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562760&ev=1&us_privacy=
Source: chromecache_598.2.dr	String found in binary or memory: https://bh.contextweb.com/visitormatch
Source: chromecache_598.2.dr	String found in binary or memory: https://bh.contextweb.com/visitormatch/prebid
Source: chromecache_598.2.dr	String found in binary or memory: https://bid.contextweb.com/header/ortb?src=prebid
Source: chromecache_910.2.dr	String found in binary or memory: https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1&gd
Source: chromecache_970.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_910.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=29&gdpr=0
Source: chromecache_832.2.dr	String found in binary or memory: https://cadmus.script.ac/dahhc4ozyvjm6/script.js
Source: chromecache_1150.2.dr	String found in binary or memory: https://casale-match.dotomi.com/match/bounce/current?networkId=19998&version=1
Source: chromecache_527.2.dr	String found in binary or memory: https://castbox.fm/app/castbox/player/id3921236
Source: chromecache_743.2.dr	String found in binary or memory: https://castbox.fm/app/castbox/player/id3921236?v=8.22.11&autoplay=0
Source: chromecache_527.2.dr	String found in binary or memory: https://castbox.fm/opensearch.xml
Source: chromecache_715.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=4MsJMKlOptqAjgSUUpFX7arMZlTOrYT9I36AdIwSj9j
Source: chromecache_715.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=BlYt4KlOptqAjgSUUpFX7arMZlTOrYT9I36AdIwSj9j
Source: chromecache_647.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=LSLfZ6lOptqAjgSUUpFX7arMZlQyKRl0OZV3OgGd6RN
Source: chromecache_641.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=SBhaHv1RgWYi7hJa0nBRJ7lUzOJRTC3fp-r0xAlHwcn
Source: chromecache_647.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=X0hgIqlOptqAjgSUUpFX7arMZlQyKRl0OZV3OgGd6RN
Source: chromecache_495.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=YLwBCalOptqAjgSUUpFX7arMZlSiJtUatuOcB0bJkbS
Source: chromecache_495.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=zJuRAqlOptqAjgSUUpFX7arMZlSiJtUatuOcB0bJkbS
Source: chromecache_641.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=-1nrnf1RgWYi7hJa0nBRJ7lUzOJRTC3fp-r0xAlHwcn
Source: chromecache_647.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=JUaFbqlOptqAjgSUUpFX7arMZlQyKRl0OZV3OgGd6RN
Source: chromecache_715.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=a_ngialOptqAjgSUUpFX7arMZlTOrYT9I36AdIwSj9j
Source: chromecache_495.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=qvBjs6lOptqAjgSUUpFX7arMZlSiJtUatuOcB0bJkbS
Source: chromecache_836.2.dr	String found in binary or memory: https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=v9VOM9Z9uaJKzx7QTbggMODKfciMhdxtP4TtplneI6F
Source: chromecache_733.2.dr, chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_1095.2.dr, chromecache_704.2.dr, chromecache_819.2.dr, chromecache_840.2.dr	String found in binary or memory: https://cdn-ima.33across.com/ima.js
Source: chromecache_819.2.dr	String found in binary or memory: https://cdn-ima.33across.com/ppid.js
Source: chromecache_1181.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_1181.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/
Source: chromecache_1095.2.dr, chromecache_704.2.dr, chromecache_840.2.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js
Source: chromecache_1098.2.dr	String found in binary or memory: https://cdn.hadronid.net/hadron.js?partner_id=450&sync=1&url=
Source: chromecache_885.2.dr, chromecache_682.2.dr	String found in binary or memory: https://cdn.justjared.com/wp-content/themes/default/images/jjlogo7.gif
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn.privacy-mgmt.com
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn.privacy-mgmt.com/unified/wrapperMessagingWithoutDetection.js
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn.sided.co/embed-assets/load.min.js
Source: chromecache_953.2.dr	String found in binary or memory: https://cdn.taboola.com
Source: chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://cdn.undertone.com/js/usersync.html
Source: chromecache_600.2.dr, chromecache_901.2.dr	String found in binary or memory: https://cdn.undertone.com/js/usersync.html?partnerid=59&gdpr=&gdpr_consent=&us_privacy=&redirect=htt
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/apple-touch-icon.png
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/favicon-16x16.png
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/favicon-32x32.png
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/themes/default/images/featured/justjaredjr.gif
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/themes/default/images/jj-circle-logo-new.gif
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/themes/default/images/jjlogo7.gif
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/themes/default/images/jr-circle-logo.gif
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/andy-cohen-bravo-rumor-debunked.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/chris-pratt-gets-injured-on-mercy-s
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/every-lyric-about-matty-healy.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/kate-beckinsale-released-from-hospi
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/kourtney-kardashian-shuts-down-fan-
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/pll-summer-school-cast.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/sia-paris-hilton-team-up-for-new-so
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-anthology-album.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-matty-healy-relationsh
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-social-media-post-afte
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/thank-you-aimee-song-lyrics.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/walker-linkout.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/sidebar/jjjr_logo_featured.gif
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjared.com/wp-content/uploads/sidebar/justjared-home1.jpg
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjaredjr.com/wp-content/uploads/headlines/2024/04/ariana-greenblatt-joins-cast-of-n
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjaredjr.com/wp-content/uploads/headlines/2024/04/iain-armitage-looks-back-on-young
Source: chromecache_743.2.dr	String found in binary or memory: https://cdn01.justjaredjr.com/wp-content/uploads/headlines/2024/04/rachel-zegler-kit-connor-romeo-ju
Source: chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr, chromecache_836.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
Source: chromecache_1178.2.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=edba233c-2b40-451f-8921-b1dad89502fe&gdpr=0&gdpr_consent=
Source: chromecache_920.2.dr	String found in binary or memory: https://ced-ns.sascdn.com/diff/js/modules/cmp.js
Source: chromecache_814.2.dr	String found in binary or memory: https://cks.connatix.com/cks?pid=24&ev=1cea9752ba4141efa5c1f9f338ffb4de&pname=IronSource&api-tier=1&
Source: chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_612.2.dr, chromecache_706.2.dr, chromecache_1049.2.dr	String found in binary or memory: https://cm.adform.net/cookie?&gdpr=
Source: chromecache_1098.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ul
Source: chromecache_1076.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm
Source: chromecache_470.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-OOHgrOm
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3O
Source: chromecache_875.2.dr, chromecache_1150.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZiJtysAoIp0AACTzAsBe
Source: chromecache_1076.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm
Source: chromecache_844.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=sharethrough_ob&gdpr=0&gdpr_consent=&google_hm=NzQ1Njc
Source: chromecache_1150.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0
Source: chromecache_950.2.dr	String found in binary or memory: https://comment.instiengage.com/live/loader/loader.js
Source: chromecache_527.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_814.2.dr, chromecache_1101.2.dr, chromecache_670.2.dr	String found in binary or memory: https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2
Source: chromecache_470.2.dr	String found in binary or memory: https://contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-7gjgPum8TG6iSewK5gxT49SGTn6pxxkgtUjFUQ
Source: chromecache_459.2.dr	String found in binary or memory: https://contextual.media.net/cksync.php?cs=3&type=syn&ovsid=b775784632323f34fcd70d90833d7507&redir=h
Source: chromecache_950.2.dr	String found in binary or memory: https://core-commenting.instiengage.com/core-commenting/loader.js
Source: chromecache_1068.2.dr	String found in binary or memory: https://core.crazyegg.com
Source: chromecache_1044.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_844.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=sharethrough&gdpr=0&gdpr_consent=
Source: chromecache_470.2.dr	String found in binary or memory: https://criteo-sync.teads.tv/um?eid=80&uid=k-IltGM-m8TG6iSewK5gxT49SGTn5X8MQwEVFsCQ
Source: chromecache_901.2.dr	String found in binary or memory: https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.c
Source: chromecache_901.2.dr	String found in binary or memory: https://cs-server-s2s.yellowblue.io/sync-iframe?gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.coo
Source: chromecache_492.2.dr	String found in binary or memory: https://cs.admanmedia.com/sync/minute_media?gdpr=
Source: chromecache_1142.2.dr	String found in binary or memory: https://cs.admanmedia.com/sync/minute_media?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=
Source: chromecache_1076.2.dr	String found in binary or memory: https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid
Source: chromecache_901.2.dr	String found in binary or memory: https://cs.media.net/cksync?cs=30&type=vdz&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fs
Source: chromecache_796.2.dr	String found in binary or memory: https://cs.media.net/cksync?cs=45&type=ku&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fsync.kueezrtb.c
Source: chromecache_492.2.dr	String found in binary or memory: https://cs.media.net/cksync?cs=82&type=mim&gdpr=
Source: chromecache_1142.2.dr	String found in binary or memory: https://csync.loopme.me/?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=1&pubid=11555&redir
Source: chromecache_995.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11364&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmed
Source: chromecache_910.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11466&redirect=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_
Source: chromecache_492.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11555&gdpr=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://cw.addthis.com/t.gif?pid=46&pdid=
Source: chromecache_819.2.dr	String found in binary or memory: https://d-code.liadm.com/did-004d.min.js
Source: chromecache_836.2.dr	String found in binary or memory: https://d.agkn.com/pixel/8538/?che=66226deda9076d75f64217de5863594d&col=262917
Source: chromecache_1098.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODI0MTY1OC90LzA/url/https%3A%2F%2Fids.ad.gt%2Fapi%2Fv
Source: chromecache_758.2.dr	String found in binary or memory: https://d37unsldgykj8z.cloudfront.net/ara.js
Source: chromecache_1005.2.dr, chromecache_825.2.dr	String found in binary or memory: https://d3lcz8vpax4lo2.cloudfront.net/files/instibid/
Source: chromecache_775.2.dr	String found in binary or memory: https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded_nologo/36252507/36252507-167285910
Source: chromecache_1005.2.dr, chromecache_825.2.dr	String found in binary or memory: https://dashboard.insticator.com
Source: chromecache_1005.2.dr, chromecache_825.2.dr	String found in binary or memory: https://df80k0z3fi8zg.cloudfront.net/files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=152416&dpuuid=
Source: chromecache_1098.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=348447&dpuuid=
Source: chromecache_1076.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
Source: chromecache_875.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_492.2.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&redir=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid
Source: chromecache_901.2.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&redir=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fpa
Source: chromecache_995.2.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=
Source: chromecache_470.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=2711&xuid=k-9v3FxOm8TG6iSewK5gxT49SGTn61hu08k-rjXg&dongle=013b
Source: chromecache_950.2.dr	String found in binary or memory: https://end-user-profile.instiengage.com/end-user-profile/loader.js
Source: chromecache_1005.2.dr, chromecache_825.2.dr	String found in binary or memory: https://event.insticator.com/v1/event
Source: chromecache_470.2.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-GFoZHem8TG6iSewK5gxT49SGTn7F
Source: chromecache_1035.2.dr	String found in binary or memory: https://f.fontdeck.com/s/css/js/
Source: chromecache_1035.2.dr	String found in binary or memory: https://fast.fonts.net/jsapi
Source: chromecache_972.2.dr, chromecache_775.2.dr	String found in binary or memory: https://feeds.sounder.fm/11059/rss.xml
Source: chromecache_1035.2.dr	String found in binary or memory: https://fonts.googleapis.com/css
Source: chromecache_1151.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_463.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_527.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Hind
Source: chromecache_743.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Playfair
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRDf40uYVKw.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRDf40ugVKxGv.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRDf40vQVKxGv.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoREP-0uYVKw.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoREP-0ugVKxGv.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoREP-0vQVKxGv.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRG_50uYVKw.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRG_50ugVKxGv.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRG_50vQVKxGv.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwTs5juQtsyLLR5jN4cxBEoTI7ax9k0.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwTs5juQtsyLLR5jN4cxBEoTJLax9k0.woff2)
Source: chromecache_524.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hindsiliguri/v12/ijwTs5juQtsyLLR5jN4cxBEoTJzaxw.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTXt7A
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTXtHA
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTXtXA
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTXt_A
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_766.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_950.2.dr	String found in binary or memory: https://geoip.instiengage.com/json/
Source: chromecache_1119.2.dr	String found in binary or memory: https://github.com/fat/bean
Source: chromecache_683.2.dr, chromecache_820.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_551.2.dr	String found in binary or memory: https://github.com/prebid/Shared-id-v2/
Source: chromecache_922.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_922.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_1002.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_683.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_689.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_873.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_873.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://gum.criteo.com/sid/json?origin=prebid
Source: chromecache_470.2.dr	String found in binary or memory: https://gum.criteo.com/sync?c=4&r=1&a=1&u=https://tags.bluekai.com/site/29001/sync?3rdpartyuserid=%4
Source: chromecache_470.2.dr	String found in binary or memory: https://gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid
Source: chromecache_470.2.dr	String found in binary or memory: https://gum.criteo.com/sync?c=9&r=1&a=1&u=https%3A%2F%2Faa.agkn.com%2Fadscores%2Fg.pixel%3Fsid%3D921
Source: chromecache_1005.2.dr, chromecache_825.2.dr	String found in binary or memory: https://h99w9l39sa.execute-api.us-east-1.amazonaws.com/prod
Source: chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://hb.undertone.com/hb
Source: chromecache_470.2.dr	String found in binary or memory: https://hb.yahoo.net/cksync.php?cs=1&type=58301&ovsid=k-pqCw--m8TG6iSewK5gxT49SGTn7UQBFc2i4rzA
Source: chromecache_477.2.dr, chromecache_1068.2.dr	String found in binary or memory: https://hud.crazyegg.com
Source: chromecache_470.2.dr	String found in binary or memory: https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-vgiFeum8TG6iSewK5gxT49SGTn4RW7SNc-VX1g
Source: chromecache_875.2.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZiJtysAoIp0AACTzAsBeOAAA%262584&gpdr
Source: chromecache_995.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dappnexus%26n
Source: chromecache_473.2.dr, chromecache_706.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba
Source: chromecache_612.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f058
Source: chromecache_470.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://ib.adnxs.com/getuidnb?https://usr.undertone.com/userPixel/sync?partner=appnexus&uid=$UID
Source: chromecache_470.2.dr	String found in binary or memory: https://ib.adnxs.com/setuid?entity=52&code=k-Bj-t7-m8TG6iSewK5gxT49SGTn7MuDce4QToXg
Source: chromecache_907.2.dr	String found in binary or memory: https://id.a-mx.com/sync/
Source: chromecache_473.2.dr, chromecache_612.2.dr, chromecache_706.2.dr	String found in binary or memory: https://id.a-mx.com/u?&gdpr=
Source: chromecache_1178.2.dr	String found in binary or memory: https://id.rlcdn.com/709996.gif
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_698.2.dr	String found in binary or memory: https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=
Source: chromecache_730.2.dr, chromecache_701.2.dr	String found in binary or memory: https://id5.io/
Source: chromecache_1178.2.dr	String found in binary or memory: https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=2df96876-d96c
Source: chromecache_1098.2.dr	String found in binary or memory: https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3D
Source: chromecache_1098.2.dr	String found in binary or memory: https://ids.ad.gt/api/v1/g_hosted?id=
Source: chromecache_1098.2.dr	String found in binary or memory: https://ids.ad.gt/api/v1/halo_match?id=
Source: chromecache_1098.2.dr	String found in binary or memory: https://ids.ad.gt/api/v1/ip_match?id=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://idsync.rlcdn.com/403716.gif?partner_uid=
Source: chromecache_1098.2.dr	String found in binary or memory: https://image2.pubmatic.com/AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match
Source: chromecache_1142.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&ismms2s=1&p=161683&pu=https%3A%2F%
Source: chromecache_995.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=157577&gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_612.2.dr, chromecache_706.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=
Source: chromecache_901.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2
Source: chromecache_600.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=1YNN&pu=https%
Source: chromecache_814.2.dr, chromecache_1101.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-serve
Source: chromecache_670.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.y
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160318&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pu
Source: chromecache_492.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=161683&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs.minut
Source: chromecache_796.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=162110&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fsync.kuee
Source: chromecache_472.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=162110&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fsync.kue
Source: chromecache_641.2.dr	String found in binary or memory: https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=100366&q=80&r=0&u=https%3A%2F%
Source: chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr	String found in binary or memory: https://imageproxy.us.criteo.net/img/img?h=124&m=0&partner=91644&q=80&r=0&u=https%3A%2F%2Fstatic.us5
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_463.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/fledge_vast_player.html?adTagUrl=
Source: chromecache_463.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/simid/simid_trueview_%s.html
Source: chromecache_642.2.dr, chromecache_750.2.dr	String found in binary or memory: https://interactiveadvertisingbureau.github.io/Open-Measurement-SDKJS/iframes.html#om-sdk-js-session
Source: chromecache_1015.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_743.2.dr	String found in binary or memory: https://js.gumgum.com/services.js
Source: chromecache_1055.2.dr, chromecache_435.2.dr, chromecache_907.2.dr	String found in binary or memory: https://lexicon.33across.com/v1/envelope
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://loadm.exelator.com/load/?p=204&g=1145&j=0&utid=
Source: chromecache_1177.2.dr	String found in binary or memory: https://ls.skimresources.com/api
Source: chromecache_1111.2.dr	String found in binary or memory: https://maps-api-ssl.google.com/maps?jsapiRedirect=true&file=googleapi
Source: chromecache_1111.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?jsapiRedirect=true
Source: chromecache_875.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale?gdpr=0
Source: chromecache_1098.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_844.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_1055.2.dr, chromecache_435.2.dr, chromecache_907.2.dr	String found in binary or memory: https://match.adsrvr.org/track/rid?ttd_pid=
Source: chromecache_910.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/113?gdpr=0
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_698.2.dr	String found in binary or memory: https://match.justpremium.com/match/gg?ex_uid=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: chromecache_459.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/syn
Source: chromecache_492.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=3r9HMldH&gdpr=0&gdpr_consent=
Source: chromecache_796.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=SzhEXqCN&gdpr=&gdpr_consent=&us_privacy=
Source: chromecache_472.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=SzhEXqCN&gdpr=0&gdpr_consent=&us_privacy=1YNN
Source: chromecache_641.2.dr	String found in binary or memory: https://measurement-api.criteo.com/register-source?impressionId=66226dd912a240cc09dd14c999926558&par
Source: chromecache_715.2.dr	String found in binary or memory: https://measurement-api.criteo.com/register-source?impressionId=66226ded5a542777147c2ebd54eb74ad&par
Source: chromecache_836.2.dr	String found in binary or memory: https://measurement-api.criteo.com/register-source?impressionId=66226deda9076d75f64217de5863594d&par
Source: chromecache_495.2.dr	String found in binary or memory: https://measurement-api.criteo.com/register-source?impressionId=66226df5169b9ae6df86e04ccabef000&par
Source: chromecache_647.2.dr	String found in binary or memory: https://measurement-api.criteo.com/register-source?impressionId=66226e1072c769f074dfe92d46a8fff1&par
Source: chromecache_641.2.dr	String found in binary or memory: https://metrics.getrockerbox.com/track/v4?source=basics-wallet&tier_one=criteo&tier_two=343905&tier_
Source: chromecache_885.2.dr, chromecache_682.2.dr	String found in binary or memory: https://notice.sp-prod.net/privacy-manager/index.html?message_id=165852
Source: chromecache_1142.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?ismms2s=1&pubId=765b4e6bb9c8438
Source: chromecache_814.2.dr, chromecache_1101.2.dr, chromecache_670.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=
Source: chromecache_492.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=765b4e6bb9c8438
Source: chromecache_995.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?redir=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Donet
Source: chromecache_1098.2.dr	String found in binary or memory: https://p.ad.gt/api/v1/p/450
Source: chromecache_910.2.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=2079&gdpr=0
Source: chromecache_965.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_1127.2.dr, chromecache_846.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_1002.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_572.2.dr, chromecache_429.2.dr, chromecache_783.2.dr, chromecache_543.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_572.2.dr, chromecache_429.2.dr, chromecache_783.2.dr, chromecache_543.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_572.2.dr, chromecache_429.2.dr, chromecache_783.2.dr, chromecache_543.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_543.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_572.2.dr, chromecache_429.2.dr, chromecache_783.2.dr, chromecache_543.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_586.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_683.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_794.2.dr, chromecache_1188.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_1127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_846.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_733.2.dr, chromecache_463.2.dr, chromecache_1151.2.dr, chromecache_798.2.dr, chromecache_1181.2.dr, chromecache_965.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_684.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_463.2.dr, chromecache_689.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_683.2.dr, chromecache_1002.2.dr, chromecache_537.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_1108.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_1127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_846.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_1151.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_470.2.dr	String found in binary or memory: https://partner.mediawallahscript.com/?account_id=1043&partner_id=1048&uid=k-OOHgrOm8TG6iSewK5gxT49S
Source: chromecache_886.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=125&redir=https%3A%2F%2Fusr.undertone.com%2FuserP
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://pixel.advertising.com/ups/58293/sync?&gdpr=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://pixel.advertising.com/ups/58293/sync?&gdpr=&gdpr_consent=&redir=true
Source: chromecache_743.2.dr	String found in binary or memory: https://pixel.quantserve.com/pixel/p-2bXhGE9g7fCno.gif
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=12776
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=12776&gdpr=
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_612.2.dr, chromecache_706.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr=
Source: chromecache_470.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-r9-JfOm8TG6iSewK5gxT49SGTn4oppGXe3opv
Source: chromecache_1098.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3185&partner_device_id=
Source: chromecache_700.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3416&partner_device_id=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3484&partner_device_id=
Source: chromecache_478.2.dr	String found in binary or memory: https://pl.connatix.com
Source: chromecache_743.2.dr	String found in binary or memory: https://platform.twitter.com/widgets.js
Source: chromecache_1015.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_598.2.dr	String found in binary or memory: https://player.adtelligent.com/outstream-unit/2.01/outstream.min.js
Source: chromecache_875.2.dr, chromecache_1150.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_i
Source: chromecache_844.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?st=ShareThrough&rurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_907.2.dr	String found in binary or memory: https://pre.ads.justpremium.com/v/1.0/t/sync?_c=a
Source: chromecache_907.2.dr	String found in binary or memory: https://pre.ads.justpremium.com/v/2.0/t/xhr?i=
Source: chromecache_995.2.dr	String found in binary or memory: https://prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/article-sentiment-scripts/sentiments.js
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/article-sentiment-scripts/vendors.js
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/ceu-code/
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/product-loader-script/infiniteScroll.js
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/product-loader-script/previewModeNotice.js
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/rating-product-scripts/sharedRatings.js
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/rating-product-scripts/vendors.js
Source: chromecache_950.2.dr	String found in binary or memory: https://product.instiengage.com/trending-now-scripts/unit.js
Source: chromecache_950.2.dr	String found in binary or memory: https://profile.instiengage.com/profile/loader.js
Source: chromecache_826.2.dr, chromecache_1163.2.dr	String found in binary or memory: https://protected-by.clarium.io
Source: chromecache_1002.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_463.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/ata-qr
Source: chromecache_470.2.dr	String found in binary or memory: https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-IkPK5em8TG6iSewK5gxT49SGTn4MNnOG2OW4Fg
Source: chromecache_1177.2.dr	String found in binary or memory: https://r.skimresources.com/api/
Source: chromecache_749.2.dr, chromecache_1113.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_829.2.dr	String found in binary or memory: https://reports.intentiq.com
Source: chromecache_819.2.dr	String found in binary or memory: https://resources.infolinks.com/static/id5.js
Source: chromecache_819.2.dr	String found in binary or memory: https://resources.infolinks.com/static/iquid-01.js
Source: chromecache_1150.2.dr	String found in binary or memory: https://router.infolinks.com/dyn/ix-usync?uid=ZiJtysAoIp0AACTzAsBeOAAA%262584
Source: chromecache_970.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F
Source: chromecache_470.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-OMVKZOm8TG6iSewK5gxT49SGTn73
Source: chromecache_492.2.dr	String found in binary or memory: https://rtb.mfadsrvr.com/sync?ssp=minutemedia
Source: chromecache_1055.2.dr, chromecache_435.2.dr	String found in binary or memory: https://rtb.openx.net/openrtbb/prebidjs
Source: chromecache_1178.2.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_612.2.dr, chromecache_706.2.dr, chromecache_1049.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?&gdpr=
Source: chromecache_995.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fs
Source: chromecache_875.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_459.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=admedia.com&id=b775784632323f34fcd70d90833d7507
Source: chromecache_1044.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=gg.com&id=u_bd73a985-3ef7-4416-a679-3a9309181613
Source: chromecache_492.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=minutemedia.com&id=olBHBm7-Cp_mm
Source: chromecache_670.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=rise.com&id=P2oHoy7zC
Source: chromecache_844.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=sharethrough.com&id=7456771a-49ee-4e2a-b013-668de61e15dd
Source: chromecache_901.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=vidazoo.com&id=a2cfff08-e3a1-d49f-dccd-86df76cdf804
Source: chromecache_910.2.dr, chromecache_875.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?gdpr=0&ex=index.com&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB
Source: chromecache_986.2.dr, chromecache_582.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_n-Ogury_ppt_snb_cnv_n-nativo
Source: chromecache_638.2.dr, chromecache_583.2.dr, chromecache_1118.2.dr, chromecache_1158.2.dr, chromecache_451.2.dr, chromecache_1063.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minut
Source: chromecache_461.2.dr, chromecache_1027.2.dr, chromecache_690.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-adMediaV1_n-onetag_pm-db5_ym
Source: chromecache_644.2.dr, chromecache_699.2.dr, chromecache_1175.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuit
Source: chromecache_979.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-minuteMedia_pm-db5_n-Ogury_p
Source: chromecache_494.2.dr, chromecache_849.2.dr, chromecache_1116.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_pm-db5_ym_ppt_cnv
Source: chromecache_675.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-sharethrough_n-minuteMedia_p
Source: chromecache_875.2.dr	String found in binary or memory: https://s.company-target.com/s/ix?cm_dsp_id=18&us_privacy=&gdpr=0&gdpr_consent=&gpp=
Source: chromecache_1055.2.dr, chromecache_435.2.dr, chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://s.seedtag.com/c/hb/bid
Source: chromecache_1055.2.dr, chromecache_435.2.dr, chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://s.seedtag.com/se/hb/timeout
Source: chromecache_743.2.dr	String found in binary or memory: https://s.skimresources.com/js/93029X1547060.skimlinks.js
Source: chromecache_463.2.dr, chromecache_1026.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_463.2.dr, chromecache_1026.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_629.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/studio/cached_libs/gsap_3.11.5_min.js
Source: chromecache_463.2.dr, chromecache_1002.2.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_758.2.dr	String found in binary or memory: https://s2.paa-reporting-advertising.amazon/paa/rf_module_registration.html
Source: chromecache_527.2.dr	String found in binary or memory: https://s3.castbox.fm/app/castbox/static/css/slick.min.css
Source: chromecache_527.2.dr	String found in binary or memory: https://s3.castbox.fm/app/castbox/static/images/logo_120.png
Source: chromecache_527.2.dr	String found in binary or memory: https://s3.castbox.fm/webstatic/js/manifest.173670c1.js
Source: chromecache_527.2.dr	String found in binary or memory: https://s3.castbox.fm/webstatic/js/page.player.e8375b72.js
Source: chromecache_527.2.dr	String found in binary or memory: https://s3.castbox.fm/webstatic/js/page.vendor.6f338e46.js
Source: chromecache_1056.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/b2?
Source: chromecache_1056.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/b?
Source: chromecache_743.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?c1=7&c2=31732370&c3=874156489745619&cv=2.0&cj=1
Source: chromecache_832.2.dr	String found in binary or memory: https://script.4dex.io/a/latest/adagio.js
Source: chromecache_477.2.dr, chromecache_1068.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0120/9357/site/SITENAME.json
Source: chromecache_477.2.dr, chromecache_1068.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/common-scripts/6735f9594d6bb8a4f1fe56c6b3e21cf5.js
Source: chromecache_477.2.dr, chromecache_1068.2.dr	String found in binary or memory: https://script.crazyegg.com/scripts/hud
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=12776&gdpr=
Source: chromecache_995.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17888&endpoint=us-east
Source: chromecache_1044.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_796.2.dr, chromecache_472.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=kueez&endpoint=us-east
Source: chromecache_492.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=minute_media&endpoint=us-east
Source: chromecache_600.2.dr, chromecache_901.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=vidazoo&endpoint=us-east
Source: chromecache_492.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21484%26gdpr%3D
Source: chromecache_970.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26pa
Source: chromecache_600.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnex
Source: chromecache_901.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dappnexus
Source: chromecache_796.2.dr, chromecache_472.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-x
Source: chromecache_1098.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://ids.ad.gt/api/v1/match?id=
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_973.2.dr	String found in binary or memory: https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js
Source: chromecache_1095.2.dr, chromecache_840.2.dr	String found in binary or memory: https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js
Source: chromecache_1002.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_1002.2.dr, chromecache_820.2.dr, chromecache_537.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_950.2.dr, chromecache_743.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: chromecache_978.2.dr	String found in binary or memory: https://sided-41931.firebaseio.com
Source: chromecache_1177.2.dr	String found in binary or memory: https://sl-sentry.skimlinks.com
Source: chromecache_885.2.dr, chromecache_682.2.dr	String found in binary or memory: https://sourcepoint.mgr.consensu.org/tcfv2
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_492.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=59&gdpr=
Source: chromecache_1142.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=59&gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%
Source: chromecache_901.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?gdpr=0&gdpr_consent=&callerId=106&redirectUri=https%3A%2F
Source: chromecache_995.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_796.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002ODU4HAAX&us_privacy=&ru=https%3A%2F%2Fsy
Source: chromecache_472.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002ODU4HAAX&us_privacy=1YNN&ru=https%3A%2F%
Source: chromecache_492.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs.minutemedia-prebid.com%2F
Source: chromecache_995.2.dr	String found in binary or memory: https://ssp.api.tappx.com/cs/usync?idmn=1060&type=iframe&id=&auxuid=
Source: chromecache_1142.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?ismms2s=1&partner=minutemedia&r=https%3A%2F%2Fcs-rtb.minutemedia
Source: chromecache_472.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?partner=kueez-zeta&gdpr=0&us_privacy=1YNN&gdpr_consent=&r=https%
Source: chromecache_492.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?r=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21495%26i
Source: chromecache_1098.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/ium?sourceid=15&uid=
Source: chromecache_653.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?s=197137&gdpr=
Source: chromecache_492.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatchredir?s=196326&cb=https%3A%2F%2Fcs.minutemedia-prebid.com%
Source: chromecache_473.2.dr, chromecache_612.2.dr, chromecache_706.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=
Source: chromecache_995.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=194648&gdpr=0&gdpr_consent=&us_privacy=
Source: chromecache_743.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793
Source: chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr	String found in binary or memory: https://static.criteo.net/design/dt/91644/5409671/6e29e5204e824421ba7a64a4b6e77dad_untitled_design_(
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-cyrillic-ext.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-cyrillic.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-greek-ext.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-greek.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-latin-ext.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-latin.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400-vietnamese.woff2)
Source: chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr	String found in binary or memory: https://static.criteo.net/design/googlefont/roboto/roboto-400.css
Source: chromecache_641.2.dr, chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr, chromecache_836.2.dr	String found in binary or memory: https://static.criteo.net/flash/icon/adchoices_en.svg
Source: chromecache_641.2.dr, chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr, chromecache_836.2.dr	String found in binary or memory: https://static.criteo.net/flash/icon/back_button2.svg
Source: chromecache_641.2.dr, chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr, chromecache_836.2.dr	String found in binary or memory: https://static.criteo.net/flash/icon/close_button.svg
Source: chromecache_641.2.dr, chromecache_495.2.dr, chromecache_715.2.dr, chromecache_647.2.dr, chromecache_836.2.dr	String found in binary or memory: https://static.criteo.net/flash/icon/privacy_small.svg
Source: chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_628.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_463.2.dr	String found in binary or memory: https://support.google.com/ads/answer/10923348
Source: chromecache_470.2.dr	String found in binary or memory: https://sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-9HqvR-m8TG6iSewK5gxT49SGTn4Li
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_698.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/URnmbSKM?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%
Source: chromecache_1150.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%
Source: chromecache_970.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/gjIEMT18?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fr
Source: chromecache_1098.2.dr	String found in binary or memory: https://sync.1rx.io/usersync/audigent/0?dspret=1&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Funruly%3
Source: chromecache_1142.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?ismms2s=1&sub=sportority
Source: chromecache_796.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=kueez&us_privacy=&gdpr=&gdpr_consent=
Source: chromecache_472.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=kueez&us_privacy=1YNN&gdpr=0&gdpr_consent=
Source: chromecache_492.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=sportority
Source: chromecache_814.2.dr, chromecache_1101.2.dr, chromecache_670.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=typeaholdings
Source: chromecache_1098.2.dr	String found in binary or memory: https://sync.colossusssp.com/ebfa23da174faa55634171c5e49d0152.gif?puid=
Source: chromecache_796.2.dr	String found in binary or memory: https://sync.cootlogix.com/api/user?partnerId=kueez&userId=5f2f51a7-e226-bbae-76c9-2d8714f31edc&gdpr
Source: chromecache_1142.2.dr	String found in binary or memory: https://sync.cootlogix.com/api/user?partnerId=minutemedia&gdpr=0&gdpr_consent=&us_privacy=&userId=ol
Source: chromecache_1101.2.dr	String found in binary or memory: https://sync.cootlogix.com/api/user?partnerId=rise&gdpr=0&gdpr_consent=&us_privacy=&userId=P2oHoy7zC
Source: chromecache_492.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fc
Source: chromecache_1098.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?https://ids.ad.gt/api/v1/son_match?id=
Source: chromecache_796.2.dr, chromecache_472.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez
Source: chromecache_829.2.dr	String found in binary or memory: https://sync.intentiq.com
Source: chromecache_1178.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_975.2.dr, chromecache_928.2.dr, chromecache_1033.2.dr, chromecache_1044.2.dr, chromecache_698.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_907.2.dr	String found in binary or memory: https://sync.kueezrtb.com/api/sync/iframe/
Source: chromecache_907.2.dr	String found in binary or memory: https://sync.kueezrtb.com/api/sync/image/
Source: chromecache_901.2.dr	String found in binary or memory: https://sync.kueezrtb.com/api/user/html/62ce79e7dd15099534ae5e04?redirect=https%3A%2F%2Fsync.cootlog
Source: chromecache_492.2.dr	String found in binary or memory: https://sync.resetdigital.co/csync?pid=minutemedia&redir=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fc
Source: chromecache_1098.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?url=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fsmart_match%3Fid%3D
Source: chromecache_1044.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_1178.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=268
Source: chromecache_1150.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=68
Source: chromecache_1151.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_1177.2.dr	String found in binary or memory: https://t.skimresources.com/api/v2
Source: chromecache_598.2.dr	String found in binary or memory: https://tag.1rx.io/rmp/
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://tags.bluekai.com/site/15597?id=
Source: chromecache_1095.2.dr, chromecache_704.2.dr, chromecache_840.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/
Source: chromecache_598.2.dr	String found in binary or memory: https://targeting.unrulymedia.com/unruly_prebid
Source: chromecache_1002.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_1044.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_1098.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=50242&puid=
Source: chromecache_846.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_846.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_477.2.dr, chromecache_1068.2.dr	String found in binary or memory: https://tracking.crazyegg.com/clock
Source: chromecache_600.2.dr, chromecache_901.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393
Source: chromecache_492.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=29975467-6f1b-4e06-b545-920b22ea49b2&gdpr=0&gdpr_consent=&r=https%3A
Source: chromecache_1098.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=998eaf06-9905-4eae-9e26-9fac75960c53&r=https%3A%2F%2Fids.ad.gt%2Fapi
Source: chromecache_796.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=&gdpr_consent=&us_privacy=
Source: chromecache_472.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy
Source: chromecache_1055.2.dr, chromecache_435.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/pd
Source: chromecache_829.2.dr	String found in binary or memory: https://ucgfk6g6s7.execute-api.us-east-1.amazonaws.com
Source: chromecache_910.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_i
Source: chromecache_910.2.dr	String found in binary or memory: https://um4.eqads.com/um/cs?gdpr=0
Source: chromecache_1055.2.dr, chromecache_435.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58545/occ
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58545/occ?gdpr=
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_706.2.dr, chromecache_1049.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58570/occ?uid=a662aef0-1110-44c8-b99d-2acba4a5db18
Source: chromecache_612.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58570/occ?uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0
Source: chromecache_1044.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=fba3d144-1026-4d31-a758-943b9545e305&r=https://usr.undertone.com/
Source: chromecache_1035.2.dr	String found in binary or memory: https://use.typekit.net
Source: chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=1&of=2
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=1&of=2&gdpr=
Source: chromecache_907.2.dr, chromecache_598.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncOne?id=2&of=2
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncr?gdpr=
Source: chromecache_1020.2.dr, chromecache_886.2.dr	String found in binary or memory: https://usr.undertone.com/userPixel/syncr?gdpr=&gdprstr=
Source: chromecache_698.2.dr	String found in binary or memory: https://va-lb.gumgum.com/assets/imp/logging?reqId=0f37e115-ebd6-48bf-a5ff-c2219233ef08
Source: chromecache_928.2.dr	String found in binary or memory: https://va-lb.gumgum.com/assets/imp/logging?reqId=581a5a16-080e-487d-9098-0875bd123ead
Source: chromecache_975.2.dr	String found in binary or memory: https://va-lb.gumgum.com/assets/imp/logging?reqId=ae2a248f-d891-40c1-82c0-e6e3f56a4727
Source: chromecache_1033.2.dr	String found in binary or memory: https://va-lb.gumgum.com/assets/imp/logging?reqId=b04b991a-07d0-4d85-8276-27bd9407659f
Source: chromecache_492.2.dr	String found in binary or memory: https://visitor.omnitagjs.com/visitor/bsync?uid=a1aca1d7a7acd80e26595e82223f1e6f&name=MinuteMedia&gd
Source: chromecache_470.2.dr	String found in binary or memory: https://visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=
Source: chromecache_901.2.dr	String found in binary or memory: https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%
Source: chromecache_836.2.dr	String found in binary or memory: https://widget.us5.us.criteo.com/dis/dis.aspx?pu=104452&cb=66226deda9076d75f64217de5863594d&r=https%
Source: chromecache_733.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_846.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_629.2.dr	String found in binary or memory: https://www.google.com/
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_527.2.dr	String found in binary or memory: https://www.google.com/adsense/search/ads.js
Source: chromecache_743.2.dr	String found in binary or memory: https://www.google.com/jsapi
Source: chromecache_846.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_733.2.dr, chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_572.2.dr, chromecache_429.2.dr, chromecache_783.2.dr, chromecache_543.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_733.2.dr, chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_542.2.dr, chromecache_628.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_743.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-TZN144ZY3T
Source: chromecache_743.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-86316-1
Source: chromecache_1111.2.dr	String found in binary or memory: https://www.gstatic.cn/charts/%
Source: chromecache_1111.2.dr	String found in binary or memory: https://www.gstatic.cn/charts/debug/%
Source: chromecache_1111.2.dr	String found in binary or memory: https://www.gstatic.com/charts/%
Source: chromecache_1111.2.dr	String found in binary or memory: https://www.gstatic.com/charts/debug/%
Source: chromecache_978.2.dr	String found in binary or memory: https://www.gstatic.com/firebasejs/8.3.0/firebase-analytics.js
Source: chromecache_978.2.dr	String found in binary or memory: https://www.gstatic.com/firebasejs/8.3.0/firebase-app.js
Source: chromecache_1111.2.dr	String found in binary or memory: https://www.gstatic.com/inputtools/js/ita/inputtools_3.js
Source: chromecache_743.2.dr	String found in binary or memory: https://www.instagram.com/parishilton/
Source: chromecache_1015.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com
Source: chromecache_743.2.dr, chromecache_897.2.dr	String found in binary or memory: https://www.justjared.com/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2023/12/07/taylor-swift-kim-kardashian-complete-feud-timeline/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/01/26/chris-pratt-to-reunite-with-wanted-director-on-new-sci-fi-thril
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/02/04/fans-recall-taylor-swift-phoebe-bridgers-exes-joe-alwyn-paul-me
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/4-daytime-emmy-categories-announced-ahead-of-full-list-of-2024-
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/fallout-renewed-for-season-2-at-prime-video-after-massive-strea
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/giancarlo-esposito-considered-plotting-his-own-murder-to-commit
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/idris-elba-reveals-if-he-would-ever-join-the-cast-of-a-future-b
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/is-andy-cohen-leaving-bravo-network-responds-to-rumor-star-is-m
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/kate-beckinsale-released-from-hospital-hints-at-what-caused-her
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/nichelle-lewis-makes-broadway-debut-in-the-wiz-gets-support-fro
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/pretty-little-liars-summer-school-cast-revealed-12-stars-confir
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/suffs-broadway-musical-gets-star-studded-crowd-on-opening-night
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/taylor-swift-matty-healy-relationship-timeline-from-first-sight
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/transformers-one-trailer-debuts-chris-hemsworth-brian-tyree-hen
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/18/zendaya-goes-for-pantsless-look-at-kimmel-in-chic-suit-jacket/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/chris-pratt-gets-injured-on-mercy-set-shares-photo-of-his-wound
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/every-lyric-about-matty-healy-taylor-swift-seemingly-sings-abou
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/fortnight-lyrics-whos-taylor-swift-singing-about-on-new-single-
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/how-to-stream-taylor-swifts-tortured-poets-department-album-for
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/kourtney-kardashian-shuts-down-fan-who-assumed-she-wouldnt-like
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/power-book-ii-ghost-first-look-photos-see-michael-ealy-golden-b
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/sia-paris-hilton-team-up-for-new-song-fame-wont-love-you-listen
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/taylor-swift-drops-15-more-songs-with-anthology-version-of-new-
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/taylor-swift-seemingly-tells-fans-not-to-avenge-her-against-exe
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/2024/04/19/thank-you-aimee-lyrics-is-taylor-swifts-song-about-kim-kardashi
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/advertising/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/feed/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/page/2/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/page/3/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/page/4/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/page/5/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/bikini/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/chris-pratt/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/eg
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/eg/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/extended/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/first-listen/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/joe-alwyn/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/kanye-west/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/khloe-kardashian/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/kim-kardashian/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/kourtney-kardashian/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/matty-healy/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/music/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/paris-hilton/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/sia/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/slideshow/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/taylor-swift/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/tags/the-tortured-poets-department/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/wp-content/plugins/pagenavi/pagenavi-css.css
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/wp-includes/wlwmanifest.xml
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/xmlrpc.php
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjared.com/xmlrpc.php?rsd
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/10/walker-scobell-meets-fellow-percy-jackson-actor-logan-lerman/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/12/ariana-greenblatt-honored-with-rising-star-at-cinemacon-award
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/12/meg-donnelly-talks-zombies-future-teases-upcoming-4th-movie/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/12/sabrina-carpenter-reveals-why-adventures-in-babysitting-role-
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/12/zombies-4-star-freya-skye-debuts-cover-of-selena-gomez-the-sc
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/16/ariana-greenblatt-joins-the-cast-of-now-you-see-me-3/
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/16/kit-connor-to-make-broadway-debut-in-romeojuliet-opposite-rac
Source: chromecache_743.2.dr	String found in binary or memory: https://www.justjaredjr.com/2024/04/17/iain-armitage-reflects-on-first-day-of-young-sheldon-after-wr
Source: chromecache_798.2.dr, chromecache_965.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_1120.2.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_965.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_995.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dgrid%
Source: chromecache_600.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dgri
Source: chromecache_901.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dgrid%
Source: chromecache_796.2.dr, chromecache_472.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkuee
Source: chromecache_470.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?dsp_id=46&user_id=k-5vClaem8TG6iSewK5gxT49SGTn7y4lZmI4MhIw&expires=30
Source: chromecache_755.2.dr, chromecache_473.2.dr, chromecache_1157.2.dr, chromecache_706.2.dr, chromecache_1049.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr=
Source: chromecache_612.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adaptmx&user_id=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&gdpr=
Source: chromecache_1044.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_
Source: chromecache_910.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=index&gdpr=0
Source: chromecache_600.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=vidazoo&gdpr=0&gdpr_consent=&us_privacy=1YNN

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 52186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 51651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 52506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 51687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 52302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 52198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 52137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52516
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52519
Source: unknown	Network traffic detected: HTTP traffic on port 52011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52510
Source: unknown	Network traffic detected: HTTP traffic on port 52326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52520
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 51815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 52047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 51933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 51827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52507
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52501
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52500
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52474
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52478
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 52146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 52387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52481
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 51840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52487
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52491
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52492
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 52215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52496
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52438
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52432
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52434
Source: unknown	Network traffic detected: HTTP traffic on port 51942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52449
Source: unknown	Network traffic detected: HTTP traffic on port 52109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52444
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52445
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52459
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 51335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52457
Source: unknown	Network traffic detected: HTTP traffic on port 52363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52458
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52456
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52461
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52464
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52470
Source: unknown	Network traffic detected: HTTP traffic on port 52099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51970 -> 443

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.5:49764 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@114/1472@1069/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.justjared.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4716 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=19136 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4716 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=19136 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.194.66.159	true	false	high
rtb-csync-use1.smartadserver.com	23.105.12.120	true	false	high
global.px.quantserve.com	192.184.67.143	true	false	high
ssum.casalemedia.com	172.64.151.101	true	false	high
us-east-eb2.3lift.com	52.223.22.214	true	false	high
metrics.getrockerbox.com	104.26.9.177	true	false	unknown
ids.cdnwidget.com	34.160.20.10	true	false	unknown
rtb.openx.net	35.227.252.103	true	false	high
platform.twitter.map.fastly.net	151.101.12.157	true	false	unknown
1.cpm.ak-is2.net	174.137.133.32	true	false	unknown
bttrack.com	192.132.33.67	true	false	unknown
h89ny7jlb.puzztake.com	45.76.249.237	true	false	unknown
dheoaz9svaqd1.cloudfront.net	18.244.202.102	true	false	high
p-kube.skimresources.com	35.190.91.160	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	54.224.27.195	true	false	high
vin2.pbs.ovhnextmillmedia.com	15.204.241.81	true	false	unknown
r.casalemedia.com	172.64.151.101	true	false	high
api.intentiq.com	18.164.78.74	true	false	unknown
openrtb-dc11.axonix.com	155.204.117.11	true	false	high
syncelb-240036109.us-east-1.elb.amazonaws.com	54.208.231.58	true	false	high
sync.intentiq.com	3.161.193.77	true	false	unknown
api-2-0.spot.im	54.230.253.33	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
bcp.crwdcntrl.net	44.196.251.236	true	false	high
match.adsrvr.org	35.71.131.137	true	false	high
gumgum.com	18.155.1.6	true	false	high
pagead-googlehosted.l.google.com	172.217.215.132	true	false	high
creativecdn.com	185.184.8.90	true	false	high
pugm-vac.pubmnet.com	8.28.7.81	true	false	unknown
syndicatedsearch.goog	142.250.105.102	true	false	unknown
m.deepintent.com	169.197.150.8	true	false	unknown
iad-2-apex.go.sonobi.com	69.166.1.32	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
d2ctznuk6ro1vp.cloudfront.net	18.244.202.104	true	false	high
aba.gumgum.com	18.244.202.20	true	false	high
d1ykf07e75w7ss.cloudfront.net	54.230.252.87	true	false	high
oajs.openx.net	34.120.135.53	true	false	high
ssum-sec.casalemedia.com	104.18.36.155	true	false	high
btlr-us-east-1.sharethrough.com	3.232.158.174	true	false	high
baitbaseball.com	34.160.169.226	true	false	unknown
config.aps.amazon-adsystem.com	13.33.4.96	true	false	high
view.cdnbasket.net	34.149.158.238	true	false	unknown
t.skimresources.com	35.201.67.47	true	false	high
d18q3505w6wzgu.cloudfront.net	3.161.163.34	true	false	high
d2tbszkvx1p56e.cloudfront.net	3.163.78.214	true	false	high
hb.yahoo.net	104.76.210.74	true	false	high
c.gumgum.com	18.160.18.21	true	false	high
www.googletagservices.com	74.125.136.156	true	false	high
id.crwdcntrl.net	54.87.122.38	true	false	high
i.ctnsnet.com	35.186.193.173	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.34	true	false	high
k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com	3.218.114.48	true	false	high
scontent.xx.fbcdn.net	31.13.65.7	true	false	high
api.rlcdn.com	34.107.165.188	true	false	high
cs1561.wpc.edgecastcdn.net	152.199.5.184	true	false	high
fp30c8.wpc.thetacdn.net	152.195.50.49	true	false	unknown
ara.paa-reporting-advertising.amazon	3.163.80.52	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	high
as-sec.casalemedia.com	172.64.151.101	true	false	high
k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com	52.20.181.233	true	false	high
ssp.ads.betweendigital.com	96.46.186.57	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
d1asnxkov2i2k7.cloudfront.net	18.164.78.7	true	false	high
gob-pairb-nje1.pubmnet.com	207.65.37.179	true	false	unknown
c6.eu-3-id5-sync.com	51.75.88.190	true	false	unknown
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	34.197.249.125	true	false	high
h7mzk9dlb.puzztake.com	204.48.22.20	true	false	unknown
cs41.wac.edgecastcdn.net	72.21.91.66	true	false	high
imageproxy.us5.vip.prod.criteo.net	74.119.117.23	true	false	high
media.amazon.map.fastly.net	151.101.193.16	true	false	unknown
ad-delivery.net	104.26.3.70	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
merequartz.com	34.110.253.203	true	false	unknown
s2.paa-reporting-advertising.amazon	18.155.1.65	true	false	unknown
c7.eu-4-id5-sync.com	51.75.89.23	true	false	unknown
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
protected-by.clarium.io	3.212.148.28	true	false	unknown
nginx-ingress.wunderkind.co	34.111.8.32	true	false	unknown
1x1.a-mo.net	54.243.52.226	true	false	unknown
xsync.iqzone.com	142.234.204.77	true	false	high
csm.us5.vip.prod.criteo.net	74.119.117.24	true	false	high
d3lcz8vpax4lo2.cloudfront.net	18.67.79.98	true	false	high
livepixel-production.bln.liveintent.com	52.44.75.209	true	false	high
na-ice.360yield.com	3.211.198.25	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	34.232.139.140	true	false	unknown
sync.1rx.io	69.194.240.13	true	false	high
idaas-ext.cph.liveintent.com	54.211.215.248	true	false	high
ssc.33across.com	34.149.20.76	true	false	high
mp.4dex.io	172.64.153.78	true	false	unknown
star-mini.c10r.facebook.com	31.13.66.35	true	false	high
1099493781.rsc.cdn77.org	89.187.171.27	true	false	unknown
everest.castbox.fm	54.65.26.44	true	false	high
gum.us5.vip.prod.criteo.com	74.119.117.17	true	false	high
page.cdnbasket.net	34.117.175.218	true	false	unknown
nydc1.outbrain.org	64.202.112.223	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	high
c3.eu-4-id5-sync.com	51.75.92.187	true	false	unknown
securepubads46.g.doubleclick.net	64.233.185.155	true	false	high
d1qs6g1uppzjpx.cloudfront.net	3.161.188.70	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://s.amazon-adsystem.com/ecm3?id=IhHYAPZHgyDtLY4rTVmqUZsu&ex=sovrn.com&gdpr=0&gdpr_consent=	false		high
https://events-ssc.33across.com/match?bidder_id=120&external_user_id=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ&ts=1713532391&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://visitor.omnitagjs.com/visitor/sync?is_cookie_sync_uid=true&uid=4246a50e6cf42e85f26c381a4b7701fb&name=CRITEO&visitor=ea463be1-6b44-4908-9fef-8b6e74e7dcff	false		high
https://sync.targeting.unrulymedia.com/csync/RX-dd40f750-a014-4531-a2f1-8878dd503e55-005?redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D43%26ts%3D123%26us_privacy%3D1---%26xu%3DRX-dd40f750-a014-4531-a2f1-8878dd503e55-005	false		high
https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyTwo_line2.svg	false		high
https://ts.amazon-adsystem.com/?s=%7B%22sourceid%22%3A%22600%22%2C%22sourcetype%22%3A%22dtb%22%2C%22traffictype%22%3A%22web%22%2C%22mediatype%22%3A%22display%22%7D&p=%7B%22srcName%22%3A%22CS%22%2C%22adId%22%3A%22593399596890441530%22%2C%22is3p%22%3Atrue%2C%22campaignId%22%3A%22582347282419143467%22%2C%22ep%22%3A%5B%22paa%22%2C%22ara%22%5D%2C%22creativeId%22%3A%22590904568646777949%22%2C%22bidId%22%3A%22uKZ9OkqnBPcLvCMjgR46yA%22%2C%22advertiserId%22%3A%22577874589498151894%22%2C%22clickDestnUrl%22%3A%22https%3A%2F%2Fdrinkag1.com%2Fen%22%7D	false		high
https://events-ssc.33across.com/match?bidder_id=30&external_user_id=LV6OX7LS-1U-G1TB&ts=1713532390&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://id5-sync.com/c/441/441/9/1.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy=	false		unknown
https://ssc-cms.33across.com/ps/?_=1713532413663.&ri=0010b00002ODU4HAAX&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1YNN&ru=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-33across%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN%26userId%3D33XUSERID33X	false		high
https://ad.360yield.com/server_match?partner_id=1934&r=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D253%26type%3Diframe%26id%3D%7BPUB_USER_ID%7D%26auxuid%3D	false		high
https://static.criteo.net/flash/icon/criteo_logo_2021.svg	false		high
https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0	false		high
https://router.infolinks.com/dyn/33a-usync?uid=212568969054924	false		high
https://ib.adnxs.com/getuid?%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D200784%26dsp%3D541704%26t%3Dimage%26uid%3D%24UID	false		high
https://rp.liadm.com/j?dtstmp=1713532380444&did=did-004d&se=e30&duid=4299a5cfa81b--01hvv7t88r5mk5z5grejsrt8f5&tv=v2.14.3&pu=https%3A%2F%2Fwww.justjared.com%2F&ext__pubcid=a59c0898-b4d5-4e01-b773-f0480b65a0cc&ext_IXWRAPPERLiveIntentIp=%7B%22t%22%3A1713532347944%2C%22d%22%3A%7B%22response%22%3A%22error%22%2C%22version%22%3A%221.1.1%22%2C%22data%22%3A%22response%20missing%20id%20and%2For%20keyID%22%7D%2C%22e%22%3A1713618747944%7D&us_privacy=1YNN&wpn=lc-bundle&gdpr=0&cd=.justjared.com&c=PHRpdGxlPkp1c3QgSmFyZWQ6IENlbGVicml0eSBOZXdzIGFuZCBHb3NzaXAgfCBFbnRlcnRhaW5tZW50IDwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9Ikp1c3QgSmFyZWQ6IFRoZSBsYXRlc3QgaW4gZW50ZXJ0YWlubWVudCBuZXdzLCBwaG90b3MsIGFuZCBjZWxlYnJpdHkgZ29zc2lwIGluIHR2LCBtb3ZpZXMsIG11c2ljLCBwb3AgY3VsdHVyZSBhbmQgbW9yZSEiPjxsaW5rIHJlbD0iY2Fub25pY2FsIiBocmVmPSJodHRwczovL3d3dy5qdXN0amFyZWQuY29tIj48aDE-PGEgaHJlZj0iaHR0cHM6Ly93d3cuanVzdGphcmVkLmNvbS8yMDI0LzA0LzE5L3RoYW5rLXlvdS1haW1lZS1seXJpY3MtaXMtdGF5bG9yLXN3aWZ0cy1zb25nLWFib3V0LWtpbS1rYXJkYXNoaWFuLWZldWQtbGlzdGVuLW5vdy8iIHJlbD0iYm9va21hcmsiIHRpdGxlPSIndGhhbksgeW91IGFJTWVlJyBMeXJpY3M6IElzIFRheWxvciBTd2lmdCdzIFNvbmcgQWJvdXQgS2ltIEthcmRhc2hpYW4gRmV1ZD8gTGlzdGVuIE5vdyEiPid0aGFuSyB5b3UgYUlNZWUnIEx5cmljczogSXMgVGF5bG9yIFN3aWZ0J3MgU29uZyBBYm91dCBLaW0gS2FyZGFzaGlhbiBGZXVkPyBMaXN0ZW4gTm93ITwvYT4gPC9oMT4	false		high
https://x.bidswitch.net/check_uuid/https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-grid1%26userId%3D%24%7BBSW_UUID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN?gdpr=0&gdpr_consent=&us_privacy=1YNN&uid=${BSW_UUID}&cookie_age=${COOKIE_AGE}	false		unknown
https://sync.kueezrtb.com/api/cookie?partnerId=kueez-sharthrough&userId=7456771a-49ee-4e2a-b013-668de61e15dd	false		unknown
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjssU5pZ5pYIoBbrDgZhcH0K1cg1efNUPdIEv8cO_TvTIVWrWXXXVKLdnxSg9eCiVAsUuxno2XdeNLelB1-xk4PRaf_kPjhNIH5w7pbUKEvTCWJmFvpkXvShyOjpLu8sz3MtY4ATC5wtctToehblE4gnlRfK2NwYdDHILhWgSC6_VUaoWFgxZFLn2Ml8gbB3uKwJp7Hwozh81fy7PNNIWHYjPqbIM2Kh7OpZcYSk_9UOF4avTgBNUOcdnuVLqaqlPagQj92gqVU1J397viqbuXIMpGkGwfTw5AR_CMhugSdrCvKPyjybzDO82lk36HznuwWwyn-ZnC7rg6aaVLG0D4_IlseeUhjH0AOrvTMp5001O5QDEM8wJ_rPlowvue5U6OnXdBCXb_LEAAt7c0Uya3m8&sai=AMfl-YTzDoyuHvDKK-7MmXG4nyQWlSYfh5WDGcEFguCc5L4lW5jX6awbvAv5xuudGCJbFMdHW5euQYC1nIRO4oUnSZYS7o7tf9ZJUL61DuIcc08mIeHWRoKEdjO4XH_ti-Q&sig=Cg0ArKJSzJLnM8P5mC4iEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl=	false		high
https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0015a00002y7TWTAA2&ru=https%3A%2F%2Fcapi.connatix.com%2Fcore%2Fus%3FDemandPartner%3D37%26UserId%3D1cea9752ba4141efa5c1f9f338ffb4de%26DemandPartnerName%3D_33Across%26tier%3D1%26DemandPartnerUserId%3D33XUSERID33X&gdpr=0	false		high
https://p.skimresources.com/px.gif?ch=2&rn=8.172352690297082	false		high
https://s.amazon-adsystem.com/ecm3?ex=media.net&id=3565339623115671000V10	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent=	false		high
https://static.criteo.net/design/googlefont/roboto/roboto-400.css	false		high
https://measurement-api.criteo.com/register-source?impressionId=66226df5169b9ae6df86e04ccabef000&partner_domain=regrowhairformula.com&external_uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff&partner_id=91644&source_type=event&campaign_id=429940&marketing_objective_type=0	false		high
https://assets.bounceexchange.com/assets/smart-tag/versioned/main-v2_c24410c35e5d87b630f3d54a49f2b820.js	false		high
https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=876b4ced-4053-40ae-977f-ba74b97a735a%3A1713532413.3968575&pid=500040&it=1&iv=876b4ced-4053-40ae-977f-ba74b97a735a%3A1713532413.3968575&_=1713532430.9663153	false		high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQbh-g0iSq-f0OBcz9MuQmnAowUO-LuRsTL7YanjewYN-Qyfr1I0gL8oVYjOoQzxqwev8OAme6fN1e3KcT1VZ_4Nbpm8w	false		high
https://eb2.3lift.com/xuid?mid=5989&xuid=CAESECw9N3KIDhZWBlzPE3OBQLs&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1	false		high
https://ssp.api.tappx.com/cs/usync?idmn=45&id=1845939505169848484&gdpr=0&gdpr_consent=	false		high
https://assets.bounceexchange.com/assets/smart-tag/versioned/runtime_6459738026535cda4232dc813c61447d.js	false		high
https://assets.bounceexchange.com/tag/css/creatives-base-styles.a53944a2.min.css	false		high
https://images-na.ssl-images-amazon.com/images/G/01/da/adchoices/ac-topright-sprite.png	false		high
https://imageproxy.us.criteo.net/img/img?h=1200&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fstatic.us5.us.criteo.net%2Fdesign%2Fdt%2F100366%2F5344326%2F7995175e253e44348e918195e4e19394_nomatic_luma_collection_sage_1080x1920.jpg&v=3&w=1200&rid=4&s=xdrSACCyL2f4ldxL3AhxaghG	false		high
https://ssp.api.tappx.com/cs/usync?consent=&gdpr=0&id=OPUf67e9fe0c71146baa5554ff263871c94&idmn=1135&us_privacy=%7B%7BUS_PRIVACY%7D%7D	false		high
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js	false		high
https://ssp.api.tappx.com/cs/usync?idmn=28&type=iframe&id=3059573620546902553906&auxuid=	false		high
https://match.prod.bidr.io/cookie-sync/syn	false		unknown
https://i.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=58637582-4b7e-42fe-b59a-889f13122ef7	false		high
https://vpaid.vidoomy.com/sync/urlsvid.json	false		unknown
https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234	false		high
https://ssp.wknd.ai/magnite-sync?uid=LV6OX7LS-1U-G1TB	false		unknown
https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D%26partnerId%3Dsundaysky%26userId%3D%24%7Bssky_uuid%7D&_cvt=t	false		high
https://csm.us.criteo.net/all?cppv=3&cpp=ub5rQTRkmqKW0zTg_214BY7eScu-txUd-LU3a5VC_RJeADs6aypfsssdmlpET1exsi3HLJNOhjyk83H1ZYfsohVvnbKYVpkDCRHauv398MxVF_aKCwUmZaU1W1_qMzZ0MnwrYTpV1TlSU3iw2-YcwrEeOqO1fiHuZf6JeqFPP0sEAOScjBZE5Eq1CUEKJkBAUp5Rdmq5PMX5r3crmmrL_VNc6qp10cNqwZU6YL_C6lR0Qp9sKbMN0CTIlVzCfXFBMCUq4w&sds=2&rev=91864&sendBeacon=true	false		high
https://static.criteo.net/design/dt/95f88fc626f1432fa432382e4bfd47db_tradegothiclt-bold.woff	false		high
https://t.adx.opera.com/pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=	false		high
https://apex.go.sonobi.com/trinity.json?key_maker=%7B%226432939507686c6%22%3A%220a68abb16fa032844d37%7C300x250%7Cgpid%3D%2F2507246%2C22973718026%2Fjustjared.com_Web_300x250_4%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.justjared.com%2F&s=50f5d13e-abfb-41c3-a754-c129b469b06d&pv=0145dc54-9a46-4b2f-ad86-e7b9d438b5d2&vp=mobile&lib_name=prebid&lib_v=8.38.0&us=50&iqid=%7B%22pcid%22%3A%22d1fa2879-9319-40e4-9b46-403bde911876%22%2C%22pcidDate%22%3A1713532364487%2C%22dbsaved%22%3A%22false%22%7D&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22justjared.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22justjared.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22insticator.com%22%2C%22sid%22%3A%22bd45a367-d5fa-4207-9aec-1acba8ec52eb%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22id5-sync.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ID5*ppMjNvxbaB9j5a0i6EIly1r7ia8nxtHkNzxf9xT00G-WdzupAFO9A9RQg0JMowDA%22%2C%22atype%22%3A1%2C%22ext%22%3A%7B%22linkType%22%3A2%2C%22pba%22%3A%22mZbjBDlVf3oqVPymR0ZUxw%3D%3D%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22crwdcntrl.net%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22atype%22%3A1%7D%5D%7D%2C%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0	false		high
https://rt3047.infolinks.com/action/adview.htm?rid=d999be2a-4144-4ba4-8d6a-4248dbda541d&bdc=1&midx=1&emd=NTd-bnVsbF9tYWNfMzAweDI1MA&rts=1713532422739&prod_t=k&jsv=1928.005-3.034&sdata=accessibility&scs=7qhC-w-XD1&rsd=Z_VLmz6BHI1NA9ZY4uG6xwQBoTlawfqvLxTPDkbCIoIbGIe5frBDk34uVAVGUJEvghdrlo9Gbpc5beR_4ychv6IH581BgaLkodF6xSXjs918gs29CgR31FNQPxX4zntTZIrcLjY9I2uXESzwPcE6T-MOyfTLtvjh&rsk=61&rcs=AKhZ3IIcfnLC49550qQ7-Q	false		high
https://bidder.criteo.com/cdb?profileId=207&av=36&wv=8.37.0&cb=41739420091&lsavail=1	false		high
https://cs-tam.yellowblue.io/cs?aid=11608&id=405ce1e6-27d8-4dbe-becb-3a11e6ea0caf	false		unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN&gdpr=0&gdpr_consent=	false		high
https://ua.p7cloud.net/asp?aspan=YXJjc3Bhbi11c2VyOmFyY3NwYW4tZHJvd3NzYXA	false		unknown
https://ssbsync-us.smartadserver.com/api/sync?callerId=2&gdpr=0	false		high
https://s0.2mdn.net/sadbundle/4950761559091977241/js/main.js	false		high
https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=2&external_user_id=ZiJtysAoIp0AACTzAsBeOAAA%262584	false		high
https://sync.cootlogix.com/api/cookie?partnerId=grid&userId=58637582-4b7e-42fe-b59a-889f13122ef7&gdpr=0&gdpr_consent=&us_privacy=1YNN	false		unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://router.infolinks.com/dyn/eqv-us?user_id=1845939505169848484&gdpr=0&gdpr_consent=	false		high
https://widget.us5.us.criteo.com/dis/dis.aspx?pu=104452&cb=66226deda9076d75f64217de5863594d&r=https%3a%2f%2fwww.justjared.com%2f&crossorigin=false	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=5189612051	false		high
https://silo40.p7cloud.net/as1.js?uri=https%3A%2F%2Fwww.justjared.com	false		unknown
https://cat.us5.us.criteo.com/tpd?dd=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	false		high
https://sync.targeting.unrulymedia.com/csync/RX-dd40f750-a014-4531-a2f1-8878dd503e55-005?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3DRX-dd40f750-a014-4531-a2f1-8878dd503e55-005	false		high
https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X	false		high
https://cs.admanmedia.com/sync/minute_media?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21497%26puid%3D%5BUID%5D	false		high
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=1992631732046530304&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Dd0d03bdc-727a-4142-99f7-b5387856282d%253A1713532413.2920914%26pid%3D500040%26it%3D1%26iv%3Dd0d03bdc-727a-4142-99f7-b5387856282d%253A1713532413.2920914%26_%3D1713532413.2940567	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEMb0jRzCLadNKj4MBxK3qsk&google_cver=1	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7771743&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hb2PxCzr4qEBR&cb=1&ws=0x0&v=24.305.1002&t=2000&slots=%5B%7B%22id%22%3A%22JustJared_OutStream%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D	false		high
https://platform.twitter.com/widgets.js	false		high
https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:60,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{%22Country%22:%22US%22,%22CountryRegion%22:%22GA%22,%22City%22:%22Atlanta%22,%22PostalCode%22:%2230301%22,%22MetroCode%22:%22524%22},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22clicks%22:0,%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532422571	false		unknown
https://s.amazon-adsystem.com/v3/pr?exlist=cnv_pm-db5_n-Ogury_n-nativo_ppt_snb&fv=1.0&a=cm&cm3ppd=1&dmt=3	false		high
https://check.analytics.rlcdn.com/check/1260	false		high
https://htlb.casalemedia.com/openrtb/pbjs?s=634955	false		high
https://dpm.demdex.net/ibs:dpid=152416&dpuuid=6qnymkyv6p1rqrpd3isnsmcle	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ad.360yield.com/ux?&publisher_dmp_id=15&r=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fimpr_match%3F	chromecache_1098.2.dr	false	high
https://ids.ad.gt/api/v1/g_hosted?id=	chromecache_1098.2.dr	false	unknown
https://www.justjaredjr.com/2024/04/12/sabrina-carpenter-reveals-why-adventures-in-babysitting-role-	chromecache_743.2.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_542.2.dr, chromecache_628.2.dr	false	high
https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17888&endpoint=us-east	chromecache_995.2.dr	false	high
https://usr.undertone.com/userPixel/syncr?gdpr=&gdprstr=	chromecache_1020.2.dr, chromecache_886.2.dr	false	high
https://www.justjared.com/tags/chris-pratt/	chromecache_743.2.dr	false	high
https://cat.us5.us.criteo.com/delivery/ck.php?cppv=3&cpp=LSLfZ6lOptqAjgSUUpFX7arMZlQyKRl0OZV3OgGd6RN	chromecache_647.2.dr	false	high
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_1015.2.dr	false	high
https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1&gd	chromecache_910.2.dr	false	unknown
https://www.justjared.com/	chromecache_743.2.dr, chromecache_897.2.dr	false	high
https://gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid	chromecache_470.2.dr	false	high
https://www.justjared.com/2024/04/19/thank-you-aimee-lyrics-is-taylor-swifts-song-about-kim-kardashi	chromecache_743.2.dr	false	high
https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=0&gdpr_consent=&us_privacy	chromecache_472.2.dr	false	high
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs	chromecache_814.2.dr, chromecache_1101.2.dr	false	high
https://bh.contextweb.com/bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VG	chromecache_1098.2.dr	false	high
https://script.crazyegg.com/scripts/hud	chromecache_477.2.dr, chromecache_1068.2.dr	false	high
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_1076.2.dr	false	high
https://cdn01.justjared.com/wp-content/themes/default/images/jjlogo7.gif	chromecache_743.2.dr	false	high
https://ssum-sec.casalemedia.com/usermatch?s=197137&cb=https%3A%2F%2Fusr.undertone.com%2FuserPixel%2	chromecache_1020.2.dr, chromecache_886.2.dr	false	high
https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-anthology-album.jpg	chromecache_743.2.dr	false	high
https://github.com/google/safevalues/issues	chromecache_683.2.dr, chromecache_820.2.dr	false	high
https://www.justjared.com/2024/04/19/chris-pratt-gets-injured-on-mercy-set-shares-photo-of-his-wound	chromecache_743.2.dr	false	high
https://aorta.clickagy.com/pixel.gif?ch=4&cm=9edac919-938e-435c-b808-9c3d4416339d&redir=https%3A%2F%	chromecache_1178.2.dr	false	high
https://cdn-ima.33across.com/ppid.js	chromecache_819.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.136.104	unknown	United States	15169	GOOGLEUS	false
34.110.253.203	merequartz.com	United States	15169	GOOGLEUS	false
18.155.1.82	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
54.224.168.63	rtb.gumgum.com	United States	14618	AMAZON-AESUS	false
68.67.179.155	unknown	United States	29990	ASN-APPNEXUS	false
34.102.193.48	e.cdnwidget.com	United States	15169	GOOGLEUS	false
18.160.18.21	c.gumgum.com	United States	3	MIT-GATEWAYSUS	false
52.7.147.100	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
104.26.9.177	metrics.getrockerbox.com	United States	13335	CLOUDFLARENETUS	false
172.64.144.166	cdn.confiant-integrations.net	United States	13335	CLOUDFLARENETUS	false
54.230.253.33	api-2-0.spot.im	United States	16509	AMAZON-02US	false
74.125.136.103	unknown	United States	15169	GOOGLEUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
159.89.246.130	cx.serverbid.com	United States	14061	DIGITALOCEAN-ASNUS	false
104.22.53.173	cdn.hadronid.net	United States	13335	CLOUDFLARENETUS	false
13.32.230.83	cdn.privacy-mgmt.com	United States	16509	AMAZON-02US	false
13.32.230.81	d162h6x3rxav67.cloudfront.net	United States	16509	AMAZON-02US	false
54.208.163.26	unknown	United States	14618	AMAZON-AESUS	false
159.127.43.146	unknown	United States	26762	CNVR-US-EASTUS	false
18.165.98.53	d22j774itlbovl.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
142.234.204.77	xsync.iqzone.com	United States	396362	LEASEWEB-USA-NYC-11US	false
18.155.1.65	s2.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
67.231.251.190	pixel.s3xified.com	United States	40244	TURNKEY-INTERNETUS	false
51.75.89.23	c7.eu-4-id5-sync.com	France	16276	OVHFR	false
52.2.0.177	match-us-east-1-ecs.sharethrough.com	United States	14618	AMAZON-AESUS	false
104.18.26.216	unknown	United States	13335	CLOUDFLARENETUS	false
3.217.159.230	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.44.75.209	livepixel-production.bln.liveintent.com	United States	14618	AMAZON-AESUS	false
174.137.133.32	1.cpm.ak-is2.net	United States	27257	WEBAIR-INTERNETUS	false
51.75.92.187	c3.eu-4-id5-sync.com	France	16276	OVHFR	false
34.160.20.10	ids.cdnwidget.com	United States	2686	ATGS-MMD-ASUS	false
34.200.65.202	unknown	United States	14618	AMAZON-AESUS	false
54.230.252.87	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
18.64.236.101	d212ymdm2soznz.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.205.61.221	cs-tam.yellowblue.io	United States	14618	AMAZON-AESUS	false
54.211.215.248	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
18.164.81.91	d1jvc9b8z3vcjs.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.244.202.20	aba.gumgum.com	United States	16509	AMAZON-02US	false
172.67.68.188	aacdn.nagich.com	United States	13335	CLOUDFLARENETUS	false
18.165.116.47	tags.crwdcntrl.net	United States	3	MIT-GATEWAYSUS	false
104.26.9.169	script.4dex.io	United States	13335	CLOUDFLARENETUS	false
162.19.138.116	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.64.155.20	d26da0dx1ebj70.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.217.215.148	unknown	United States	15169	GOOGLEUS	false
172.217.215.149	unknown	United States	15169	GOOGLEUS	false
52.95.115.255	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
44.217.123.55	um4.eqads.com	United States	14618	AMAZON-AESUS	false
162.19.138.83	lb.eu-1-id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
50.16.197.56	load-use1.exelator.com	United States	14618	AMAZON-AESUS	false
18.67.79.98	d3lcz8vpax4lo2.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.230.253.74	check.analytics.rlcdn.com	United States	16509	AMAZON-02US	false
18.214.54.215	ps.eyeota.net	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
207.65.37.179	gob-pairb-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
8.2.110.161	cm-x.mgid.com	United States	46636	NATCOWEBUS	false
104.18.38.76	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
34.149.20.76	ssc.33across.com	United States	2686	ATGS-MMD-ASUS	false
34.120.135.53	oajs.openx.net	United States	15169	GOOGLEUS	false
216.219.92.22	inv-nets.admixer.net	United States	19318	IS-AS-1US	false
172.240.155.108	sync.colossusssp.com	United States	7979	SERVERS-COMUS	false
64.202.112.223	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
74.125.136.156	www.googletagservices.com	United States	15169	GOOGLEUS	false
34.203.128.100	cs-server-s2s.yellowblue.io	United States	14618	AMAZON-AESUS	false
74.125.136.157	pubads46.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
44.219.73.112	unknown	United States	14618	AMAZON-AESUS	false
89.187.171.27	1099493781.rsc.cdn77.org	Czech Republic	60068	CDN77GB	false
89.187.171.26	1651846316.rsc.cdn77.org	Czech Republic	60068	CDN77GB	false
18.208.103.149	map.go.affec.tv	United States	14618	AMAZON-AESUS	false
54.88.142.103	pxl.iqm.com	United States	14618	AMAZON-AESUS	false
67.202.105.23	dp1.33across.com	United States	32748	STEADFASTUS	false
172.64.151.101	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.158.42.6	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
34.202.33.5	cookiematch-us-east-1.prod.justpremium.com	United States	14618	AMAZON-AESUS	false
104.26.15.45	unknown	United States	13335	CLOUDFLARENETUS	false
67.202.105.33	de.tynt.com	United States	32748	STEADFASTUS	false
3.228.82.154	va-lb.gumgum.com	United States	14618	AMAZON-AESUS	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
104.22.75.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
104.76.210.74	hb.yahoo.net	United States	6762	SEABONE-NETTELECOMITALIASPARKLESpAIT	false
54.85.17.93	trends.revcontent.com	United States	14618	AMAZON-AESUS	false
18.155.1.6	gumgum.com	United States	16509	AMAZON-02US	false
172.66.41.9	rt3047.infolinks.com	United States	13335	CLOUDFLARENETUS	false
35.186.193.173	i.ctnsnet.com	United States	15169	GOOGLEUS	false
216.34.207.82	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
34.102.146.192	oa.openxcdn.net	United States	15169	GOOGLEUS	false
8.2.110.134	cs.krushmedia.com	United States	46636	NATCOWEBUS	false
54.208.231.58	syncelb-240036109.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
69.194.240.13	sync.1rx.io	United States	6336	TURN-US-ASNUS	false
69.194.240.11	tag.1rx.io	United States	6336	TURN-US-ASNUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
52.40.39.43	unknown	United States	16509	AMAZON-02US	false
72.21.91.66	cs41.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
51.222.239.230	onetag-sys.com	France	16276	OVHFR	false
3.222.148.106	us-east-tlx.3lift.com	United States	14618	AMAZON-AESUS	false
34.107.165.188	api.rlcdn.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428755
Start date and time:	2024-04-19 15:11:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.justjared.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@114/1472@1069/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://castbox.fm/home

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 74.125.138.101, 74.125.138.113, 74.125.138.139, 74.125.138.138, 74.125.138.102, 74.125.138.100, 64.233.185.84, 34.104.35.123, 104.18.2.201, 104.18.3.201, 142.250.105.95, 74.125.138.94, 151.101.2.202, 151.101.130.202, 151.101.194.202, 151.101.66.202, 64.233.176.97, 104.18.4.138, 104.18.5.138, 172.217.215.95, 64.233.185.95, 74.125.138.154, 74.125.138.155, 74.125.138.157, 74.125.138.156, 142.250.9.95, 142.251.15.95, 108.177.122.95, 173.194.219.95, 172.253.124.95, 64.233.176.95, 74.125.136.95, 74.125.138.95, 64.233.177.95, 64.233.177.102, 64.233.177.139, 64.233.177.100, 64.233.177.101, 64.233.177.113, 64.233.177.138, 172.253.124.102, 172.253.124.113, 172.253.124.100, 172.253.124.101, 172.253.124.139, 172.253.124.138, 104.19.147.8, 104.19.148.8, 23.7.38.106, 151.101.194.49, 151.101.130.49, 151.101.66.49, 151.101.2.49, 23.201.212.226, 185.167.164.52, 185.167.164.53, 184.25.165.60, 8.43.72.32, 108.177.122.154, 108.177.122.157, 108.177.122.156, 108.177.122.155
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, d.turn.com.akadns.net, a-us-west.rfihub.com.akadns.net, cdn-ns.cdn-prod-sas.akadns.net, clientservices.googleapis.com, seg.ad.gt.cdn.cloudflare.net, track-eu.adformnet.akadns.net, e9957.b.akamaiedge.net, script.crazyegg.com.cdn.cloudflare.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, beacon-nf.rubiconproject.net.akadns.net, clients2.google.com, rtb-csync-geo.usersync-prod-sas.akadns.net, e9957.e4.akamaiedge.net, c-bing-com.dual-a-0034.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, pagead2.googlesyndication.com, akns.sascdn.com.edgesuite.net, csync.smartadserver.com.edgesuite.net, edgedl.me.gvt1.com, c.bing.com, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, g11v.fwgtm.akadns.net, clients.l.google.com, h2.shared.global.fastly.net, a577.dscb.akamai.net, 0852e26011ea1f4dce115866eb6807a0.safeframe.googlesyndication.com, ins.connatix.com.cdn.cloudflare.net, track.adformnet.akadns.net, beacon-sjc2.rubiconproject
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://www.justjared.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9763359870772885
Encrypted:	false
SSDEEP:	48:8hdETog4cHFcidAKZdA19ehwiZUklqehTy+3:8434eqsy
MD5:	596D29C31F493989E8259CFCD50B58DC
SHA1:	49161577E284B1320EECD2F9BFB44947CE6678A2
SHA-256:	4FE48B005BBC8CE6E3EF0B68CB7D25CCEA9C04E0AE1867F76CADC257C44ABF03
SHA-512:	49DB78246F9A03705807726704542804E7AEC04E9AC0A2F5F55B48585D133AE92D0FA6D1BCD1AF38D2EC411DB2917C86B3C812A170F7A3F111BBC3DC66FE30A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....$.{7[...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............c@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9888514649403546
Encrypted:	false
SSDEEP:	48:8BdETog4cHFcidAKZdA1weh/iZUkAQkqehcy+2:8Y34eg9Qxy
MD5:	7E06D20552E6755682373B4496A90C6D
SHA1:	6C3BEA496D18952C58BEC876C88EE0AFDB923752
SHA-256:	5B5EEE5763AFD6169B7D701F817B74C7A07F52763A967E26AABCA12DB4C4849E
SHA-512:	D2976B107DBCD37B2268931B249430FF6CA0AC8A68CD235574B9756B72ACA3D70DAA815F17CB782CAA7D532A6D1D616138D404074FE9F7A025DF4FD5D0C7FCC0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......n7[...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............c@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.001078062423697
Encrypted:	false
SSDEEP:	48:8x5dETogsHFcidAKZdA14tseh7sFiZUkmgqeh7s6y+BX:8xQ3O4noy
MD5:	033DA27F84D6C38B979106B0540CA6AC
SHA1:	F83B9A59D6970B78585AC1A6C8F57B8BF4B44561
SHA-256:	F2CA80074368B21686E452B329382E0E4878F55F1C8CEE17B82D159B39948638
SHA-512:	30C18CE0941B227C649E45FA9D512EA9B1BFC34894F1B74B9DDBA01C4242D5AC46728AC086E0C15F86D52B55E4C3E53F6B40962C5C01E977B1C4521EECF55224
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............c@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9870469977901903
Encrypted:	false
SSDEEP:	48:8kdETog4cHFcidAKZdA1vehDiZUkwqehQy+R:8/34eriy
MD5:	366876F93610B1F3B7EF87013D3B15B6
SHA1:	7AA6709C57B8F6E82FB8A4C1A7FE28132CC90BF9
SHA-256:	857CCF33C3B1C2ED90F77C80BFF38AB65A9D7CE3866CF4F1542E126995D26A2E
SHA-512:	4B97CB7B6F37318ED449DAB21A0175D75B7221A5D5677025CF91B017566ACB9138181ED6DED2894E3DFB2DC9ED2579451C23EA9EAA35BFF87E612E4425EA4EC8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....M.g7[...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............c@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9759703121454604
Encrypted:	false
SSDEEP:	48:8PdETog4cHFcidAKZdA1hehBiZUk1W1qehWy+C:8S34er92y
MD5:	90FD74E803E7C5B43DEC8EDDEE45C26A
SHA1:	EDED4D9E819FE63A0A0EED7C255D0150E4C1F555
SHA-256:	C429028F825C7E75F440F57CE095889CDE6D3DC8FFB4FCE3BACE312D31B54A55
SHA-512:	7DEC7C0AE7A25DA620DB27352DFEA03E586CE4A6AF53F82806E8DEF0343FB420454C2E6AC465B28E3A094FEBD438E5842ACF9D22DDE876BCDA9E8782A072E2ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....t7[...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............c@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:12:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9884029649598616
Encrypted:	false
SSDEEP:	48:8OdETog4cHFcidAKZdA1duT+ehOuTbbiZUk5OjqehOuTboy+yT+:8d34eLT/TbxWOvTboy7T
MD5:	851B7376784B166ACC4E8E00EB024889
SHA1:	E233AD583625409A57BC33DC672279912C0DB7AD
SHA-256:	40349B9C873BD79D8BF2A1D4D4D904C6490077CAD420E002F5C4B6119229C30A
SHA-512:	E2C06724639072A77769A8EC6CCEFAE17DBB1818D004CB05358E758B44F70727B00226809472620F98D990B00A693EC8FF0D24ED4A38E8D724CC8119EEC5A2DB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\7[...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............c@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 1000

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0&us_privacy=1YNN
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	258377
Entropy (8bit):	5.459470790971861
Encrypted:	false
SSDEEP:	3072:kubX2OBJu2X9sQLQcQjelsBnbWi4JE58/349/XRgXpwvqC1dFGlod:kBSuoyQEC/34/g5wvpFGi
MD5:	1F1AA10D3F9EDC7D7895887A0A8F6D49
SHA1:	B49ECC35CE98EC78A45976FB3CE413169909910A
SHA-256:	5D6616B1B48EE88B9AAF839E71A563CF7E8770ED53A1FA0777FCFA5BD0BED362
SHA-512:	674E00711CC1DBC519F4F2EE48BCF8EB52D2DBF12109A0F474D191A93DF813CE2B9C2B3C0AE2C7125605B93345A921446A5C5E460E9C32F53A8B50FBB41398EB
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/pwt/156512/6397/pwt.js
Preview:	/* prebid.js v8.30.0Updated : 2024-02-13*/(()=>{var e,t={33984:(e,t,n)=>{n.d(t,{QP:()=>u,Y5:()=>l,eA:()=>d});var r=n(39024),i=n(28768),o=n(52420),s=n(11636);const a=(0,n(48176).A)(),c="outstream";function d(e){const{url:t,config:n,id:d,callback:l,loaded:u,adUnitCode:f,renderNow:g}=e;this.url=t,this.config=n,this.handlers={},this.id=d,this.renderNow=g,this.loaded=u,this.cmd=[],this.push=e=>{"function"==typeof e?this.loaded?e.call():this.cmd.push(e):(0,i.logError)("Commands given to Renderer.push must be wrapped in a function")},this.callback=l\|\|(()=>{this.loaded=!0,this.process()}),this.render=function(){const e=arguments,n=()=>{this._render?this._render.apply(this,e):(0,i.logWarn)("No render function was provided, please use .setRender on the renderer")};!function(e){const t=a.adUnits,n=(0,s.iw)(t,(t=>t.code===e));if(!n)return!1;const r=(0,o.c)(n,"renderer"),i=!!(r&&r.url&&r.render),c=(0,o.c)(n,"mediaTypes.video.renderer"),d=!!(c&&c.url&&c.render);return!!(i&&!0!==r.backupOnly\|\|d&&!0!=

Chrome Cache Entry: 1002

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2042)
Category:	downloaded
Size (bytes):	400935
Entropy (8bit):	5.527184924357475
Encrypted:	false
SSDEEP:	6144:4/aXzbSO4ZQjUEuBcppjNwtSbx94axuXU8l:XeObUBERiSbx94Iq9
MD5:	5230B9E54A85D297655A1B6262FB70EA
SHA1:	FFC26118B97E04840775F2515F84C18827CDE76B
SHA-256:	66ECAED50DC5A44DD08B4040BCD6BE32B78F42BC5B5FE93B4C15EA452749E88D
SHA-512:	CCE83AAC88B47ACE0732CB0EB59DE24F3C1BFDB2A2E3373F50E2711D86254CF6693D41DC0418631AF9FBBC2B12EC6F5BE7A378100053B0D72F304737D0315E21
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),r=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 1003

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv7aV2C_HqmWPjp8ww3M73CCIzHc9vpcqXalc5s2nRNEiariypM3xOF5rr7kxodvkssvtc1A0NFA5mO54QAVX0sk2viZO_PbjfSwVtMElYk5OCuOKdRxOkUjwogZcJc3eF3_nWReanGPFN0pqdx-I4Mgwf59uFxqnY&sig=Cg0ArKJSzANNY099zqg1EAE&id=lidar2&mcvt=1216&p=365,276,455,1004&mtos=1216,1216,1216,1216,1216&tos=1216,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=1&vu=1&app=0&itpl=19&adk=629776701&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946519700&rst=1713532397423&rpt=33387&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1004

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15603), with no line terminators
Category:	downloaded
Size (bytes):	15603
Entropy (8bit):	5.213827446211307
Encrypted:	false
SSDEEP:	384:2sxRk2edCsRnfwFsX9kIXtUk1Y6fxwMszHpXu:+CeTKpXu
MD5:	59EC903EE173B6BB068133D819C939C2
SHA1:	07678BAD502BEDC4E98E6D447D50D31DBBF8A473
SHA-256:	AA0BC89EF1AB3069C348DF0EA3D96B3BD5143D23B7677D1151BDEF295B2C1BB7
SHA-512:	4C347B600BBA733EA6F9C458D7B3409B32CB388CEA383D234BC57C2CA973305DE94568B99CC2C729056BE32F61A6B7622DC2C6A154CD68131C38DFE76E81FFBC
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/unified/4.21.0/ccpa.e4cc64d4573eb818690d.bundle.js
Preview:	(window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[0],{179:function(e,t,n){"use strict";n.r(t),n.d(t,"default",(function(){return S}));n(22),n(27),n(54),n(28),n(29),n(71),n(102),n(101),n(51),n(49),n(50),n(30),n(31),n(32),n(186),n(187),n(53),n(55),n(68),n(35),n(72),n(33),n(69),n(52),n(34);var r=n(0),o=n(14),a=n(59),i=n(21),c=n(192),s=null,u=null,p=function(e,t,n){try{e(t,n)}catch(e){Object(r.handleError)(new r.CmpCallbackError(e),"ccpa")}},l={getuspdata:function(e,t){var n=Object(r.getUserConsentData)("ccpa")\|\|{},o=n.applies,a=n.dateCreated,i=n.gpcEnabled,c=n.signedLspa,s=n.status,u=Object(r.getStateStorageFromMemory)("newUser",void 0,"ccpa"),p=Object(r.getUspString)(1,s,o,c);try{t({version:e,uspString:p,newUser:u,dateCreated:a,gpcEnabled:i},!0)}catch(e){Object(r.handleError)(new r.CmpCallbackError(e),"ccpa")}},getcustomvendorrejects:function(e,t,n,o){var a=n.ccpaOrigin,i=Object(r.getUserConsentData)("ccpa"),c=i.applies,l=i.dateCreated,f=i.status,g=i.rejectedCategories,y=i.rejectedVen

Chrome Cache Entry: 1005

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (844)
Category:	downloaded
Size (bytes):	144175
Entropy (8bit):	5.524743877001804
Encrypted:	false
SSDEEP:	1536:oOazYUwearhDag/q/xLvxx7rHHHyeHlHtHNH40r2zDTVjwbhqwBXxYrKBljPikou:oXwBagRVMdjBBWm62pc9LLA
MD5:	84034AA66AB83FC4BA215EA6E424F3F0
SHA1:	0F83C0368106382259383CD042F1190C6BC4CCA6
SHA-256:	7F7C7157ADA694CB690DCDB44452AB20C672CF7682F54F3603A02BFCA29713BC
SHA-512:	015D68825081914BB7B6A7EDC2CB8ABDABAC43B3ACC5770C3D65813CF7AEE5B9EDA398589BEB2BE19F3D43D26F333CB85E1EDC62E63FBEEF1C099C16B0737979
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38-hb.js
Preview:	var insticatorCommentingUnitSettings = JSON.parse("{\"id\":\"ecf5a122-8d83-48cf-b4c1-9b96fc5b6670\",\"nextToButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdMobile\":\"DISABLED\",\"createdAt\":\"2023-12-20T06:48:02.000+00:00\",\"updatedAt\":\"2023-12-20T06:48:02.000+00:00\"}");'use strict';var settings={global:{domain:"justjared.com",gamNetworkId:"2507246",gamNetworkString:"2507246,22973718026",amazonUamId:"70fb13d1-ab65-42ac-a7ca-0b4e680d5c92",insticatorAsi:"insticator.com",insticatorSid:"bd45a367-d5fa-4207-9aec-1acba8ec52eb",embedHost:"https://dashboard.insticator.com",siteUUID:"2cdf4c71-ad6c-487e-b43a-8f1af912284a",acgId:"76ab8408-3e64-425f-a1ce-688c79050f38",prebidCdn:"https://d3lcz8vpax4lo2.cloudfront.net/files/instibid/"},ad:{settings:{DEVICE_TYPE_BREAKPOINTS:{mobileUpper:748,.desktopLower:990},PREBID_TIMEOUT:4E3,numberOfDuplicateAd:0,PREBID_MOBILE_TIMEOUT:4E3,REFRESH_TIMEOUT:3E3,AMAZON_TIMEOUT:3E3,adUnitToSizeMap:{DESKTOP:{"div-

Chrome Cache Entry: 1006

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.765529965649494
Encrypted:	false
SSDEEP:	3:YRM9WREaDLEU0VJWeL2ysrQaJ0SYfBh1oAe:YsWiAovV/LX4QaJ0SYfBroAe
MD5:	A2A4BE452907418287FF3F7DEF14C229
SHA1:	3DAE9968994C85FC54DFE6E931934F2CA4555AB1
SHA-256:	42F66685DEECA446E3199C5BB23FDD8FDAAEA282781C18BCDDE4579B69341110
SHA-512:	A8DB6A5C2C8F54178C85F9B7672C17EA83EC4EAEEE4416EADCDF1FC45BAFDFA7F196DC2C23876301330D361FA7E7B07BA2E66CC6DF7AB01AB4815856FCB556F5
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1713532361470,"status":405,"error":"Method Not Allowed","path":"/v1/recordVendorsLoaded"}

Chrome Cache Entry: 1007

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157743&gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fpubmatic%3Fchanneluid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 1008

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1009

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37
Entropy (8bit):	4.188522622093347
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHMgXHROfYY9:YGKed2pHRgn9
MD5:	C11BE4C9B4FD2C7B81B415559462D84A
SHA1:	AB2AA12AB8332E4A7F5B42742AB7A76998B12387
SHA-256:	B8F0CA68362CF245F891FC09DDFA50806D195E78E196CF96AC5D9CF72BE2577A
SHA-512:	15E2124EBD717AB8656D14EF748C4FD98B3569AB4BCA579F3FDED41B64D51FF47202914E8572E6F8AB5A40FECAC07F970EE932AE8240D0110ED4F22B821C0C5A
Malicious:	false
Reputation:	low
Preview:	{"country":"US","isRestricted":false}

Chrome Cache Entry: 1010

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2949
Entropy (8bit):	4.764927072794984
Encrypted:	false
SSDEEP:	48:oCbMHWCyWWtVwGOxZxmiQ6yqAYIMEdm9qIiztylZQaP8oGc1+BG1L9HiMQYEZGTG:oCbM2CyWWfwGOxZxmiQNBdTtylZQCUC2
MD5:	23654B43FBBA6AC664C0E1C4F1173C3F
SHA1:	792A211A37B19DE60DB8E6B6130B4464C2009CA4
SHA-256:	0BA4519AF3C619E8F3A1A032DEDB09A33B4D94C85F29A97CD0C4C22A7A4FB7F0
SHA-512:	E21569DFDC1082AFE0AFC3DDCB63D817D019AF483D2E7AACA9C4046C978862207F77A8DFD77ED36D827F583FF6737EA9EDEB8DC5B890A9CB8A866139F7B057F0
Malicious:	false
Reputation:	low
URL:	https://d37unsldgykj8z.cloudfront.net/ara.js?srcName=CS&adId=593399596890441530&is3p=true&campaignId=582347282419143467&ep=paa%2Cara&creativeId=590904568646777949&bidId=uKZ9OkqnBPcLvCMjgR46yA&advertiserId=577874589498151894&clickDestnUrl=https%3A%2F%2Fdrinkag1.com%2Fen
Preview:	const doc = typeof window !== 'undefined' ? window.document : document;.const thisScript = doc.currentScript;.const MIN_SUPPORTED_BRAND_VERSIONS = {. 'Google Chrome': 106,.};..function checkIsBrowserSupported() {. const userAgentData = navigator.userAgentData;. if (userAgentData == null) {. return false;. }. const brands = userAgentData.brands;. return isEligible(brands) && checkIsFeatureAllowed();.}..function isEligible(agentBrands) {. if (!agentBrands \|\| agentBrands.length === 0) {. return false;. }. for (let brand of agentBrands) {. const version = Number.parseFloat(brand.version);. if (version >= MIN_SUPPORTED_BRAND_VERSIONS[brand.brand]) {. return true;. }. }. return false;.}..function checkIsFeatureAllowed() {. if ('featurePolicy' in document && typeof document.featurePolicy.allowsFeature === 'function') {. return document.featurePolicy.allowsFeature('attribution-reporting');. } else {.

Chrome Cache Entry: 1011

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5647)
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

Chrome Cache Entry: 1012

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	4.8083108981550495
Encrypted:	false
SSDEEP:	6:qFzLIMQHXLxkGX16DVQ8ouqxdLaYwrtL1wVVIBq4QL:2ebxkC6DVU4dxhwVVI/QL
MD5:	34216F487875F43B5FDD24C077EEC1F2
SHA1:	7BD6074AB3AD7C8D0DD8FA084950795C01E2F49B
SHA-256:	DE259EB7BA7A0E45575DEB33946F1FBC695C97C33145AE4E49AF0069D010868E
SHA-512:	E7232AFDD23E356D93784E59ABE17E32FD968CB3F96D980E4B851186F87CEDDE7BD0E7E90838DFD7D1C156DA57DF25789041E3ECAFC5738DE8A0618384F73FC5
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D70%26external_user_id%3D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>....</body>.</html>.

Chrome Cache Entry: 1013

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1017
Entropy (8bit):	4.611323150068041
Encrypted:	false
SSDEEP:	24:tjLIgsJcDCravjCNrxG8bpC49q0XkEobErU+v+mSD0iTnRR:FVsECNxzDnXBoOZWPD0iRR
MD5:	885D673AB99070F2E5005757CB895436
SHA1:	8141F94E432CAE4DA3D32CA4362838DFB53E98E8
SHA-256:	247FC189082160E979E84DE9E2A591DA28319423BC1B706E9A99F2FE3BCED7AF
SHA-512:	2A012C5D0E1D612EB884D5EE73C3799CC138A3D01B685D371DF3FF4B1EAF854331AB88A288BDDD388689E5DF5DC289936F518AF2863239BE2C1A1F42D5EBF4BA
Malicious:	false
Reputation:	low
URL:	https://aacdn.nagich.com/assets/images/11.svg
Preview:	<svg version="1.2" baseProfile="tiny" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 11.299 14.886" xml:space="preserve">..<path fill="#010101" d="M11.271,3.656c-0.117-0.442-0.619-0.708-1.061-0.59c0,0-3.361,1.09-4.57,1.09...c-1.178,0-4.509-1.061-4.509-1.061C0.689,2.978,0.188,3.184,0.041,3.626c-0.147,0.471,0.118,0.972,0.59,1.09l3.625,1.09...c0.177,0.06,0.325,0.236,0.296,0.442c-0.03,0.59-0.089,1.858-0.207,2.329c-0.295,1.356-1.916,5.07-1.916,5.07...c-0.207,0.442,0,0.943,0.413,1.15c0.118,0.059,0.236,0.088,0.354,0.088c0.324,0,0.648-0.178,0.766-0.501L5.7,10.848l1.651,3.567...c0.147,0.293,0.441,0.471,0.767,0.471c0.118,0,0.235-0.029,0.354-0.088c0.44-0.207,0.617-0.708,0.412-1.15...c0,0-1.621-3.714-1.917-5.07C6.849,8.106,6.791,6.839,6.761,6.249c0-0.206,0.118-0.382,0.295-0.442l3.625-1.09...C11.124,4.599,11.388,4.097,11.271,3.656z M5.7,3.302c0.912,0,1.651-0.739,1.651-1.65S6.612,0,5.7,0C4.788,0,4.049,0.74,4.049,1.651...S4.788,3.302,5.7,

Chrome Cache Entry: 1014

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://p.skimresources.com/px.gif?ch=2&rn=8.172352690297082
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1015

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18641)
Category:	downloaded
Size (bytes):	311727
Entropy (8bit):	5.500456132522352
Encrypted:	false
SSDEEP:	6144:lVPCQYGPGpcMT/yBNtuoAgai3YPhpR4JXcQm:lPU/yBNtKJ3Qm
MD5:	334BEB97A0BA690F1263AA80A277C40D
SHA1:	DC91BAD30786F5B5B65B40F82EEBFE536D9AC42D
SHA-256:	A2176D5CFBF4A63204C37A3D491237C74AAFE3AD21A49DF0D8CE11EDCAF3B131
SHA-512:	EBD350131F36F99109DB7F7660CD178B5C46836916AEDDBDCCFB512A4FE73F0893796ADC514CD5E02CF0FE2DC2E2CD08422D30F8FF0B298C634DE4244B6DEC39
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=a17587e6f7df45ea7319feb1b1d06d23
Preview:	/1713528277,,JIT Construction: v1012906458,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 1016

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5926
Entropy (8bit):	4.554694315624732
Encrypted:	false
SSDEEP:	96:JvfFwwXX47V+bX2zD+TaO46zFt+zD+pZTyJ4erozE+RI:5FnXXDbX23+Xry3+eJ2w+2
MD5:	07D52BE347A010DCA254E9592636BD42
SHA1:	F9857B7CA3978E8696527E0BFDDD6F78EC8E17AF
SHA-256:	6F6B2389210AED08AB62135F03815DF7C6F7EDD61AD4714DA09E24C8DBAC2EC7
SHA-512:	7D4F93178574A4984A3FCF3797856802185283E3C20A306B029C872F244CC5C003A0DA881E86D54E5C03C73ED8460954E3A3361999CD9AA14F91236FED6BC191
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyOne_line2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M193.14,26.4h1.55v4.36v0.74c0.47-0.83,1.49-1.46,2.67-1.46c2,0,3.21,1.26,3.21,3.49V39h-1.55v-5.28...c0-1.64-0.56-2.47-1.96-2.47c-1.48,0-2.36,1.15-2.36,2.52V39h-1.55V26.4z"/>..<path class="st0" d="M201.62,34.62c0-2.66,1.75-4.59,4.12-4.59c2.59,0,4.02,1.82,4.02,4.61v0.31h-6.59...c0.04,1.98,1.19,3.12,2.68,3.12c1.06,0,2.07-0.41,2.29-1.75h1.53c-0.18,1.53-1.37,2.95-3.83,2.95...C203.24,39.27,201.62,37.63,201.62,34.62z M208.1,33.85c0-1.55-0.85-2.59-2.36-2.59c-1.46,0-2.41,1.13-2.52,2.59H208.1z"/>..<path class="st0" d="M210.42,36.62c0-1.67,1.33-2.47,2

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvYPNauFzQ5yFF0bhrbVXpJsGNox5i4RcigNH5wEtywgw0noVBaJYbIE-Ip0mTxSrbynGFr_JENvtYttE0iIgdN057UrTynszZfns2tdvXeY5YQmk02w1wYilj4Z_51M3FyfQxbh2PrR3Hq-lZ6oXf0ufURq86ipjg&sig=Cg0ArKJSzPxHsl-6GC6GEAE&id=lidartos&mcvt=0&p=3389,820,3639,1120&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0&vu=1&app=0&itpl=19&adk=76579100&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=946519400&rst=1713532394485&rpt=241&isd=0&lsd=0&ec=1&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2962), with no line terminators
Category:	downloaded
Size (bytes):	2962
Entropy (8bit):	5.26190782285792
Encrypted:	false
SSDEEP:	48:fqMMEwE2UT5lI3uqx4qRMlCwx1VnOtVWiIlaHRjIrtSw5j9OQddxIOZFj/Gm+Ss:7wEHT5kRM/TVOtVW3KRwd9NdrZ5n+/
MD5:	6459738026535CDA4232DC813C61447D
SHA1:	05CDAAF01DB0029E8D03E613E3D1BAAD7955C4EA
SHA-256:	59F1B7D93F47FCC926143154888AA471910EAF81C3C41270B61CFE012DDA08DF
SHA-512:	B28B722BB40E0758EDA799B2F979C5A4DE04C79DD52B5FC4191F730A5A6CEF7C90E6F61EE568DB595F2E1DB33ECEAFFCAD1D88D63183C990E05E72F4A456AEF2
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/assets/smart-tag/versioned/runtime_6459738026535cda4232dc813c61447d.js
Preview:	(()=>{var e,r,t,o={},n={};function a(e){var r=n[e];if(void 0!==r)return r.exports;var t=n[e]={exports:{}};return o[e].call(t.exports,t,t.exports,a),t.exports}a.m=o,e=[],a.O=(r,t,o,n)=>{if(!t){var i=1/0;for(s=0;s<e.length;s++){for(var[t,o,n]=e[s],l=!0,u=0;u<t.length;u++)(!1&n\|\|i>=n)&&Object.keys(a.O).every((e=>a.O[e](t[u])))?t.splice(u--,1):(l=!1,n<i&&(i=n));if(l){e.splice(s--,1);var c=o();void 0!==c&&(r=c)}}return r}n=n\|\|0;for(var s=e.length;s>0&&e[s-1][2]>n;s--)e[s]=e[s-1];e[s]=[t,o,n]},a.d=(e,r)=>{for(var t in r)a.o(r,t)&&!a.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},a.f={},a.e=e=>Promise.all(Object.keys(a.f).reduce(((r,t)=>(a.f[t](e,r),r)),[])),a.u=e=>e+".js",a.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),a.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),r={},t="smart-tag:",a.l=(e,o,n,i)=>{if(r[e])r[e].push(o);else{var l,u;if(void 0!==n)for(var c

Chrome Cache Entry: 1019

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/images/pixel.gif?ch=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321)
Category:	downloaded
Size (bytes):	12849
Entropy (8bit):	4.94157158244279
Encrypted:	false
SSDEEP:	384:b4WxiaCudPTdPPu5Yu55o2jo2wBm8Yij9r:bLCGB/jd
MD5:	C0AD5BCEB34DC473809DD23603A31CEC
SHA1:	03B37A465EFC809B908807497C8DFBD509BCDDA9
SHA-256:	07378CB9079FE865C12DA0F27EFFD6163ADAE9CE1EF5E177A527E35B9F093B12
SHA-512:	8A2A127FA336CCC3DAAB7E15F56A32CAED60B489CB138BAD8AD58FFDDDA855BE95D2B3CCE0699C85BF6B140EAA67B8545DFCEF18A8AD075FD716F2E6B0A944A5
Malicious:	false
Reputation:	low
URL:	https://cdn.undertone.com/js/usersync.html?partnerid=59&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dundertonenew%26userId%3D%24%7BUIDENC%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D%26us_privacy%3D%24%7Bus_privacy%7D
Preview:	<html>.<body>..<script type="text/javascript">..function getParameterByName(name, url) {...var url = window.location.href;...var name = name.replace(/[\[\]]/g, '\\$&');...var regex = new RegExp('[?&]' + name + '(=([^&#])\|&\|#\|$)'),....results = regex.exec(url);...if (!results) return null;...if (!results[2]) return '';...return decodeURIComponent(results[2].replace(/\+/g, ' '));..}..function updateUrlParameter(uri, key, value) {.. var i = uri.indexOf('#');.. var hash = i === -1 ? '' : uri.substr(i);.. uri = i === -1 ? uri : uri.substr(0, i);.... var re = new RegExp("([?&])" + key + "=.?(&\|$)", "i");.. var separator = uri.indexOf('?') !== -1 ? "&" : "?";.. if (uri.match(re)) {.. uri = uri.replace(re, '$1' + key + "=" + value + '$2');.. } else {.. uri = uri + separator + key + "=" + value;.. }.. return uri + hash;..}... var gdpr = getParameterByName("gdpr") \|\| null;. var gdprStr = getParameterByName("gdprstr") \|\| getParameterByName("g

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28536)
Category:	downloaded
Size (bytes):	28811
Entropy (8bit):	5.260826422742243
Encrypted:	false
SSDEEP:	768:xBIT615KB7ULeg8Ax8e7PVAay3ces2np/3GfbrGf6pO1fNhqxlOaspIYGxdrFPWG:xBkqBrZvj
MD5:	DD4BFE4691A358A21FC1A60BD968757E
SHA1:	35EEC4A30362409C062982BDFC554B619AD12749
SHA-256:	A0A8E4CC0D0B9690A9F3F64B1DF5BAD9A57736E100ED041EF61DF1CF2FFDA3CC
SHA-512:	422851C7C59D1A8F2836CC1D02FFAFB1DE666CB26FD233360F0CE6FE79227F06BEAE3AB54975DD301AEB0AE6DE86BE413A6280F924EDC18A2B9FED02073CAC28
Malicious:	false
Reputation:	low
URL:	https://product.instiengage.com/product-loader-code/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js
Preview:	window.Insticator.enableEmbed = true; .window.Insticator.accountUUID = 'bd45a367-d5fa-4207-9aec-1acba8ec52eb'; .window.Insticator.siteUUID = '2cdf4c71-ad6c-487e-b43a-8f1af912284a'; .window.Insticator.enableNewAuthFlow = true; window.Insticator.enableEnhancedPageUrl = true; .!function(){var e={542:function(e,t){"use strict";t.T=void 0,t.T=function(e){return Object.keys(e).reduce((function(t,o){return e[o]?t+(""===t?"?":"&")+"".concat(encodeURIComponent(o),"=").concat(encodeURIComponent(e[o])):t}),"")}},672:function(e,t){"use strict";t.V=void 0,t.V=function(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(e){var t=0\|16*Math.random();return("x"===e?t:8\|3&t).toString(16)}))}},943:function(e,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.channel=void 0;var n=o(883),i=o(497),r=o(48);t.channel=function(e){return{publish:function(){s(0<arguments.length&&void 0!==arguments[0]?arguments[0]:{},e)},subscribe:function(t){if("undefined"!=typeof window){v

Chrome Cache Entry: 1022

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 1023

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	524
Entropy (8bit):	4.669219619213062
Encrypted:	false
SSDEEP:	6:q43tIS11XiMIW/zIlIpfGW4dpVFbdpVFbdpVFbdpVFbdpVFbdpVFK:TD11VI48lINGlTF5TF5TF5TF5TF5TFK
MD5:	7418CBEE906B4DB0F20614D0EEEBCEFF
SHA1:	D8B914D0EC14EB469B516E46800EDBC3A6509039
SHA-256:	311531734A617089DA26F33A00B04C59F7F43EC730022C19FB7DBB1C0C86E551
SHA-512:	128F7936551D66E10D846CF5BEAE4897953506D5F5759E643C343C3AB8983AD8DFCDD10D216DE6A2251C17CDFB5384654FC648E4B5E1247EEB0E6CA438B37CD8
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/URnmbSKM?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Datm%26i%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>..<head><title>502 Bad Gateway</title></head>..<body>..<center><h1>502 Bad Gateway</h1></center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 1024

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	107
Entropy (8bit):	4.749032029783589
Encrypted:	false
SSDEEP:	3:Ui+obJKXAozCSYANBIEbIOoysINBWj5Dmef:Ui+o4QozTEEbjoypaj5Dmk
MD5:	2C5FFDDE029C68A567494A3BEC937845
SHA1:	B689A5D079C898711C4A4B5588F93B916E08D98A
SHA-256:	6B074FBF6834F2D4B30C89FEEEBFAE88F9723B6E3D722F8B88CE4BDBE61B933A
SHA-512:	C97376E2E54F7201F5983B206CF0EF72641435249E255CA50FD2FB782D6919A7E7B74C8FEFC418D9C9408DF95F87874E96D415A2727287D9276CE68CA632F344
Malicious:	false
Reputation:	low
URL:	https://aacdn.nagich.com/style/btncolor.css
Preview:	/* Nagich.com color */..#INDmenu-btn {...--indmaincolor: #067d8d;...--indsecondcolor: White;..}....

Chrome Cache Entry: 1025

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2024 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	63956
Entropy (8bit):	7.977531269061113
Encrypted:	false
SSDEEP:	1536:EutUwdltWLwu5m+uZwaTJk98gQkwuHuxzP1jcP96heOk:hOwpWLvbuZwaW3QiHCzPCOk
MD5:	F6339B4618E85DB25D60DB30D0F056E7
SHA1:	FE88B2CA6D62B11E353A985A8756D2F80C1C2FC3
SHA-256:	F462C34B2F3D0419A4D9131C91AA8F27AE6AE5EC65612BE0E3462D463D6C2A38
SHA-512:	BC35534C34E1AE942FD040EE88E202F16CB3B4D5BB635FAB1C1B201D955E9463A0E8191C753ABDA696C00BDA20EE30375E145647DCF1A0680336FBA1493725CF
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2024 Getty Images.......Ducky.......d.....whttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" photoshop:AuthorsPosition="Stringer" xmpMM:InstanceID="xmp.iid:FE89AD8EFD0C11EEB8A4AE9FEB29CC75" xmpMM:DocumentID="xmp.did:FE89AD8FFD0C11EEB8A4AE9FEB29CC75"

Chrome Cache Entry: 1026

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 1027

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (628)
Category:	downloaded
Size (bytes):	647
Entropy (8bit):	5.3427346562070674
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GW4ktqpbvbUVpRcY5Y2PqVCAREnxTht1DtfCYKO+kFl+MHfVfCYY:WDlf8vWSbT4HOCVDnKO+kFltHnKbEe5r
MD5:	7FAF49D71F6EFA494233E3F5B25A7B11
SHA1:	A1F8724AA6D9508C194A16383A255FB303D493FF
SHA-256:	77FC1F5080BE2E2B9B023A503CDB2CC8191DD9F8B8680285E926471972841C09
SHA-512:	FC7E2B69E68668E79C964AE1FCF5ADBFE62AFC71A4E3CC448F7EEBC9B3274AC144D098DA8539A72FE7A6D92FC069D78913116DB5871359EC02AA88AF60858576
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=bUAiigz35TDj7&cb=1&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-4%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_4%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_4%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JD0JSx4ql3BddhM544Hs8skAAAGO9n1XHgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICA1yWyT","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-4","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"1","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-adMediaV1_n-onetag_pm-db5_ym_ppt_rx_n-acuityads_cnv"})

Chrome Cache Entry: 1028

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	"https://d.agkn.com/pixel/8538/?che=66226deda9076d75f64217de5863594d&col=262917,0,0,0,10967427,66226deda9076d75f64217de5863594d"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1029

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=sirnsvg&ttd_tpi=1&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1030

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	2779
Entropy (8bit):	5.256421685296428
Encrypted:	false
SSDEEP:	48:XFZp/sZ3lYQc7ArfSM3eIubF1QkNsKclMtPp/7qgAsFte6NPvD9T5AyNBK:1f/6lGUrff3eFLhNs+G6hb9xK
MD5:	7B430C6350A59A7CF22B9ADECCBA327B
SHA1:	B48D3C289BCB6809BB52FFFD8F013055ED6BCD65
SHA-256:	058ED961BFE422AF7BFC65865F4C08531EC8ACE995F8A1EC560A46581CB7712C
SHA-512:	BBB70E6C0318ED68FC6810E0210D010FC743B9987C6ED15A43C5D308A96A43331B79C3FAB1B39A9034398418FA3321EEC8C51998D79C981E3F511DA3B398326A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/ec.js
Preview:	(function(){var e=window,f="push",k="length",l="prototype",q=function(a){if(a.get&&a.set){this.clear();var d=a.get("buildHitTask");a.set("buildHitTask",n(this,d));a.set("_rlt",p(this,a.get("_rlt")))}},r={action:"pa",promoAction:"promoa",id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",coupon:"tcc",step:"cos",label:"col",option:"col",options:"col",list:"pal",listSource:"pls"},t={id:"id",name:"nm",brand:"br",category:"ca",variant:"va",position:"ps",price:"pr",quantity:"qt",coupon:"cc","dimension(\\d+)":"cd",."metric(\\d+)":"cm"},u={id:"id",name:"nm",creative:"cr",position:"ps"},v=function(a,d){this.name=a;this.source=d;this.e=[]},w="detail checkout checkout_option click add remove purchase refund".split(" ");q[l].clear=function(){this.b=void 0;this.f=[];this.a=[];this.g=[];this.d=void 0};q[l].h=function(a,d){var b=d\|\|{};"promo_click"==a?b.promoAction="click":b.action=a;this.b=x(b)};q[l].j=function(a){(a=x(a))&&this.f[f](a)};.q[l].i=function(a){var d=x(a);if(d){var b,c=a.list\|

Chrome Cache Entry: 1031

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14280), with no line terminators
Category:	downloaded
Size (bytes):	14280
Entropy (8bit):	5.276977176711002
Encrypted:	false
SSDEEP:	384:ClsFV4vlRjHlDC3tycH4ZlkIx5AqChBRWE/jbnG94NWq+nhKIfyZU+Yg9:Qk8pHlDC34c4YIxGqChjWObG94NsnhKl
MD5:	42157720490BBDB64FEC9051D5BADE90
SHA1:	1C1661F3A998A37F982F61A558705EE7587EAA53
SHA-256:	CB8E4C9428BD82FF15D02B527E9DAD30AEFEF0EFE0516AC202DBB8F1B8E320F7
SHA-512:	5BD373836A45E098441CF68A544D0032EACD26DA8E7310D68BEDD289ABA84781BE92D7B7278BE766FB964B5359E96338CE372F51989F8AAF41E39EEA9BEC3D9F
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ima.js
Preview:	var _33AcrossIdMappingsProvider;(()=>{var t={110:(t,e,n)=>{function s(t,e,n){i(t,e),e.set(t,n)}function i(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function a(t,e){return t.get(r(t,e))}function o(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/envelope",h=1e4,u="ima",d={GDPR:t=>{let{consentString:e}=t;return{gdpr_consent:e}},CCPA:t=>{let{consentString:e}=t;return{us_privacy:e}},GPP:t=>{let{consentString:e,applicableSections:n=[]}=t;return{gpp:e,gpp_sid:encodeURIComponent(n.join(","))}}},p="33acrossIdFp";var g=new WeakMap,v=new WeakMap,f=new WeakMap,w=new WeakMap,P=new WeakMap,S=new WeakMap,m=new WeakMap,C=new WeakMap,D=new WeakMap,M=new WeakSet;function b(t){const e=JSON.parse(t);return e.succeeded?{idEnvelope:e.data.envelope\|\|"",fpId

Chrome Cache Entry: 1032

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1713532380444&did=did-004d&se=e30&duid=4299a5cfa81b--01hvv7t88r5mk5z5grejsrt8f5&tv=v2.14.3&pu=https%3A%2F%2Fwww.justjared.com%2F&ext__pubcid=a59c0898-b4d5-4e01-b773-f0480b65a0cc&ext_IXWRAPPERLiveIntentIp=%7B%22t%22%3A1713532347944%2C%22d%22%3A%7B%22response%22%3A%22error%22%2C%22version%22%3A%221.1.1%22%2C%22data%22%3A%22response%20missing%20id%20and%2For%20keyID%22%7D%2C%22e%22%3A1713618747944%7D&us_privacy=1YNN&wpn=lc-bundle&gdpr=0&cd=.justjared.com&c=PHRpdGxlPkp1c3QgSmFyZWQ6IENlbGVicml0eSBOZXdzIGFuZCBHb3NzaXAgfCBFbnRlcnRhaW5tZW50IDwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9Ikp1c3QgSmFyZWQ6IFRoZSBsYXRlc3QgaW4gZW50ZXJ0YWlubWVudCBuZXdzLCBwaG90b3MsIGFuZCBjZWxlYnJpdHkgZ29zc2lwIGluIHR2LCBtb3ZpZXMsIG11c2ljLCBwb3AgY3VsdHVyZSBhbmQgbW9yZSEiPjxsaW5rIHJlbD0iY2Fub25pY2FsIiBocmVmPSJodHRwczovL3d3dy5qdXN0amFyZWQuY29tIj48aDE-PGEgaHJlZj0iaHR0cHM6Ly93d3cuanVzdGphcmVkLmNvbS8yMDI0LzA0LzE5L3RoYW5rLXlvdS1haW1lZS1seXJpY3MtaXMtdGF5bG9yLXN3aWZ0cy1zb25nLWFib3V0LWtpbS1rYXJkYXNoaWFuLWZldWQtbGlzdGVuLW5vdy8iIHJlbD0iYm9va21hcmsiIHRpdGxlPSIndGhhbksgeW91IGFJTWVlJyBMeXJpY3M6IElzIFRheWxvciBTd2lmdCdzIFNvbmcgQWJvdXQgS2ltIEthcmRhc2hpYW4gRmV1ZD8gTGlzdGVuIE5vdyEiPid0aGFuSyB5b3UgYUlNZWUnIEx5cmljczogSXMgVGF5bG9yIFN3aWZ0J3MgU29uZyBBYm91dCBLaW0gS2FyZGFzaGlhbiBGZXVkPyBMaXN0ZW4gTm93ITwvYT4gPC9oMT4
Preview:	{"bakers":[]}

Chrome Cache Entry: 1033

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1829
Entropy (8bit):	5.46465490312469
Encrypted:	false
SSDEEP:	48:Yj6k2m2bZNdNbHGOWkbGO9Ix1GO5ubCyF2jjSIjGO+mrOGOtDBdz6GONVy:xvDbmL3xk7GZPGbEwBHgy
MD5:	624D41DDE37371AD3EAD79DBB7E40357
SHA1:	B0F30582B3F5536FCEB9B194754F7007819D6D91
SHA-256:	0016CEE139D17ABB50474B3D12F2DCB3A788AE313E8E2B5EEC2C3A110DD38714
SHA-512:	EBB3EE17F821A15E8EBFC7926D8087E02DB9ACFBD958EEF8E64BFA5AA48FD3E2B3E5895C03D7C8C3C616682F2679E89C35771C22A75D5DF4EB0A14013D743DFF
Malicious:	false
Reputation:	low
URL:	https://g2.gumgum.com/assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A1%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fthank-you-aimee-song-lyrics.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A613%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22%27thanK%20you%20aIMee%27%20Lyrics%3A%20Is%20Taylor%20Swift%27s%20Song%20About%20Kim%20Kardashian%20Feud%3F%20Listen%20Now!%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350573&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false
Preview:	{"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID","t":"i"},{"u":"https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D","t":"i"},{"u":"https://sync-tm.everesttech.net/upi/pid/URnmbSKM?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Datm%26i%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=","t":"f"},{"u":"https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=","t":"f"},

Chrome Cache Entry: 1034

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240417/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 1035

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2171)
Category:	downloaded
Size (bytes):	12505
Entropy (8bit):	5.405639254089642
Encrypted:	false
SSDEEP:	384:okqRm4UjWPL2F/LRqemGNENp0ba6Cm82sSirX:VqRm4PP2NwpMiSs
MD5:	7E2893EF542A12A5C7207D438BFA87D8
SHA1:	73852C24B51EC9C89260B32A4A66B3E2BFA226C2
SHA-256:	E0EE294B5487DF566AAD23B603FD902535634CFA957BE8E7620396515AFB1047
SHA-512:	BFFC0E55392853B9971090B78579F0F4003ABF7DAACE9927BEE505E89D8B6E46ACC5AC67DA761C97E1C607B7EBFE40A119F0AAB9B56BD67DACAB5505BB71A1D7
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
Preview:	/* Web Font Loader v1.6.28 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.apply(b,arguments)}}function p(a,b,c){p=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?aa:ba;return p.apply(null,arguments)}var q=Date.now\|\|function(){return+new Date};function ca(a,b){this.a=a;this.o=b\|\|a;this.c=this.o.document}var da=!!window.FontFace;function t(a,b,c,d){b=a.c.createElement(b);if(c)for(var e in c)c.hasOwnProperty(e)&&("style"==e?b.style.cssText=c[e]:b.setAttribute(e,c[e]));d&&b.appendChild(a.c.createTextNode(d));return b}function u(a,b,c){a=a.c.getElementsByTagName(b)[0];a\|\|(a=document.documentElement);a.insertBefore(c,a.lastChild)}fun

Chrome Cache Entry: 1036

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11528
Entropy (8bit):	7.979335843690684
Encrypted:	false
SSDEEP:	192:QJPP4KB5OZG3KCq/f5maIOMXE0GeQes+a4Gr22V685jnUdxMQcr9nAi7:QJPP485OrrZmBXEzNefm3NxCSQknAi7
MD5:	B6AFB568A4992502428CDF11A9B9D27F
SHA1:	FA7DA13DB91F63AA266738EA7A52B8D7911980DD
SHA-256:	AA5A4823359FCEA2D11804CDB3D6BEA3A2DA85151081FE64D00E0EC5D02EF06F
SHA-512:	540748F48352BA36A41586EE4F2ECF13581FA3D8D1B382D28C3BA2246C65F5C80CB623D9CF9200052069C56BF6AFF218809750CDD894385F01B49585F60567A6
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/brands/mac_300x250.jpg
Preview:	RIFF.-..WEBPVP8 .,.......,...>I..D......(....&...\|....Q.f\|.[..~....i.Ehy.s..?.?..6.!..............v.0.........m...o....._.wb?.o........?.?.>....:..-.#.g..._............^e.7.i./..._..t.i./.......?..n.g.R...7..g.....S...$.~....../.'...?.............7._.?...~W............._.....1.g......R.n..?b.......jB9Yx....r...n4!....mN...)...6....."...e_.O.6...I..O.,.~D."._..x..<.xL^\|Q....0...l.~..'nnL...k.........d.x .}^."....B;..la....-._..:s4 .A........}..!.J..J....H..7.].....HsD.......j....IP&r...U.y....;N...6K.6X......4..-8._.djp......!......._...N.V.q2s..\|.z.W..b~.X=.I..9.ya.Z...0.....(0.......-L.V.....K...+...\Y>.....z.......{q.......>...g..:.F.u....x....V.Z.2...-....kr..,x...s.5......sE.Y,f..L2?.;}..i...G.Q...Ne.s*.5 .oU5.SB._h.h.V.\...L.V..../.YO.^?...$.O.r...)J:......N.......j.....Oq%;.............2.!.......;?O2I...#..5.~5.K"^..G...B1.Z...Dd0#.SW7^..`..~...>..U...N...rY..f5"...M.pc.W.1.os.I,....2k..&J,....{..wq...Ym./..u[H....u?f..h>^.BF\|..5....ynkg.7...E.

Chrome Cache Entry: 1037

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=SrCpyrdV1RXO2T5&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1038

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https://cs.ingage.tech/v1/sync/openx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1039

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEMb0jRzCLadNKj4MBxK3qsk&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1040

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=3603977695
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1041

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4836
Entropy (8bit):	4.530923296053844
Encrypted:	false
SSDEEP:	96:6KqqGpEya0TAEy+swod+8ZDl2nAQMOLzA4M46RdsM5Bv:6rqkEqPVswodXtl2AQMOLzlnKsMz
MD5:	3808DCDEF3D73ED2362B991CD4C48328
SHA1:	BAA7566396003B08FF393D1DCF73109AEFE2B343
SHA-256:	EDFCC75A8ECC807ACCD8EBC2099BBA54EAF2F21E6D55EACAADD9575FC145D64D
SHA-512:	CECBCD086A9CB45B1BCD7DE9C00C2EA9493BC16FB85E661E3A0B6EE51E6B6634D7E91E20CDF6B8639BD4D9DDE8C6254AC4C3B0A09067274DCFF89DD55A82A7C4
Malicious:	false
Reputation:	low
Preview:	{"msg": "OK", "code": 0, "data": [{"latest_eid": 567018231, "sort_by": "default", "sort_order": 0, "episode_list": [{"release_date": "2023-01-31T01:50:03Z", "eid": 567018231}, {"release_date": "2023-01-17T01:16:35Z", "eid": 564032508}, {"release_date": "2022-12-07T04:30:00Z", "eid": 553681366}, {"release_date": "2022-11-15T04:30:00Z", "eid": 548039517}, {"release_date": "2022-11-01T20:29:15Z", "eid": 544843609}, {"release_date": "2022-11-01T03:30:00Z", "eid": 544583019}, {"release_date": "2022-10-25T03:22:30Z", "eid": 542830300}, {"release_date": "2022-10-03T23:14:26Z", "eid": 537719976}, {"release_date": "2022-09-24T03:29:38Z", "eid": 532957961}, {"release_date": "2022-09-07T03:30:00Z", "eid": 528241106}, {"release_date": "2022-08-17T03:27:44Z", "eid": 522708940}, {"release_date": "2022-08-02T03:30:00Z", "eid": 518691930}, {"release_date": "2022-07-19T03:30:00Z", "eid": 514502604}, {"release_date": "2022-07-13T03:30:00Z", "eid": 512792695}, {"release_date": "2022-06-14T03:30:00Z", "ei

Chrome Cache Entry: 1042

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1043

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=187107314970053313
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1044

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2922
Entropy (8bit):	5.429262685551172
Encrypted:	false
SSDEEP:	48:kHbLQ2RfmzWGO5bBdz6GOox1GOGU9dNbFGOh/gr51jGO+o26k2rGOUj5MueOSy9A:IrRepEBHbxkhYDb0SbCSxUDyPFvg
MD5:	0AE3D2F415EB9DFAC8F37ED4FD85EC2A
SHA1:	AF44E6BC6A66512EDEB2ADBA7B12F8B01F9AEE47
SHA-256:	95E8CB7DDA0FB609AEEE63E44C14CC72674E72F1C9BB4E58D0BBBB17FF1110F7
SHA-512:	78C954BA9EF51B795861988926A489D5761500F689F6C92A5C8B75F106547647CCF1971005F90CEF4B55317D65283E68849A62FB11FD4CCE57B018A25C6C0C53
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy=" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;"><

Chrome Cache Entry: 1045

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46773
Entropy (8bit):	5.993187673934276
Encrypted:	false
SSDEEP:	768:jQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtTTUVgO0cUVCzlx8Mauqct7bZ+gomRzzId:IR3joVVkC5x8MauRFMgXS
MD5:	5302FDE659F76CAF5A530D1FE7008ADE
SHA1:	A71E5AA8E265215F4188B6008E83D0E18F41FB47
SHA-256:	637C12B0D6C82CBF506F03FB4B4628116A8528D88DBD19090705499393C3D53E
SHA-512:	1B280AE92E6C9B548615C16D98ED03DF7B687E64936C81D11BED25304AA63B512C43D2DFF8039ED230F3914DE687AC399B847B53E6A821904047C25F9EEF85DA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1961765009388584&correlator=4283657558745519&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Ctop%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=728x90&ifi=9&didk=3894687449&sfv=1-0-40&rcs=1&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532396187&lmt=1713532038&adxs=276&adys=365&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=1000x-1&msz=728x-1&fws=516&ohw=1280&psts=AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR%2CAOrYGslC9W3W_3AujtsHnyKtJMzQcYpr29r_5ZsX6pG6_BNMAK-nIoeky6P_RVwjaPSfPclOilDIK7goP-od-fRqMNHEBgF2Smxd6_f4hUde5MH9o3CL%2CAOrYGsnbkBJrfC_SMFmhI3gHn7Jbpoegxe5Tygpb8xpqz8X_Ccj3kILwyL1gliBCXmc5cwrDFAzR2NL0OvXhP2KjkGmw83sDL02mdFW4VBm1WIr2pwyN%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslregH8m33151vWWC7D4Rvn983iFcPFWuZWCrwAU1TPh6mxxmg9WYDeZtvtKYM9Hp3z3T7PomhWtAjIo6mjk6L2ixyWnn8zRJShdK6s_4k8Nseg%2CAOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA%2CAOrYGsn5sJj3z7-aHWSiD9EoK1CwFjIru1iPcEFgW9ri01CZcMMRBEPW5N9FBsABWoubskQDODFbhx2ab-gzBkY6yX2QSgAZdWMsLxU5STN6cg&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EloKDWNyd2RjbnRybC5uZXQSQGQ2NjgzMzQ0ZWIzYzU5ZTY1NzhlODlhNTE1MTAxODVjYTAyY2U0NzRlOTYxMGJiYjk1ZGE4NGNjOTJjYWEyYjQYi9nzs-8xSAASGwoMMzNhY3Jvc3MuY29tGLHa87PvMUgAUgIIbxLYAQoOZXNwLmNyaXRlby5jb20SvAFyMmRFaEY4Mk1HRXdlVmd6V2xsMloxWWxNa0psYzNGdlkzbHpWRGN3VEZOQ05UUWxNa0pOTmt3MVQwOXBja1ZZVWxoV2FVTnlVVWRwZVdKaE5XWXdSRU5xWkVsT1VpVXlSamRUTWpaM2NYUTVXR3hyVEZkV1Z6WjNNRmR2SlRKQ1NFRXpZVzExZWpaT1duQlhjWEJ1WTFaVmRWRmxOa1ZsVDJWR1MxVjBjWHB5ZDNsb2NuZFJUMk5yUVdkVBjh2vOz7zFIABI-CgVvcGVueBIsZXlKcElqb2lWWFpxUTNCWGFIcFJUMWRWVXpnclZYaEJUVTlWVVQwOUluMD0YydHzs-8xSAA.&pps=5%3D640%7C432&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_Top_728x90%26pos%3Dhome_Top_728x90%26refresh_count%3D1%26hb_format%3Dbanner%26hb_size%3D728x90%26hb_pb%3D0.10%26hb_adid%3D1182afcfbcc1a43e%26hb_bidder%3Dcriteo%26amzniid%3DJLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ%26amznp%3Dra43cw%26amznsz%3D728x90%26amznbid%3D150jzsw%26amznactt%3DOPEN%26hb_format_criteo%3Dbanner%26hb_size_criteo%3D728x90%26hb_pb_criteo%3D0.10%26hb_adid_criteo%3D1182afcfbcc1a43e%26hb_bidder_criteo%3Dcriteo&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes%26arcspan_c%3DavM7hHWe%252C8FWC3Bns&adks=629776701&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/21854935662/justjared/desktop/top/home":["html",1,null,null,1,1,1,0,0,null,null,null,1,null,[138292446565],[5207086302],[4804912976],[2618582525],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslCnjY1KF8UNIYNIPsrH7Dv0H6CjXr1wChncYMbCRQ0atuiJCtPrgf_Tih99kadaqtTilPW7a5XSX1OoGZ-i7c5vTDc-MDFtp53Z0QdJ8zxEc6aC5U","CMuFm8-tzoUDFSPOKAUdhrIJxw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"6",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Libra

Chrome Cache Entry: 1046

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	389976
Entropy (8bit):	5.378415863505062
Encrypted:	false
SSDEEP:	6144:DqEl+lkVQ8cUkeCzHesomhCPqAVzOxBM3QkpEZ1DjgKMdbdHma:enCHqAHZEZ13gdz
MD5:	CBA11969642D529D7B24C81B429A4F93
SHA1:	1E4CAEDAC815DE68B6E79A739857872336298DCD
SHA-256:	B0A09EE66B5583934717FA9B3C2E1A8D43FACD81D544AD4B8D2160376390368C
SHA-512:	C5A09268BC65D190CF3ECB2F2C2A78188F23EF7BD6D9B0066FDD32C33201097B5943AC89DC46B9A1F1D4F8CAD78CB98C21D464BE0AA0EDFD7855BFCA6E9FFB28
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/player.ads.8b53ddd4f5e5c59de701.js
Preview:	"use strict";(self.cnx_webpack_global_elements=self.cnx_webpack_global_elements\|\|[]).push([["ads"],{1769:(t,i,s)=>{s.d(i,{Z:()=>e});const e='<cnx class="cnx-ui-loader" role="presentation"><svg class="cnx-color-accent" version="1.1" viewBox="0 0 79 90" xmlns="http://www.w3.org/2000/svg"><polygon points="21 73.322 11 79 11 12 21 17.678" fill="none" stroke-linecap="round" stroke-linejoin="round"/><polygon points="27 70 27 21 38 27.267 38 63.733" fill="transparent" stroke-linecap="round" stroke-linejoin="round"/><polygon points="44 61 44 31 54 36.769 54 55.231" fill="none" stroke-linecap="round" stroke-linejoin="round"/><polygon points="60 51 60 40 70 45.5" fill="none" stroke-linecap="round" stroke-linejoin="round"/></svg></cnx>'},1330:(t,i,s)=>{s.r(i),s.d(i,{ElementsAdHandler:()=>vh,OutstreamAdHandler:()=>mh,PlayspaceAdHandler:()=>Ah});var e=s(6716),r=s(8480),n=s(9475),h=s(6329),o=s(1247),a=s(9021);class d{constructor(t,i,s,r,h,a,d,c,l,u,p){this.l=t,this.X=i,this.eh=s,this.ai=r,this.pw=h,

Chrome Cache Entry: 1047

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	88372
Entropy (8bit):	7.980659773268412
Encrypted:	false
SSDEEP:	1536:Kr13WobEGe6dDq34Qw8lnNZ0MosZnUUUhEZ2/5oicJw1J/Fja6MZNg:UHo/kjQw81Hbos19UhEZ2/5ZIw1/TMZe
MD5:	97C98D832CC27DC8FC7BDE3140F66711
SHA1:	0348213ECD3A4B2E98AA9B450B1313051760698B
SHA-256:	0925F6199EDF009AF70869E434D1FAB3503C267BB078156684F663606C0BD199
SHA-512:	523033F85BE278C7B958A51BD701C01914B0551048F4311654ED98A676E5390D0F068A207F6CF17DEEDD6F3E10F515CE8AA28562356434E1CA74537805AA64AF
Malicious:	false
Reputation:	low
URL:	https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded_episode400/36252507/36252507-1675129791406-55c48aea3e968.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................................................................\..........................!..1A."Qa..q#2B....R..3b...$r....C..%49Ss.......&5tv...)Vew........................................K..........................!1A.."Qaq2.........#BRr...3b..$45C.....S..%...s............?..O.;y....V..(%..3",y..........S.;..p?.B.%...32...w`.Qj=B..2[....d.&7.a..RRl.c..BR....T....}..B.9.l.({.bG..#.....9.{...z"..U.\H.iAc...F...y@.I....Z....R.kd.oC..!.....K.q.l/..[...w.;..Q.....W.J5.n-.s!V...Q...nX._.~.X"M.....iM+.C.p..t.A....(.H-.E.........^....5..=0OgQ...p..z.......AA.Cr.q..o\,......HW......G.!..Q.^..}.(....<FM.q.X.. zu.7.._`\..m....=..." ..C/.ez`.k...im...K\.\.;...I....q..q.p..5....u..pz..P_..Ry.]......H54.....H..+... ...P_.A....Av./$....8!`..fmA...J...Q.. ....;....................Cj4.om.. >..Y.J........T.O.a.R.{..\xi].;.TR...

Chrome Cache Entry: 1048

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2668
Entropy (8bit):	4.459978268283667
Encrypted:	false
SSDEEP:	48:uDj5rB7seMTkmUrqNw9deOej36lpHXWMyz1j:kgeZ/q8lF5s
MD5:	CA20FAFDD9EB008FEA69930377978B23
SHA1:	2E12E81415F8A41D3511107728CB1408F2C02F33
SHA-256:	BCF7CF073E4DC6E46A9CD1F03C6815816377F97A806F55D14651FF1EFA0425E1
SHA-512:	07EF3524E5DBC229D8E13BBEF11DE2DFE69B76B2BF02D983EAA41B8E0A0C96BA876C9100434E6D419B45E00E475C365F7A73EE634D44FC5CCD91C38EED9A2682
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/container-4.0.html
Preview:	<html>.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=0" />.</head>.<body>.<div id="IL_IFR_Content"></div>.<script>.. (function () {.. window.addEventListener("message", displayMessage, false);.. function displayMessage(e) {.. try {.. const evt = JSON.parse(e.data);.. if (evt.name === "IL_iceContent") {.. createContentIFrame(evt.content);.. const styleElement = document.createElement("style");.. styleElement.textContent = "body { margin: 0px !important; }";.. document.head.appendChild(styleElement);.. }.. if (evt.name === "IL_sendExternalMrc") {.. evt.mrcTrackingPixels.map((pixel) => {.. document.. .getElementById("IL_IFR_Content").. .insertAdjacentHTML(.. "beforeend",.. "<img src='" +.. pixel +..

Chrome Cache Entry: 1049

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1147)
Category:	downloaded
Size (bytes):	1236
Entropy (8bit):	5.713711144507702
Encrypted:	false
SSDEEP:	12:3x91bkAadpMCJMdMFd2UB4JoOidAULw8FwnthFdMFvvULwBaL9dMFJULwniyUHyL:f1bvTS2ST08FwnthFx0IR90nbL
MD5:	20D03B6E224E39BFA9BE78D3C333AA44
SHA1:	3E5C69460D76AF66C41761B1A37F85FE10630D3D
SHA-256:	4B7F90D774761248E509CFDE6981BD5FDD36E2F0EECC63BC1E9C691BC8983A08
SHA-512:	E1ECC02B0A8CB39F4B100CBFBF7990B885FD6969E847DEE06D039CEDFE43C49FA76F0EE0E9F835149CE14B465C2050F54B85BE59293D6290D8AF125F6282B40B
Malicious:	false
Reputation:	low
URL:	https://prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D%24UID
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=a662aef0-1110-44c8-b99d-2acba4a5db18","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dopenx%26uid%3D%24%7BUID%7D","https://cm.adform.net/cookie?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&redirect_url=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dadform%26uid%3D%24UID","https://ap.lijit.com/pixel?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING

Chrome Cache Entry: 1050

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1051

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=10339&puuid=9dddcc778da6c34cfd6845239a1ade0531bff99a282de06522544528f480765e791426b5417dce21&rand=09284267
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1052

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072960&val=1rfdvjau1x71p
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1053

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZiJt2wAAP96DXABZ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1054

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	199531
Entropy (8bit):	5.361832508879162
Encrypted:	false
SSDEEP:	3072:XzlK0e3yunHMvAMaN90arWPm+uPMRP911ekxr:lwcaaPmYN
MD5:	309CCAD56D41A176DB6A9C00A7971047
SHA1:	0D5E5A184B8BB531E5A39BB7DA0F117E4BA052D3
SHA-256:	6E4663C0AE7647335AB08E77244695AB69AB2691E4BCFE6F5CE1ECCC5387420F
SHA-512:	9CB47D0664C3E56933C2A6444D75221566F5D4237533CFB55A50B76365E1EFEEDF0D1484A48497921C3C6CD1635EFE7BF479D1E5F9DAC87158440CD4CF3DA206
Malicious:	false
Reputation:	low
URL:	https://01.cdn.mediatradecraft.com/justjared/main/main.js?template=homepage
Preview:	!function(){var e,t,i={534:function(e){var t;t=()=>(()=>{var e={381:function(e){var t;t=()=>(()=>{var e={667:function(e,t){var i,n;this\|\|window,void 0===(n="function"==typeof(i=function(){var e=/^(interactive\|loaded\|complete)$/,t=window.location?window.location.href:null,i=t&&t.replace(/#.$/,"").replace(/\?.$/,"")\|\|null,n=document.getElementsByTagName("script"),s="readyState"in(n[0]\|\|document.createElement("script")),r=!window.opera\|\|"[object Opera]"!==window.opera.toString(),a="currentScript"in document;"stackTraceLimit"in Error&&Error.stackTraceLimit!==1/0&&(Error.stackTraceLimit,Error.stackTraceLimit=1/0);var o=!1,c=!1;function l(e,t){var i,n=null,s="number"==typeof t;return t=s?Math.round(t):0,"string"==typeof e&&e&&(s?i=e.match(/(data:text\/javascript(?:;[^,]+)?,.+?\|(?:\|blob:)(?:http[s]?\|file):\/\/[\/]?.+?\/[^:\)]?)(?::\d+)(?::\d+)?/):(i=e.match(/^(?:\|[^:@]@\|.+\)@(?=data:text\/javascript\|blob\|http[s]?\|file)\|.+?\s+(?: at \|@)(?:[^:\(]+ )*[\(]?)(data:text\/javascript(?:;[^,]+)?,.

Chrome Cache Entry: 1055

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64607)
Category:	downloaded
Size (bytes):	507853
Entropy (8bit):	5.392317003440015
Encrypted:	false
SSDEEP:	6144:PX6j3/k4STd9Iph6HJTgWRCHuzVrhI030GgDHOcuX8f:+3s4U9WhiCHuzVZpg6U
MD5:	11E81CB9C1F9E4A9F76454EF3E180919
SHA1:	042647F7FF49794236B4624D70FD5F37192D23BC
SHA-256:	0718640265D24FD39DF119032C6B188854C0F5D2EFE221F0056420B259991038
SHA-512:	55A9A36C507CD67C79C5DCD9F3CF0AC092780C3E1843C9CAF043CF89B7363D472897DDB8C6FB58B2AA91C9D94AF85EF892630C2FDD2B308639FFC2BB5B2D5CB6
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10.js
Preview:	/.Enabled Modules: prebid-core,keywords,connectIdSystem,cmp,33acrossIdSystem,chunk,categoryTranslationMapping,id5IdSystem,gdprEnforcement,ortbConverter,creative-renderer-display,schain,lotamePanoramaIdSystem,htmlEscape,urlUtils,unifiedIdSystem,insticatorV2AnalyticsAdapter,mspa,getOrigin,uid2Eids,objectGuard,pubProvidedIdSystem,transformParamsUtils,userId,gptUtils,currencyUtils,sharedIdSystem,appnexusUtils,gptPreAuction,consentManagement,domainOverrideToRootDomain,identityLinkIdSystem,pbsExtensions,sizeUtils,criteoBidAdapter,sonobiBidAdapter,amxBidAdapter,seedtagBidAdapter,ixBidAdapter,appnexusBidAdapter,33acrossBidAdapter,insticatorBidAdapter,pubmaticBidAdapter,adagioBidAdapter,rubiconBidAdapter,minutemediaBidAdapter,riseBidAdapter,openxBidAdapter,sovrnBidAdapter./.if(window.instBid&&window.instBid.libLoaded)try{window.instBid.getConfig("debug")&&console.warn("other instBid detected.")}catch(i){}else (function(){.!function(){var e,n={35706:function(e,n,t){t.d(n,{Pd:function(){return

Chrome Cache Entry: 1056

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4514)
Category:	downloaded
Size (bytes):	4515
Entropy (8bit):	5.408127749691069
Encrypted:	false
SSDEEP:	96:EdphI0SC44g/BrcH+JNVQODcpd9ZPrvyMW026pr2V:431YcHUNi2cpd9ZPrW026prG
MD5:	A06E7A176F40DC26AA5E9567AC9D2D5E
SHA1:	FEA092C34AE5A957A08A40BA5DD5BB8B86A8F517
SHA-256:	1AEE66E2E24E851039801C0DACE90F3EFB7A1A17B033F7D5BBC12CA7C1D19432
SHA-512:	801A9F6CE143BADCFB2B4678E5D00147392FA30942DFB3B9B945438289639A678FCC742268DE1F69B7396CDCD14A30A75ECBE66A5A888CFABE9860D531824358
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/beacon.js
Preview:	var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e.length>n){var r=e.substring(0,n-8).lastIndexOf("&");e=(e=e.substring(0,r)+"&ns_cut="+o(e.substring(r+1))).substring(0,n)}return e}(e,r),e}function r(e,n){for(var r in n)e[r]=n[r]}var o="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,t="undefined"!=typeof decodeURIComponent?decodeURIComponent:unescape,a={};Object.defineProperty(a,"o",{value:!0});var i,c=a.t=x=a.i=void 0,f=[1,7,8,9,10],u=-1,l=!1,s=!1,p=[];function d(){for(var e=0,n=p;e<n.length;e++){(0,n[e])()}}function v(){var e;return function(){if(!s){s=!0;var e=+new Date;"function"==typeof __tcfapi&&__tcfapi("addEventListener",2,(function(n,r){r&&(-1==u&&(u=+new Date-e),i=n,d())}))}}(),"function"==typeof __tcfapi&&(__tcfapi("getTCData",2,(function(n){l\|\|(-1==u&&(u=0

Chrome Cache Entry: 1057

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63593
Entropy (8bit):	5.947619899186645
Encrypted:	false
SSDEEP:	768:78UQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtIFPR2kTtWhrJT/TruEKgt0w08be971Z:wtR3Q2N7ruJYnRen+VrKC5xn0hAXY
MD5:	D6594BFF30901E7C9BF26AD5703D49D1
SHA1:	21304F6F52B4966210D1D5CDC1A5D80CA61C62E2
SHA-256:	F9C91895BDC33D949424A4DCADA9A5DA99A470A6C1AF3EF4B9FF358B16F56693
SHA-512:	644BDD807F74ECD9610410E6B189D15E454380180157DF3E16934DD2D3597157F2630D9B45BFBFE6148B85ADA6E56C71306F8C2A3886431A31C1951401FB44EC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3310372320495227&correlator=2016777908151041&eid=31079956%2C31082852%2C31082859%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=3&didk=570410215&sfv=1-0-40&rcs=2&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532430852&lmt=1713532430&adxs=309&adys=1246&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=3&ucis=emlo9kwgzbx5&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1626008654&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532359339&idt=13739&prev_scp=tg%3D4%26shb%3D1%26it%3Dtbr%26aid%3Da32f0cc1-74e5-40e0-95d2-f52aeaf8af9e%26ib%3Dnofill%26iaid%3Dnofill%26iba%3D0%26at%3D1%26h%3D13%26auto_refresh_counter%3D2%26axa%3D0.13%26axa_on%3D1&adks=737501260&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_5":["html",0,null,null,0,250,300,0,0,null,null,null,1,null,[138471570643],[5747548770],[5046746103],[2884915608],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGskbA_X99g9Nuc4koMDEvczLHF_VHn6F88Reaz5UC6t-fHcjjqvckfRGvuuxijMXDS08xUXmr6EYIcfn","CJb_x9-tzoUDFUXkKAUdbFwEjw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"emlo9kwgzbx5",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240417';</script><script>var google_casm=[];</script><style>a { color: #000000 }</style><script>function su(id) {var a = document.getElementById(id);var b = (new Date()).getTime();if (a && a.myt && b) {var t = b - a.myt;if (window.css) {css(id,'clkt',t);return;}var bi = a.href.indexOf("&clkt=");if (bi > 0) {var c = a.href.substring(0, bi+6); var d = a.href.substring(bi+6, a.href.length);var ei = d.indexOf("&");var r = '';i

Chrome Cache Entry: 1058

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13868), with no line terminators
Category:	downloaded
Size (bytes):	13868
Entropy (8bit):	5.2453971682194585
Encrypted:	false
SSDEEP:	384:RHrDdIU0kigD+25+JSpy4dcqzfw6vM3Vb5tUQZQQ:RHrDdIU0kigDPIJSpy4dcqzfw6vM3VbF
MD5:	962799BDE57B6F9D0968F8F8AA06E9CC
SHA1:	B9058C353C9959B248397DA4337DC5335181248D
SHA-256:	0B352076D693F19F34205904565D791868296FB3C14E84ADE6E6FDFF80A54346
SHA-512:	19879744A8C8C0AE22C4624C1FCAA153C696056853B22F20223AF85A374BAFDA4C64EA940AE63241239441B1C87748DEFF5FDCBC6A11060678C73F9B45E1B564
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/player.floating.b3566aced0e26b675f5d.js
Preview:	"use strict";(self.cnx_webpack_global_elements=self.cnx_webpack_global_elements\|\|[]).push([["floating"],{5942:(t,i,s)=>{s.r(i),s.d(i,{FloatingModule:()=>m});var h=s(8671),n=s(6716);var e=s(2411),o=s(7021),r=s(7360),a=s(5614);class l{constructor(t,i,s,h){this.bn=t,this.Ly=i,this.Vf=s,this.Tt=h,this.DL=!1,this.t=null,this.h=null,this.p=new n.x,this.S=new n.x,this.m=new n.x,this.P=new n.x,this.C=new n.x,this.k=()=>{if(!this.DL\|\|!this.A)return;const t=!!this.A;this.M(t)},this.B=t=>{if(this.H(t.propertyName))switch(this.t){case 0:this.transitionState=null,this.S.next();break;case 1:this.transitionState=null,this.U();break;case 2:this.transitionState=null,this.j(o.jG.FadeInBase,o.jG.FadeIn),this.C.next()}}}get isInFloating(){return this.DL}get transitionState(){return this.t}set transitionState(t){2===this.t&&this.j(o.jG.FadeInBase,o.jG.FadeIn),this.t=t}updateSettings(t){if((0,a.$K)(null==t?void 0:t.scrollPosition)&&(this.bn.setScrollPosition(t.scrollPosition),this.bn.setExtraHeight(this.bn.

Chrome Cache Entry: 1059

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2019 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	32915
Entropy (8bit):	7.962548872435107
Encrypted:	false
SSDEEP:	768:XqqfKRlCCOur5eFnHd87M27amxTvBgcvO6xIQfFAL4lq2:XelCBcepdetgcvH5fFAU
MD5:	A9CBC3A4FF99F419A6E6C7624FD64077
SHA1:	707DCA3B1B4CE9FA1A5818849A7058F042E71457
SHA-256:	22D7200DDD3C5F0AA8A5C9F4A1A814E99973FA64E67273C44496F4986AAE11F7
SHA-512:	FC51356883A815089F40742AE992CA2B6F7B7A82E1A8946604FCF91DC8C29F60466C603A980C7C10F206F01F790B63929E05932D8F8A9251E5F0DF0E58E20F21
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2019 Getty Images.......Ducky.......F.....thttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" photoshop:AuthorsPosition="Stringer" xmpMM:InstanceID="xmp.iid:582F08DBFE1211EE8D30CCA90C398DFB" xmpMM:DocumentID="xmp.did:582F08DCFE1211EE8D30CCA90C398DFB"> <

Chrome Cache Entry: 1060

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 191x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2562
Entropy (8bit):	7.921131066359679
Encrypted:	false
SSDEEP:	48:xCKwK5UpB5QL5IaF3MKz7XTSP0gpzIIzy9CZrDj94g1fCCdDnMScp:L5UpByL6aLPXmPdzIIe9ErDB4g1qCZnk
MD5:	8A187AC9AF6254C1285BDD27F2B5B0D8
SHA1:	B448F76B665214F5B6DB1C18B42D5A5D91161398
SHA-256:	EB4ABA7C63CB314CD7C2E7BC3E4D326891F7D40E0A82C13645467F75C7BB39D3
SHA-512:	D806D4B2031C6185C0A076BC3E34D00BF871DB9150D4C9F16DCF6B716D9CB27D933DCCDE0DCA50B87D55010F0194AB20AB48486A393B7A2169CE8A442B18A4DC
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400020155681_MATCHA_486x684.jpg&v=3&w=400&rid=6&s=HhZ0fSju4j8FdnSjNit_LSNx&b=400
Preview:	RIFF....WEBPVP8 ....0I.......>m6.H$#'.%q.....gn....zj.\|..U..AQ\.9\|...p........G.e.r...>....6.....;.[...V.;@.....M.Rl...+....;..pg(<.h..%.F!..&..wq..o6s+.......:..m.p...-....:..aH8.[&.h@..6..]...7.%.)....Q.....yG..=Y.zAV_"4...T..k...K.\=t,. ...]..0\NW.....v....mA......A..o..q..'..Q..?Nz.U...[......;..K...j.3.........".Q..<..@-=.4.K..kF..F...(w.kG.nx...L...% !.ef.I...x..Z......>t...fH....!...".....2...g.(.3[.]........T.....<..!.XO..-zU.+q..<.....a.e........Wb.......&..S..XZ.ow..\|T..9`b...........U.(.&d.d....s.....W.P..5....U@2.%..A. @.Nq...z.T.......0.MT..h.....}..h..r.jZ.F.^yg..t....!......a....(r.#e...I.c......5<.j...>......F.B...u..m..7.....\......b.......Xo...`..R.z\.;......~...UJ..P./$do....^..".m.$.Q.g<.+X..5...L...w\.1=.h.z.,.....eQ....a,...B]...A-./.f[Q.$..x."e]......V5a...........R...g.=.h:..a.&N#....W.f....~E.....fC\|..f..l..!s.4....:..0.5.9.,.....fNv.t..K{>...w....F.....p..X.......~.BR..z.^.f....4.b=q..;xMI.H...V.._.9v.(......g

Chrome Cache Entry: 1061

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=3918322163
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1062

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	202
Entropy (8bit):	4.5352138509647455
Encrypted:	false
SSDEEP:	6:rrBHI/Z9sjDEXTdkPEIU+ADtp2hEEXTx+tA7:RHIhCjDEXpkPEt+ADtp2bXF+W
MD5:	B1CABA4CC6008D11FFD00AA4494C0019
SHA1:	E3AB07FBC9EDF0F34933A36CCB134686BDD8EEA5
SHA-256:	8F54B3EEA1B94DC8E8BC73B8C655E674DE9963805C60811FD6AACEA0ECE27D42
SHA-512:	6A01B5A5FB8F1CD2385BD829F9CAC00DF764A372BCE340D44C13987BE0E461E3EAFEF12C8DDAA71648B813638E0BB2052809F225CDAD969ACDA0CA15F52E684E
Malicious:	false
Reputation:	low
Preview:	{. "stage_message_limit" : 1,. "site_id" : 7443,. "public_campaign_type_priority" : [ 1, 5 ],. "multi_campaign_enabled" : true,. "stage_campaign_type_priority" : [ ],. "public_message_limit" : 2.}

Chrome Cache Entry: 1063

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	293
Entropy (8bit):	4.90307069513954
Encrypted:	false
SSDEEP:	6:8WiIUemo/H1fCYKbY4DCVeOcANYIshV9RvAWudKd+GJpoeoM:8DIGoNfCYKbEeOcHIseIdrJieoM
MD5:	D9DBD3318814CDCCABA057C08AF65705
SHA1:	526CF7F0A422A4A68386370780C9D07D086E6E6A
SHA-256:	E7FAEC8B61422524A5BCA3F040860C1D135028BB0139A5906F463793DA0E4A77
SHA-512:	57C2BBE9C47ED929FD628FC3390045712E48DF17A8F37C8A5A98E1A2E698F11E288DDEA32A773D97FCD4FCED96B8C2725841490804E1A09169C45F39E15A458B
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 1064

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16559)
Category:	downloaded
Size (bytes):	16595
Entropy (8bit):	5.257610671511415
Encrypted:	false
SSDEEP:	384:llcwPCZVWO4HIz1FsWgw8S1WG3fDQkgJ+mtZyrZCuWS:U5FZPD1WMfDavutCuWS
MD5:	661E6ABE0A5412C54B6FAD71BB67C591
SHA1:	0E36CC51DC77A6D265F529F11BD5D5A1CCF886FE
SHA-256:	719A1764B0D9860BF828AE412AFCB86C0D38E8E0E3C1A3781637F747B22A0C8D
SHA-512:	2C7A883BDFF2A9FE76462D09EFD378E5C1C3FCB757BFE5C9BE70DF2F8489A59B5F859AC25336ADC8638468D6720774F64B89A3526CE1AE641CEA292901DE86D5
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/cframe.js
Preview:	!function(){"use strict";function t(t,n){q.forEach((e=>{try{e(new Z(t,n))}catch(t){}}))}function n(t,n){return-1!==function(t,n){if("string"!=typeof n)return-1;if(null==t)return-1;let e=String(t);return 0===e.length?-1:e.indexOf(n)}(t,n)}function e(t,n){void 0===n&&(n="");try{return atob(t)}catch(t){return"string"==typeof n?n:""}}function r(t){return Math.floor(Math.random()t)}function l(t){return new Promise(t)}function u(t){let n,e,r=l(((t,r)=>{n=n=>{n instanceof Promise\|\|null!=n&&n.then?n.then((t=>{u.v=t})):u.v=n,t(n)},e=r})),u={v:null!=t&&t!==String({})?t:null,r:n,o:e,p:r};return[u.r,u.o,()=>u.v,u.p]}function i(){return Math.floor(Math.random()(Number.MAX_SAFE_INTEGER-10)).toString(36)}function o(){return[i(),i(),i()].join("").slice(0,18)}function s(t){let n=[];return Object.keys(t).forEach((e=>{var r;null!=t[e]&&n.push(nt(e)+"="+nt(String(null!=(r=t[e])?r:"")))})),n.join("&")}function c(t){if(null==t\|\|t.length<2)return{};let n={};return t.replace(/^[\?#]/,"").split("&").forEach(

Chrome Cache Entry: 1065

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16523), with no line terminators
Category:	downloaded
Size (bytes):	16525
Entropy (8bit):	5.2715715288862555
Encrypted:	false
SSDEEP:	384:2Pw+3znw6/0NR0XDncepLCdSvUBtXFqalMB1HW11TmA55IY4MuddCPdSFp:iw+3rZ/lzn5pLZOXFqalMB1HW11Tmc5g
MD5:	0E56AB6BA004EE080CE3DEB3EDAE35E9
SHA1:	E21368421203291B3F335B7FCE4504F83AA2FB71
SHA-256:	F10699F59E4285B87AF5097E4BA9E470EE29B4F3487FA767F2818BDBBDD6BB14
SHA-512:	24D9AE7E35606527C02FA172C9948117266FE3B04A0E6DC25C9AA21757BA9DD7D65E3CBAC13DF1B009F252A59848D74B1E032BAAEFBA36DE3E84807A9E44476E
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/assets/smart-tag/versioned/onsite-v2_0e56ab6ba004ee080ce3deb3edae35e9.js
Preview:	(window.webpackChunksmart_tag=window.webpackChunksmart_tag\|\|[]).push([[302],{4624:(e,t,n)=>{var o=n(4836),a=n(8698);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=o(n(8416)),r=n(7979),u=n(1915),s=o(n(3236)),c=n(2481),p=o(n(8239)),m=n(1964),b=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!==a(e)&&"function"!=typeof e)return{default:e};var n=w(t);if(n&&n.has(e))return n.get(e);var o={},i=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var r in e)if("default"!==r&&Object.prototype.hasOwnProperty.call(e,r)){var u=i?Object.getOwnPropertyDescriptor(e,r):null;u&&(u.get\|\|u.set)?Object.defineProperty(o,r,u):o[r]=e[r]}o.default=e,n&&n.set(e,o);return o}(n(1847)),l=o(n(273)),d=o(n(7686)),g=o(n(4160)),f=o(n(3251)),x=o(n(2261)),v=o(n(6105)),_=n(5385),h=o(n(5754)),S=o(n(9974)),y=n(5295),C=n(1555),O=o(n(8067));function w(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,n=new WeakMap;return(w=function(e){return e?n:t})(e)}function

Chrome Cache Entry: 1066

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-xandr&userId=187107314970053313&gdpr=0&gdpr_consent=&us_privacy=1YNN&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1067

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	85708
Entropy (8bit):	6.099634730262895
Encrypted:	false
SSDEEP:	1536:clc0nycT+cm3inLRelxzEr8AReHTf55pPRhJnqRxnKXOfZBFJlc:BMr8/BEnKXyzF0
MD5:	1E3209412BAA46FD222DFA74C69E36C7
SHA1:	FBE1687E3D17A4ED19B8B9B3AE36645983A92DEE
SHA-256:	6B4C5724DD6F8D5D225151F0CC3D1CB482B973B1678CE4FF28CA1A650541E912
SHA-512:	673F753C23D6D9A9800F6C60F872218C4B328F40FA5B47A94F10156401082A22503DFC50092897F62009A943EA51C0F4ED0C4A0A1ED3BD75E7A200B7135B6C5F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BBMqWNA2X7_5V1LFprvxJxuQ613AIYEQflXwTUTdXQNxrz4dGQaps1TkjhxA8QFA0d84hzGh6ej1F8AYirBzVVe-HffEqrE3-iJZTRe43NgtpOQnpCyVXCj-EZNS4DwMWVD2-9M1aWbou5ZIw8t04ROtIh108Lqx3vOHYq0aBra6_4eklKtce56mkHPbaaWh8tNdblGJFF5illqjY8eZIZWkDixGQK4adJZpJq44KZJgvlAvk&cry=1&dbm_d=AKAmf-A7n9NIjqUWxWpeOzHbBDiZHlV4gounT654sBaLrYx7uuwAwqaTSWsqmF2au9j4uiME_LDCP0U-upSUmRIwK79KV8u80Oh-KbkYHBpowxYItMmoCDs0YsqHO4uA0f2lYlvjLBxOJTGYmEXpD-Vi1yALfQjbnm1oX3mT4UZzNoqg7qN5Gx3wDnLcUSVSjI7yNuumGuHRBHCE9mwPXptBM-stZ-mKCxZ7zprWi3DO9aIfhqbEVa68vmva9x0uDl1rIWpgf2YJtUry-V55DYh25YiuQ9dovrS1_0rh0matgsec6FSBpXFm-GxxV2q-p1tBC_YMwySlMVli1G03K96MWbxVZH_BaqValsJurkN1sHuqBcJlWzjvgeaZWFIgYZXYjKmryzh8AtR4zf9Lafta9Sz1vVESKcjG6XTWmKhAPcAO7ooltM8RLy7SWaPoyqp4RVMeJlgyzFFnHurtemgGMIQ7awSPov5REL-u_jsyfCACrfodwhfQ9d7-GG0oO8S1I10N37fjh0WzLxlCbEWQh8BOPj0nwCvgeS5Kn_Mf__HgaOfSlwQlaAB1RazStEGftX99k8zp_l-X2xwZA0AF0vMzCmV0z4DsBShuxVvH4q9pXR78T0j6xJJy_T9xP44X3NJ0mC4yeOrDHER6TYrctMtMe4HZw8hGDZuSUkJGeNVcbzXb-jvatuwaJEnMpX1op-oiKJ7_2zTDKML5wTjKOKqw4isDe1gKYisb4fTr-eNQsNntCH6TLq0yvWRF0GSa6SOo0u8GFWQXoVVsi7Ixt-7gsxOV8-RwgPdOtgx6k_oZdeRWpVJVQFKCzHLrJQo2ObE2w--AnQ_dEedB4pISXSycfTMuB76Br9j1gWYUmlFe1oMkZXJDbEeujFjSMw-NGptBgENtcAMnb0x5JJIkLiwOW4fNtLGz8X-RF2Ya8GpJF9mjSUD1EGrRya5YRJv4uOtJvAL1i7D-AcdCgd7nbxBTIjYPPVsge48fBPZMEmWB-uPwUPHq0jFjSgWsAOsA48NWFRNQN2l8sNbqGuUwlJF6QO2aTH1dymYZkGFVu3p3jFh0Ax5F3hdpVp1fikY-b9el-1JiZHiOXjjn0BaOzCZZTUECx8jML9CfTtFVGJSgM-O16guxHMq223ClmQS7vTDzAM-L2uyAJSVseGTRXD7ZkO3zMApRXTltb1sTqp45iYBBPEFNKN6U5k6o2e05mlB18-tnquSiTniiljlN0XpzDC20CEua_-iKQbkUU-Ty8Csg2ADmfwws7xwbcIxaA1d9UDaYkw10yBuynMJWYDP8Rp2FUlSQjx0GLZIWhnuyOaXycgr0LCbZknvninmv0HvfMKx2ZBTMFcO1OPf4Ttl7PVI-2AWvhA5vrsCT_hH_sRB69O6DU1NgJAHCfd66vIuTC_4x61qNtV0ivMScPrjcYVoclGBCoMZf7aRMbNI-rjksaPd49mKz8siLI_HCYziVsLWnXBjv7spA154lU9TuhlfgvCFCo95hK5iQnxpig9mnEu3CrXsa1-4Pv6wrC-IKyP-5_LpRQPUirh5euwAn3Ih4n9_WNkb638IgwOecp_ZH-nVHX5Ypzz6d5CHWB52tMKqENnkGFVSReOkW8LQiNURtvZz8zeYh_qjP33vhP2NbA3GYSqAbB8SyCxulEcoY80VjkYA7FXk79TcOu13tVJjsfHJLnavsfmfj1D73zXRzrKvCJLHHFFgY87AuSKdyKTNGl4MEcLmVpkjiWfurL0e5XVwGJmjtUZ0hwN61nT0u5Qc5KT4WN6KN-xbFSexk2_vTis0BLErLWF-_w9A_8rtcMA8iTMyIlHTRCVsAEO_WafEzf4VSlwI1KDvUXSokzr-EwLaXT3WrBMAloeZKekxeXkAZ80AQ3yICiKecRHHMTXQCsf0ScNyGcjbyKLJnwy10_kT8b6MRk6u2QD6YuFq8mGtJTjW3IOkcoopcRP92Fn-GwsPqIu1SkyeTngFKMap4t8OjRI2stMU90WYbKRO1fkP1dEQBOGTFYjdRdD_f-dq5wsAL3NWMl1rPxrMEV31QboQdWH3XaelLKF5Sg_rSgLwRChiYB4FgF1SroDEvq5Sie3QDrAKgMLiP_xj6vb8iTaofEwG9nUrK8d2QO_sXReF_5POsgYMo2gvBkEOouLeiXbDPEJoFPUmvMFShwihXoQt4q-8j3O_5eUwJjVm1GQpePwEaoK17PA_TDIY4efWFuK13_k38-OoYLab4ITpxhXuyjiZQ3OJh8l-jR3AYtzU-U8aXysRqzoDdj3DLeHLLDq4WacoJ7Dcixv7PpGG0mbC6HSDxEkh8pXmJ-yRdNRswmk8Rhte09w8NwK_DTIAcv4e3ezmU8ZDxqT8XLJHwkBKlg7rnqUK5w1AlikXVMPuaEpPqc887dyI6F4F5ex0OrTVCe1KE7DtRjNYqXN-7PJJj_8csz3iFWR_L0Wudyxf12TZV2hFRv9T-zqtY4EUbXc7yylfP0AbmBdJ0cx12rDvzjX3ZGE3kpI9sRrmmKh67A_-ofFUwJaWrlQnn_F5Tynm7LA1UceTCMxzI-dUtrbJhIjmbiZCrP1Z_VgJgGfSpeRzutFNgLghk6s7zaHJjO90s1HuNPptPmLyWjf13ci_J0fdOhs4Y2enUbmbDk7L_bXOUNiLe_M1GvWFXLoxSqmHuNZ_AOlfdOe47KFENGCg219OXf7jNMUrxO_DkYmCf24V962zH59-lXWoWwpfiq4nQfSxIg2tnqFGLDdsF7JJNFmDGRtJUgeu1FFvQt9EjzVeLTOD01SocGvt38vbZ998OWi9OqFT9xlzmu13XcrSMpQ6xRfLSdUwQfdT5tPPcyHGQcreTv_zURYpPfftHFZoaMT7fETMIeAiWcAJb9foQt46E1dnlsvR06JtKQluAlJI-ZkFsYbEZWW-Zyp40Kf1RuM2tsmKqZY278B9NVycosU9qCCImZedwkyaaIHH_uueOKzKGD57CLNXOTdq3CSoM2LmqEBZJ0kZ5EqpuThuIpUJFzAsB7w6nthpwgIuPB6OBJiTyvZm8oYLKQ2PXj6ehYZ_M_agMtpO--olkuvocQBut-4okNzdEGwr2ExBv8xpYDEsnGLywL6WdaABwdtYWopXQZ8s55ZjnJZhhdbQYu9rtQlyaM-xYhV4NRJD7suS-iDOUUbnRz6eePrJ7lx03VfCTnaTsfwCdHxP5DisZodznr0kIubn8sj4Al0Utu_wwzhXtD2QoDW76KvUZ0AY_iMIrWJaR7NcfFwyixD8hvllw8uEQENV5A99lFYkGnivflq06TnpQDs5Cnc75q6adSMnseJ_zOzsAKuj56Us2ncz0Z3dynQf5C1tbgUdqJYjdSfB_SNXbGEXhEOA85UYuwPpza3RcL1vlCkigfAjQkgNh98IYnmffWtDfzcwL6noQGTxO6CH9E0pt7gC54Sb7b5clIlk_5LNIUvKgowraRBR0tJBsYlPNgwJoFs53ettTdUWvn1Mco_7JffIF05B2A3CT1dRiS-YDM6Zv8B9Wbhu7vGanTFG-xXV1BtQpbZ1va7TIZBgRF21rlxeQNlmfTpxBA6T2UrAZRGlwYjkUHA4O-PLmby3xviJTrxjkYsMrm6Qs5BIcFlRNqve1ew-l8Dg8OGZLyoeNECR4rp4mGTeXsvmKjhH5iJUGRMWiCQ17VCXkSP5D2qaNDe8vS9Fv6m23QT2pTTBSxH6W2O1z27k-jPztjzYKgT6EG3qUW849C5UviB4sYKCub1K8N5ARqm_M5Vbs3VojkTg8hi8ejbqN__o3mvfayu4VGmDUMTLx2h99dKRiq2XLLX5bavIJG7oS44EdtRK7taegYgXdEOimNrwtZruoOMHULj2NlY0DB3yBstiP23h2QSr0WxI7qt21oxT7wY0RYGPZclmthrAqoP2LepOzZ7zB2X19iIY2ovljyBsloGBZ-Ijjbo8sgzAIgt27PrkMTqQvF0-wt8VYDC-DxP-J7AyM-fyj1liZUyrQVRZVokOko9gOE9H5ynyoDPP0jljKUNh2-cexR5SqiTAUvLGrkqDuegeB-R8MTINVrPdJws5h6qCKCK_cd9a5kY8BADn8c3IOE1fcwPPy6lktbhcHj_qj4BX_yZEwltR9x2DgRr-0GvE&pr=6%3A0.020992&cid=CAQSGwB7FLtqqnT3b5aBfbZ_yNlUDon2Xd9m_j92iRgB&xfc=https%3A%2F%2Fclicktrack.pubmatic.com%2FAdServer%2FAdDisplayTrackerServlet%3FclickData%3DJnB1YklkPTE1Njg3MiZzaXRlSWQ9Mjg0OTgyJmFkSWQ9MTM3MzgzMiZrYWRzaXplaWQ9OSZ0bGRJZD0wJmNhbXBhaWduSWQ9MjI5ODcmY3JlYXRpdmVJZD0wJnVjcmlkPTEwMDk3MzM3NDQ0NTcyNTU5NjI2JmFkU2VydmVySWQ9MjQzJmltcGlkPTVBMjhDRjZBLURFQjItNDhBOS04Qzg0LUZDNUUxMTI3MTZEMCZwYXNzYmFjaz0w_url%3D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwww.justjared.com%2F&ds=l&xdt=0&iif=1&cor=12755035061800325000&adk=1220192026&idt=3218&cac=0&dtd=167
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3309953903"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_420iZo25MYflqMwPlc2hiAo"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240417');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} fu

Chrome Cache Entry: 1068

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	5.1014263364964165
Encrypted:	false
SSDEEP:	24:YGXTBlQvPjiK5lHMGkke+elvHM9+elfMar5UE72Mvh0la7:YXddMke+SvW+Sj5UE72Maa7
MD5:	1D0887E49ADD372A2DF09B410E70DB45
SHA1:	E9DD09D7F018875126F94B0DFF786EDB799BE076
SHA-256:	CDC8A5241D466696F254EA83125AED1834E51A9C4329FB581D6B8226D712EAD4
SHA-512:	F02B18ED63D752A840D6A1376F2FC1ED64DB7E0BB1F1AE950277B5929C16530E19747136593B940B27533566BFC33A38B44F997F1F3A64DA0AF8FECB5784DAC2
Malicious:	false
Reputation:	low
Preview:	{"uid":1209357,"dkey":"800653062d60440abbd955079c55a837","updated_at":1712574023,"version":"11.5.202","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0120/9357/site/SITENAME.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"d70561faed0bd91cc2ef66424a3fc832db4871b0bbc8603941c7916fce13098e","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/6735f9594d6bb8a4f1fe56c6b3e21cf5.js","stat

Chrome Cache Entry: 1069

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2870), with no line terminators
Category:	downloaded
Size (bytes):	2870
Entropy (8bit):	5.2851598478321495
Encrypted:	false
SSDEEP:	48:Qu6IgYqIgwBwUMwpY0/vGb0XTwhGbjhfGbAcxGbAIY1MW1cZ/w0BJbL5:T9WAGI789hixP
MD5:	C57304A5A38CE7759AD16CDE696B3D1B
SHA1:	88F42ECE8AD1765FF400ECCAA2551B9F72488871
SHA-256:	AAE5689B59724B491AE8E37D078ABD63DFA2E4627C38A0566245082439210DB5
SHA-512:	659B9261D1F76B61D176A5F096943DFCA80C124ACC57C09DF1C16DA667D2FC2B1C362456E40E0F9376C0D2D59B5126093E6386B61148D459EF18A54585067FE6
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/115BTkNA0nL.js
Preview:	var CREM;(()=>{"use strict";var e={905:(e,a)=>{Object.defineProperty(a,"__esModule",{value:!0}),a.evaluateBTRCriteria=a.MRC_BTR_CLASS=void 0,a.MRC_BTR_CLASS="mrc-btr-creative";var t="visibilitychange",r=!1;a.evaluateBTRCriteria=function(e,a,i){if(window.addEventListener("pagehide",(function(){r\|\|i({isBTRCompliant:!1,imagesData:[],isBTRTaggedCreative:!0,isFramed:!1})})),d(e)){var s=function(){d(e)\|\|(n(a,i),e.removeEventListener(t,s))};e.addEventListener(t,s)}else n(a,i)};var n=function(e,t){var n=0,o=setInterval((function(){var c=e.getElementsByTagName("img"),v=e.getElementsByClassName(a.MRC_BTR_CLASS),d=v.length>0,m=e.getElementsByTagName("iframe");d?(clearInterval(o),i(v,t)):c.length>0?(clearInterval(o),s(c,t)):n>=6&&m.length>0?(clearInterval(o),l(m,t)):n>=20&&(clearInterval(o),r=!0,t({isBTRCompliant:!1,imagesData:[],isBTRTaggedCreative:!1,isFramed:!1})),n++}),500)},i=function(e,a){var t=[],n=0,i=0,s=setInterval((function(){for(var l=0;l<e.length;l++){var c=e[l];c instanceof HTMLImage

Chrome Cache Entry: 1070

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	36293
Entropy (8bit):	5.868625678304036
Encrypted:	false
SSDEEP:	768:4m5QJJS2II/7CN72nMexg7EN7JjaR1LxTrgpM9F7yqfZNjUqEfeQr0VdV5OV7omG:iHBA/9jLQrUnk7XY
MD5:	88F2BDCB49AFDDED7BC4A3F8216A285D
SHA1:	27832AD8B47118238B37333967067191E3032096
SHA-256:	E6748C62188A0B7A31E5F789E98FCB44D3BE363A7D87C73CD7EC0D00417C6226
SHA-512:	2034C971ED95E736AAF2CA060C5A9C8B8A62EEAB89DB3A88524A558BC7BE4EE3D1ED6960097928F0EE325CDFE81852844884C89DFA0630BBA9730BF87C650378
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1528228483345781&correlator=2643220993256660&eid=44809527%2C31081518%2C95330210%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_3&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=1&didk=570410213&sfv=1-0-40&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532373527&lmt=1713532373&adxs=820&adys=564&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=tw3qlj9kv5i5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=336x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1842863151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356335&idt=16616&prev_scp=tg%3D4%26shb%3D1%26it%3Dil&adks=1494241348&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_3":["html",0,null,null,1,250,300,0,1,null,null,1,1,null,[138412257034],[6151816487],[49737376],[2896217240],[469890],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMWZpMStzoUDFR4WigMdgfgByA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"tw3qlj9kv5i5",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240417';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var

Chrome Cache Entry: 1071

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	downloaded
Size (bytes):	1403
Entropy (8bit):	5.150059387548565
Encrypted:	false
SSDEEP:	24:2QoU4TZM2p6KaDNalKBsaA1G6PFxCOXskAvA0oIKz9YMxN5HK6cKgeyH5nK5xzue:B4TZM2plh65A0o7pNpK6qH45duMDpos
MD5:	FD02EDF106D5501F7E87D17452887750
SHA1:	500F64B65CF47E7A10B720648054C208F61F4719
SHA-256:	8E1B84265E633C043720DD0921476C16BC9F75E393E855C9116CA7C3A847B5C7
SHA-512:	82C44C65CA8242B12593D4F782E862834C0F1F958951CD97F7CB42F37A9A31DF7B834F2FAAC12EE6646FECE37B1C26F8361BE0084B28CC6B24160BC1BFC8F26F
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/ecommerce.js
Preview:	(function(){var f=window,g="items",h="prototype",l="hasOwnProperty";var m={id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",currency:"cu"},n={id:"ti",sku:"ic",name:"in",category:"iv",price:"ip",quantity:"iq",currency:"cu"},p={items:!0};var q=function(a){a.send&&(this.c=a,this.a={})};q[h].e=function(a){r(this,a.id,a)};q[h].d=function(a){var b=r(this,a.id);b[g]\|\|(b.items={});var c=b[g][""+a.sku],e=c\|\|{};b.currency&&(e.currency=b.currency);for(var d in a)a[l](d)&&a[d]&&(e[d]=a[d]);c\|\|(b[g][""+a.sku]=e)};q[h].f=function(){if(!this.c)throw"No tracker found.";for(var a in this.a)if(this.a[l](a)){var b=this.a[a];s(this,"transaction",b,m);var b=b[g],c;for(c in b)b[l](c)&&s(this,"item",b[c],n)}this.b()};q[h].b=function(){this.a={}};.var r=function(a,b,c){if(!b)throw"Transaction id is a required field.";b=""+b;var e=a.a[b];e\|\|(e={},e.id=b);for(var d in c)c[l](d)&&c[d]&&(e[d]=c[d]);a.a[b]=e;return a.a[b]},s=function(a,b,c,e){var d={},k;for(k in c)c[k]&&c[l](k)&&(e[l](k)?d["&"+e[k]]=c[

Chrome Cache Entry: 1072

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:W:W
MD5:	ECCBC87E4B5CE2FE28308FD9F2A7BAF3
SHA1:	77DE68DAECD823BABBB58EDB1C8E14D7106E83BB
SHA-256:	4E07408562BEDB8B60CE05C1DECFE3AD16B72230967DE01F640B7E4729B49FCE
SHA-512:	3BAFBF08882A2D10133093A1B8433F50563B93C14ACD05B79028EB1D12799027241450980651994501423A66C276AE26C43B739BC65C4E16B10C3AF6C202AEBB
Malicious:	false
Reputation:	low
URL:	https://c3.eu-4-id5-sync.com/
Preview:	3

Chrome Cache Entry: 1073

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537138692&val=di_9ac5c5704fa24c0696323
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1074

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://data.adsrvr.org/track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1075

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	425
Entropy (8bit):	3.8794753503328647
Encrypted:	false
SSDEEP:	6:YV/DT5FBrWM/ieAuHjgz/iJMWfjz0O6r3:YV/DT5XWJrc0z/iJz0Vr
MD5:	D81C7315BCBAE4A1AC8684308B4FE3E3
SHA1:	2A57D7763BDB3E29EFCE5418C8FE55E142CC6F88
SHA-256:	9916F7B470BAA29E444706DD5261B8EE508FB30FB0E5FB7492224A8CA04952C2
SHA-512:	B96F3826149E6BD96F229C728A0BD14680754882A09A3ACD85B318C82BD3053DB70F240F475B2E3654A5F752D734FF6E9D3E28C7F56464BB1190E97A02DBB9E5
Malicious:	false
Reputation:	low
Preview:	{"/21854935662/justjared/desktop/high_impact/home":["html",0,null,null,0,0,0,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CPzx3b2tzoUDFWEJigMd4skAmA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 1076

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (663), with no line terminators
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	5.113857668540427
Encrypted:	false
SSDEEP:	12:kxP4L8BMfF6RbWGnWUB6Ax8KBG/9/fSWGQL8BM4FoCpbWWGYsz8KBG6FkKOWQ:kDBBgGnW7fKBG/rGVB7Fo6Gf4KBG6Fkf
MD5:	5CB6721F1F753F276F159DBCB536C9B8
SHA1:	89BD22F64726F803BB28F24669DB41FD8F4B2E49
SHA-256:	962D6DEA088B031CD44D33F937ADB5BA241A9435AA32A8BE667D57482B8BBE1A
SHA-512:	EB44E858375AFBA69F61F2CEDEAD10AAF3B590E583ADD64585BF698C63777F280DA98130079A4A91724CF517186523A2F307DB0DBF5AAF57777A15FD92263CE9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=COmGst4DEI6D-PEDGN-QlY0CMAE&v=APEucNUbTKuWWT9vSjTCpTZs83poNHcnY76HqcWxeQIoeFYuavCbhrFzwbp9XI-1cU-Yi3jcrj9pw7Vn39DWaoNzfZy2lWTfGzg7wR7F4FIegPIQPxaZXiU
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/></body></html>

Chrome Cache Entry: 1077

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0015a0000344WLkAAM&src=ima&ver=1.9.0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 1078

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/15939bb8-5158-ed5b-ff4a-11895f73f0e5?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1079

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	28205
Entropy (8bit):	7.958203096242771
Encrypted:	false
SSDEEP:	768:lysFYl8sE/XAAQ4oCbIiPGNopMRqdxYCUkm+I/Ypmo:lyd7EiLCciPyWMAdxxpBI/YV
MD5:	FFAF321A47CE1B4EEDFBEC57B1259F1A
SHA1:	9269E1FCB549F13C6B08879E6C6743A7A60FA1F1
SHA-256:	816B0A1C6FD732861604AF66E9F4999AD458E9AF487B73E004EB0A0176797E13
SHA-512:	E661D035CBF35DBD5907D53601CB30E1401109315BFBC1CE29649BBE982AF3A3145B232272C2B9A8F039A771D6A8B9949DE3B043ADBED4CB32C061F5F3A0971D
Malicious:	false
Reputation:	low
Preview:	.....2Exif..II*.......................Getty Images........Ducky.......F.....{http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:7EEDFAEEFDEB11EE868EF58B37195AB7" xmpMM:DocumentID="xmp.did:7EEDFAEFFDEB11EE868EF58B37195AB7"> <dc:r

Chrome Cache Entry: 1080

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	18324
Entropy (8bit):	7.93151312655171
Encrypted:	false
SSDEEP:	384:V9kuUu4wjO0JTO6EsXtREzH74YI4WPjX/v+k9pC7+Gf4Wf3aNTAy:V9NUCjOoTjEsXLEzs4WL/2k9pC7rfaNt
MD5:	CA347976BCA22877B5770E7DA47A4755
SHA1:	F9835B1BBED0DA84288CA6079E11E51772650748
SHA-256:	078738F1237F00F60A883C4C94AA2E290F9936B9705DEDB12965F0A9341A47DB
SHA-512:	FA167A15A376085C2F4DE483D10C7D231E47476C06934FAAD84CD79EDF4BB4428D3231EF560DA02465C037AB92FF9EF21547E3CFD5CD96B6C2322CDB8AA9F1B5
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-anthology-album.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E63117EAFE1311EE8D408056A947617F" xmpMM:InstanceID="xmp.iid:E63117E9FE1311EE8D408056A947617F" xmp:CreatorTool="Adobe Photoshop 25.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:550C7BEA779111EEB3C49EB2AFF40702" stRef:documentID="xmp.did:550C7BEB779111EEB3C49EB2AFF40702"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 1081

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-grid1&userId=58637582-4b7e-42fe-b59a-889f13122ef7&gdpr=&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1082

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/openx?oxid=8154fdfc-c1f4-7f12-ce9d-077ca0243dac&gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1083

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/rubicon/TwYhSmfTCxUlMg_vgydP9Mn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1084

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-rubicon&userId=LV6OX7LS-1U-G1TB
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1085

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://measurement-api.criteo.com/register-source?impressionId=66226df5169b9ae6df86e04ccabef000&partner_domain=regrowhairformula.com&external_uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff&partner_id=91644&source_type=event&campaign_id=429940&marketing_objective_type=0
Preview:	OK

Chrome Cache Entry: 1086

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?&gdpr=0&geo=na&co=us
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1087

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F107430338%2C22911927924%2FCNX_VIDEO%2F12345-8&description_url=www.justjared.com%2F&tfcd=0&npa=0&sz=400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=1427373194746251&cust_params=domains%3Dwww.justjared.com&ad_type=video&vad_type=linear&sdkv=h.3.634.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C250x250%2C300x250%2C336x280%2C450x50%2C468x60%2C480x70&is_amp=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=4010959947&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.634.0&sid=342B30E9-444B-4E7B-B6C2-7CF51A0C809A&a3p=EloKDWNyd2RjbnRybC5uZXQSQGQ2NjgzMzQ0ZWIzYzU5ZTY1NzhlODlhNTE1MTAxODVjYTAyY2U0NzRlOTYxMGJiYjk1ZGE4NGNjOTJjYWEyYjQYi9nzs-8xSAASGwoMMzNhY3Jvc3MuY29tGLHa87PvMUgAUgIIbxLYAQoOZXNwLmNyaXRlby5jb20SvAFyMmRFaEY4Mk1HRXdlVmd6V2xsMloxWWxNa0psYzNGdlkzbHpWRGN3VEZOQ05UUWxNa0pOTmt3MVQwOXBja1ZZVWxoV2FVTnlVVWRwZVdKaE5XWXdSRU5xWkVsT1VpVXlSamRUTWpaM2NYUTVXR3hyVEZkV1Z6WjNNRmR2SlRKQ1NFRXpZVzExZWpaT1duQlhjWEJ1WTFaVmRWRmxOa1ZsVDJWR1MxVjBjWHB5ZDNsb2NuZFJUMk5yUVdkVBjh2vOz7zFIABI-CgVvcGVueBIsZXlKcElqb2lWWFpxUTNCWGFIcFJUMWRWVXpnclZYaEJUVTlWVVQwOUluMD0YydHzs-8xSAA.&nel=1&eid=44777649%2C44781409%2C44802173%2C95321947%2C95322027%2C95323893%2C95324128%2C95324210%2C95326337&url=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&loc=about%3Ablank&dlt=1713532353830&idt=68065&dt=1713532432654&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-&scor=817131869664159&ged=ve4_td79_tt10_pd79_la79000_er2449.306.2605.612_vi0.0.907.1280_vp0_ts2_eb16491
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 1088

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3394
Entropy (8bit):	4.764935017937798
Encrypted:	false
SSDEEP:	48:cBLAvf4SdUtq2jmt2gahMrJjXXWi/mlHnqUyZMxaAIh4n1FS/WHVSMxaBzBu+PO:JvfFUtn05n90qXZdAO4wdBzE+2
MD5:	0738D9F1F9D64B67D587619E33E26D50
SHA1:	34BECED80282C82B70871BB4358E2D4FFC16B112
SHA-256:	CED83FE1FF6F6A5CA7C6C9967EC206E7B1A7E148AA10A7091BB422DA9F35B9ED
SHA-512:	9AB779C576528975F996DD3DA77C6C2705065EBAEF91091ABB37269B062FCEC3CB702AA6F3F2703179AB7A6E556C226971B31516E6AB12893CEC02E3C5F3AE1D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyTwo_line2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M196.94,26.4h1.98l5.06,12.6h-1.82l-1.44-3.75h-5.65L193.62,39h-1.73L196.94,26.4z M200.2,33.89l-1.94-5.04...c-0.13-0.32-0.23-0.65-0.36-0.95c-0.11,0.31-0.23,0.63-0.36,0.95l-1.94,5.04H200.2z"/>..<path class="st0" d="M203.67,32.77c0-4.34,2.84-6.66,6.12-6.66c2.77,0,4.86,1.62,5.15,3.94h-1.75c-0.25-1.51-1.62-2.56-3.4-2.56...c-2.52,0-4.39,1.78-4.39,5.28c0,2.95,1.75,5.13,4.3,5.13c2.3,0,3.8-1.31,3.8-3.87V33.8h-3.96v-1.39h5.46V39h-1.35v-0.56v-1.19...c-0.68,1.13-2.21,2.02-4,2.02C205.96,39.27,203.67,36.44,203.67,32.77z"/>..<path class="st0" d="M218.63,2

Chrome Cache Entry: 1089

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:k:k
MD5:	7FC56270E7A70FA81A5935B72EACBE29
SHA1:	6DCD4CE23D88E2EE9568BA546C007C63D9131C1B
SHA-256:	559AEAD08264D5795D3909718CDD05ABD49572E84FE55590EEF31A88A08FDFFD
SHA-512:	21B4F4BD9E64ED355C3EB676A28EBEDAF6D8F17BDC365995B319097153044080516BD083BFCCE66121A3072646994C8430CC382B8DC543E84880183BF856CFF5
Malicious:	false
Reputation:	low
URL:	https://c6.eu-3-id5-sync.com/
Preview:	A

Chrome Cache Entry: 1090

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?endpoint=us-east&p=insticator
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1091

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15885), with no line terminators
Category:	downloaded
Size (bytes):	15885
Entropy (8bit):	5.276799192947225
Encrypted:	false
SSDEEP:	384:4cFDvjnj2N+ofMPhwV28zqZVq7+mdyg6cP7jX/rimHWq+VhKIuFY85A72oLtV6:4Yj2N+ofM2cEq2Kmog6cPnX/WmHsVhKj
MD5:	441E03C3DA943D5A4D9609688EE0B2EF
SHA1:	8A9F7A61F79F1E560DB285531EF497C2CE37AB2F
SHA-256:	595B6576E594C3553CE7A36527799E7E613828AA6B3E178831B087A8E6980412
SHA-512:	781C1433069EB66790594C2E9E12B46AAC04AB2E0164A7E9B7D7D37F28D36CA145EFF5FDC1A01767E0C6EE203FCDC42CCCDC9241ADBE1988A3F37DD3F4CA3BE1
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ob.js
Preview:	(()=>{var t={234:(t,e,n)=>{function i(t,e,n){s(t,e),e.set(t,n)}function s(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function o(t,e){return t.get(r(t,e))}function a(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/envelope",h=1e4,u="ima",d={GDPR:t=>{let{consentString:e}=t;return{gdpr_consent:e}},CCPA:t=>{let{consentString:e}=t;return{us_privacy:e}},GPP:t=>{let{consentString:e,applicableSections:n=[]}=t;return{gpp:e,gpp_sid:encodeURIComponent(n.join(","))}}},p="33acrossIdFp";var g=new WeakMap,v=new WeakMap,f=new WeakMap,w=new WeakMap,P=new WeakMap,m=new WeakMap,S=new WeakMap,C=new WeakMap,M=new WeakMap,D=new WeakSet;function b(t){const e=JSON.parse(t);return e.succeeded?{idEnvelope:e.data.envelope\|\|"",fpId:e.data.fp\|\|""}:{idEnvelope:"",f

Chrome Cache Entry: 1092

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46122
Entropy (8bit):	5.993890422264346
Encrypted:	false
SSDEEP:	768:qQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtaTUVgOw7ZVCzlx07ul08omRzzII+dmS:DR3KoViC5xC8XS
MD5:	79AB9F7836595426F1AE3381AF2C9502
SHA1:	85660CBD911233EDB545E3E4AD13F4DAE310901E
SHA-256:	D020612B2E124E0BF98565125C6F3F51369E42098E4108D97A2E716CC4C93F79
SHA-512:	038BDD82D208AF7B542F422A507995DD4A519FEF8F07AC2EB973874951E188FF0F3B0E75C8A1AE40FAE544EDD8B58A292977C45DC70E58B08C819390B6331B62
Malicious:	false
Reputation:	low
Preview:	{"/21854935662/justjared/desktop/insticator/home":["html",1,null,null,1,250,300,0,0,null,null,null,1,[["ID=21221629798fdcb5:T=1713532361:RT=1713532361:S=ALNI_MZxKrenlMhQ76IljWstbOtyedgs_Q",1747228361,"/","justjared.com",1],["UID=00000de102ad3695:T=1713532361:RT=1713532361:S=ALNI_Mb0l1l4QrMSe77t4lAU0LYLulH_jw",1747228361,"/","justjared.com",2]],[138461749291],[6481416626],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsmmK8Dw96P2HNFR9Rx55GaLRc959ognzk3e7ca13A1VocaMNEs1hW2Amixa0p3v6W57-PNrJjZ8vQqqz4IfZ93SpEG3eNQnyjuA2eY80A","CJXf472tzoUDFScsigMdxV4Nrg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOO7k6cAd0QkqLFY9CypMS-EFgOFC23-4A47xltZj43zDASojltl4vSOxxiC8ECSqJ9Dw1zs2CrarXV",null,null,1,null,null,null,[["ID=92e689184c8ce305:T=1713532361:RT=1713532361:S=AA-AfjYC_SyGX6TA-HlYfxR5ti5V",1729084361,"/","justjared.com"]],[]]}.<!doctype html><html><head><

Chrome Cache Entry: 1093

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	301
Entropy (8bit):	4.926803711884739
Encrypted:	false
SSDEEP:	6:YGGlqmRUjfUjxPekALLWvSwtFN+cDmWDcywtFN+cXVKRMSQ68V3p4RGTzkjx1:YGGlMeztF1DmicbtF1XyPQZsGT6
MD5:	52A82CC88716C8EEA047F2449CC12BED
SHA1:	4262783CCEF8B496B4F021301A48FF92693C37E0
SHA-256:	1619B80E7F15DA966625778C4173919E49A802DF669393F7EA317CB13B55218F
SHA-512:	CBE8C765E067C86CEBFDB486BC8FF4FC4A71DC46C9CE690E53B8432E69A4F5BEBF3094451CC9EA67077025CC1F9810BF6DE5EEA0688BC674EE868699F6D5D098
Malicious:	false
Reputation:	low
Preview:	{"ccpa":{"respectGPC":true,"sample":false,"applies":true,"sampleRate":1},"gdpr":{"additionsChangeDate":"2023-12-28T15:11:39.780Z","getMessageAlways":false,"legalBasisChangeDate":"2023-12-28T15:11:39.780Z","sample":true,"version":111,"_id":"5f29baa8b8e05c76a44c3154","applies":false,"sampleRate":0.05}}

Chrome Cache Entry: 1094

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=JUaFbqlOptqAjgSUUpFX7arMZlQyKRl0OZV3OgGd6RNRzA9juLWGJCCCGhCr7zdY-on-kVBhJL4-K7xR-GEcszfo0HnZ8xsubBnkMGlEINuRna8pv_VDrcikrzkLtmd5LV_xV0_7_uBafYNHxH4ehmCvYwgHbvim6fJZGuzEHqhqaFsM9uayUe7xHaz4ucR4ytdamV_ul55nLCW94KXjj9pbnWO4Qwh9uPZkxSf7VgTAllFu4uDivt_FsmSaPtx7LcI2UCstBbh7C9Im7Hscz-ndXc-LuGhryPl_IsKa8HB4uecDEQDhIUbqSrUs43oVf6oXkj-wuXJImDHg_6WT1K_8CF6NaaExDaudtZlt4r4C0H09JjjaDrEsVvpFFeT1Xut7LD2CHGYkdZHBBKayDIl6eS48iE3fmThfceQ2HtN0PVStE51XqJJCQSYZnu76Aojzskxt2A5fzngW_JFh7a-vDeQykNvvhPQh_U-uMtjQjRLz
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1095

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4423
Entropy (8bit):	5.266681513752207
Encrypted:	false
SSDEEP:	96:beBUgc0OmZkiCG/Dwo2oNKfE24VzXDaTpXpDidL7CDBsxphPkTN7Dty1UFP/TdvF:be2Z0OtWco2iOE24+fidThchNy1k7j
MD5:	171DF609D08E47F89A94111EFE668FFD
SHA1:	C217407F1F1ABD83554A132F5E9543EB21836B64
SHA-256:	0C0228A75B5FB15F809BB27DD2C1913C4C8E0B51B0029B51D4AB1C8F42EEFF6C
SHA-512:	57DEADEBBBB270EFD251DE59D517469497B4BC8F283617568FEB9FA0A0B6FFD05411AC3C99FB3047D3F912FA25712A98549E5EC861849330DAB6E49E7C44CC50
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag)

Chrome Cache Entry: 1096

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	5.201496413042913
Encrypted:	false
SSDEEP:	3:YA0fRGPB/UC4FNAVcshYp7DmYFqmn4:YAmRw7cuy7/T4
MD5:	A382E8F6222B5F76B3735631DF05BF91
SHA1:	A503CF612396D5215C8635804503BE369A7098AB
SHA-256:	096D02E8AA2B0C6B5F589B6FC4DAF7984C71BB1840FAC0EEB04792952916201F
SHA-512:	C5532C9A0B25BBD1704FEC5D932027836C0B23670C58B04C8E541FCE01214198A69272F5D62FF9F7EB7C8AC1C3740738415ADB3F785A732CEE2160F818D5D7AF
Malicious:	false
Reputation:	low
URL:	https://oajs.openx.net/esp?url=https%3A%2F%2Fwww.justjared.com%2F&rid=esp&cc=1
Preview:	{"esp":"eyJpIjoiVXZqQ3BXaHpRT1dVUzgrVXhBTU9VUT09In0=","i":"UvjCpWhzQOWUS8+UxAMOUQ=="}

Chrome Cache Entry: 1097

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvTgH59AdgRTWyS7YH1SwlRneiivrYg765c_gIckcn3OZ5IydjZZdSYD3uTDxFoqmAHj4fgQuzucakgtJ9Xpf3fkHB2iJWT685Edd7QLdq5Pvheau1PhRP5W3wrn-t2ysw7C3sIaSNqTcnDeTi7WzG9Ze9hRknXY8k&sig=Cg0ArKJSzG1uun3ratlJEAE&id=lidar2&mcvt=1026&p=578,820,832,1120&mtos=0,1026,1026,1026,1026&tos=0,1026,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0.93&vu=1&app=0&itpl=19&adk=1494241348&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946519400&rst=1713532394137&rpt=4438&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1098

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (2336)
Category:	downloaded
Size (bytes):	13091
Entropy (8bit):	4.956682017369544
Encrypted:	false
SSDEEP:	384:HxUvQGpfu5oq2QOuPg1B8eor3aOs9oUGAzC3u:HqIGpyoq2QOug1eeor3azoUGAau
MD5:	339DF69AD0105E91E1D9846697AD51F6
SHA1:	987948CAC022C747ACABDA32ADCA4B90B85AB0EB
SHA-256:	FBA1EB8E8242847081AF666931D31333800E7AF0795DB77D45A9BF6B5C50C981
SHA-512:	554D030D932C45E0909A206BDB221912DEB77FAB80AE60367F27CA2BF806E3C7440DF78DC5F551B047D440DF33A8272AFD4EC5FAF791D214C60ADBF0002FEE43
Malicious:	false
Reputation:	low
URL:	https://a.ad.gt/api/v1/u/matches/450?_it=amazon
Preview:	!function (t, u) {. const COOKIE_TTL = 57600; // (16 * 60 * 60);. const CURRENT_SECONDS = Math.round(new Date() / 1000);. . const GDPR_APPLIES = false;. . const NEED_GDPR_FLAGS = ['apn', 'ttd', 'rub', 'smart', 'son', 'index'];. const NEED_HADRON_MATCH = ['index'];. const ID_MATCH_VENDORS = {. "apn": 32, "ttd": 21, "adx": 755, "ado": 565, "pub": 76, "son": 104, "goo": 561, "rub": 52,. "impr": 253, "smart": 45, "ppnt": 81, "unruly": 36, "openx": 69, "ip": 561,. "tapad": 89, "index": 10. }. const AU_1D_KEY = '1d';.. function getCookie(d, key) {. let fkey = "_au_" + key + "=";. let decodedCookie = decodeURIComponent(d.cookie);. let ca = decodedCookie.split(';');. for (let i = 0; i < ca.length; i++) {. let c = ca[i];. while (c.charAt(0) == ' ') {. c = c.substring(1);. }. if (c.indexOf(fkey) == 0) {. return c.substring(fkey.length, c.leng

Chrome Cache Entry: 1099

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=15927&puuid=Vz%2FbJWYibdPMu3ZvZk8k2Q%3D%3D&us_privacy=&_rand=1713532408925.3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://c0.eu-3-id5-sync.com/
Preview:	0

Chrome Cache Entry: 1101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1173), with no line terminators
Category:	downloaded
Size (bytes):	1173
Entropy (8bit):	5.313204605900191
Encrypted:	false
SSDEEP:	24:kRd3v8SRjLGZI8S1GXp28SYt7/jj8ScgGnBtdLyjVrGeePzFpQ:k18Ix83w8xXj8tvLdLG52Y
MD5:	606BB28E0EFEC0D22285B99D4A733906
SHA1:	9724C9B1D45CCB379352D8973FEDBA350F2C32F9
SHA-256:	99C703ED5845F27A7CCABBB2EC88F964CC5BC7D493E913989A44372292B8E02A
SHA-512:	0060C75147814F225D976D756ABA3D6DDA82D91735647687DED42DBE7FE49A6E2FDB6E388599D3494C8BD447D38D7421D5A4893A41E0F6EF606669644EEF3ED2
Malicious:	false
Reputation:	low
URL:	https://cs-server-s2s.yellowblue.io/sync-iframe?gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Drise%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BpartnerId%7D
Preview:	<html><head><title></title></head><body><img src="https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID" style="display:none;"/><img src="https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E" style="display:none;"/><iframe src="https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID" style="display:none;"></iframe><img src="https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent=" style="display:none;"/><iframe src="https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=" style="display:none;"></iframe><img src="https://sync.1rx.io/usersync2/rmpssp?sub=typeaholdings"

Chrome Cache Entry: 1102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	606383
Entropy (8bit):	5.428579492036362
Encrypted:	false
SSDEEP:	12288:9N6CIPWjJEl/aQbxfFG3XVz7rQ3twt/7qHWdwa7F7uea67jV1ENW:9N6LWtI/FxfFG3XVUdwJ
MD5:	59D99D3529D3785578B76FCD13337E8F
SHA1:	8748A579D2152455BC0587776198EF998FB79AD1
SHA-256:	FF9C80778D5121C65F315185BAC1C5AD459A92C77984142A1E67D6C6D9B34F7C
SHA-512:	AFC2C2800F39B1A322851FC210E3A7246A9F5BBB88CB1101D26FB980B77E8496133F7B220595C3720C10B501374BDC0377DBDE4A409786A0F14857AE048BBC3A
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/connatix.player.js?cid=ab311382-57c6-4c60-9132-26aae787f7fc
Preview:	(()=>{var t={5419:(t,e)=>{"use strict";e.M=void 0,function(t){t[t.NotCreated=0]="NotCreated",t[t.MissingSyncData=1]="MissingSyncData",t[t.FailedInit=3]="FailedInit",t[t.CompleteInit=4]="CompleteInit"}(e.M\|\|(e.M={}))},4537:t=>{"use strict";t.exports=function(t,e){var i=new Array(arguments.length-1),n=0,s=2,r=!0;for(;s<arguments.length;)i[n++]=arguments[s++];return new Promise((function(s,o){i[n]=function(t){if(r)if(r=!1,t)o(t);else{for(var e=new Array(arguments.length-1),i=0;i<e.length;)e[i++]=arguments[i];s.apply(null,e)}};try{t.apply(e\|\|null,i)}catch(t){r&&(r=!1,o(t))}}))}},7419:(t,e)=>{"use strict";var i=e;i.length=function(t){var e=t.length;if(!e)return 0;for(var i=0;--e%4>1&&"="===t.charAt(e);)++i;return Math.ceil(3*t.length)/4-i};for(var n=new Array(64),s=new Array(123),r=0;r<64;)s[n[r]=r<26?r+65:r<52?r+71:r<62?r-4:r-59\|43]=r++;i.encode=function(t,e,i){for(var s,r=null,o=[],a=0,c=0;e<i;){var d=t[e++];switch(c){case 0:o[a++]=n[d>>2],s=(3&d)<<4,c=1;break;case 1:o[a++]=n[s\|d>>4],s=(1

Chrome Cache Entry: 1103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:Rv:J
MD5:	B519D08EF66FD54910EDBEDBA6181EC2
SHA1:	8D06436C33A3086259F2F1CCAF03425707EEFF17
SHA-256:	101EAD936A2281D53DCC064B7E2A2AB0D53B92EF3EF7B34B668673007895C860
SHA-512:	F7195D19D40B60AA9F992C5830F88DCBED7348521EEEB426A2544A18F9E13EFBE4ACFBF03D9A3961AE8174572E5ABA28D9013AB6B4849A18EF35508B1E011C14
Malicious:	false
Reputation:	low
URL:	https://cadmus.script.ac/dahhc4ozyvjm6/script.js
Preview:	//.

Chrome Cache Entry: 1104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67718
Entropy (8bit):	5.439121327748315
Encrypted:	false
SSDEEP:	768:KXIPYUkbN7FWsr6EyRMSOAsxgCC3OwdVFADBkdmTkVbWTjjn4j+BDGFXp3NLuO6H:URxgCDw94jLUu3+ygL7ZeJdKkZ
MD5:	D42CB11CA71AB40030700AB80DA2E200
SHA1:	E0F01255462A6F7C2EE5E4A6AD907DE75CC60676
SHA-256:	DF2724F851FD16ED79A3918109A30CEC77F86C3CE6F53119D34EB76AF7500843
SHA-512:	46C6222AD274BA5C2E9D831AC31EC7787777354EBD1DF57D47D62FAEE0CA78E4535AFE7A78556D1615CB29105E76A1C7446A10F2E32D414858999C271BE0564E
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/151.js
Preview:	"use strict";(self.webpackChunkconnatix_cookiesync=self.webpackChunkconnatix_cookiesync\|\|[]).push([[151],{292:function(e,t,s){s.d(t,{P:function(){return i}});var n=s(522),r=s(755);const i=n.C.makeMessageType("contracts.core.sync.v1.UserIdentificationRequest",(()=>[{no:1,name:"implementation_type",kind:"enum",T:n.C.getEnumType(r.pL)},{no:2,name:"is_in_app",kind:"scalar",T:8},{no:3,name:"use_user_score",kind:"enum",T:n.C.getEnumType(r.ju)},{no:4,name:"device_id",kind:"scalar",T:9,opt:!0},{no:5,name:"publisher_exclusion_level",kind:"enum",T:n.C.getEnumType(r.Z8)}]))},362:function(e,t,s){s.d(t,{T:function(){return a}});var n=s(522);const r=n.C.makeMessageType("contracts.core.v1.GeoLocation",(()=>[{no:1,name:"country_geo_id",kind:"scalar",T:5},{no:2,name:"city_id",kind:"scalar",T:5},{no:3,name:"subdivision_id",kind:"scalar",T:5},{no:4,name:"dma_id",kind:"scalar",T:5,opt:!0},{no:5,name:"ip",kind:"scalar",T:9},{no:6,name:"lat",kind:"scalar",T:1,opt:!0},{no:7,name:"lon",kind:"scalar",T:1,opt:!

Chrome Cache Entry: 1105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2156)
Category:	downloaded
Size (bytes):	44701
Entropy (8bit):	5.556418658154966
Encrypted:	false
SSDEEP:	768:0n23gP8cSTWDHO4Y5DoAsxaVTlo50Zpl+B8Jpc02Wf:0vkt+BAsKxO6pcqf
MD5:	6583128F6D84D81BFD8CBBF3F2D13FC8
SHA1:	47DB6DC2FB779DEA41436F1AEF6B38B90588774B
SHA-256:	D0BFFC7261DF1454C5E05475CDA7D9E6647318DC6C3936767E1252BFE8849C54
SHA-512:	DF4026351FED40111D17EF75FF87E650627AC408BA175B7B1240D48551EF32321365139CA677C2F14178ACD0C71228B39C95C53A02BDEE10478437784AE6B263
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/instream/video/client.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.endsWith must no

Chrome Cache Entry: 1106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0015a00002y7TWTAA2&src=ima&ver=1.9.0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 1107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-east.amazon-adsystem.com/x/px/JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ/v/%7B%22v%22%3A%7B%22p%22%3A1%2C%22t%22%3A0%2C%22def%22%3A%22amzn%22%7D%2C%22vs%22%3A%22visible%22%2C%22ah%22%3A90%2C%22aw%22%3A728%2C%22ttv%22%3A31.45%2C%22ts%22%3A1713532430557%2C%22bn%22%3Afalse%2C%22pixelId%22%3A%22kk5z5rtpai%22%2C%22ver%22%3A%22r-1.32%22%7D?cb=9264666
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.40158203239951
Encrypted:	false
SSDEEP:	24:4Hkstqe06q5/Jz2pRNrBZJuvu8goqc0ioNhc+A4+mI:2/0z2bNrVENtmN+Y+j
MD5:	67B8255EAB6E25E6A837089252B65DCB
SHA1:	9651C534316D31AC3993BCE40902943F789B3EC3
SHA-256:	23BE1D7BC0A0FC2946BC95B6A4C454610BBF07BE5F968551DBAC6077137BD53F
SHA-512:	F57B19C77A918D6D040CEC904A9B2DA94BEA3D74A973BED4CA1A223EC013F8A635A36B046419C7AA0F697626E472EA71C4B91C0FE33F455ED092ED56F1F40B4B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="vzexOO-Mv_2Ra-VvEOUgUA">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1713532378364');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 1109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	4.188522622093347
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHMgXHROfYY9:YGKed2pHRgn9
MD5:	C11BE4C9B4FD2C7B81B415559462D84A
SHA1:	AB2AA12AB8332E4A7F5B42742AB7A76998B12387
SHA-256:	B8F0CA68362CF245F891FC09DDFA50806D195E78E196CF96AC5D9CF72BE2577A
SHA-512:	15E2124EBD717AB8656D14EF748C4FD98B3569AB4BCA579F3FDED41B64D51FF47202914E8572E6F8AB5A40FECAC07F970EE932AE8240D0110ED4F22B821C0C5A
Malicious:	false
Reputation:	low
URL:	https://api.btloader.com/country?o=5668060692217856
Preview:	{"country":"US","isRestricted":false}

Chrome Cache Entry: 1110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15438)
Category:	downloaded
Size (bytes):	15678
Entropy (8bit):	5.291166726573538
Encrypted:	false
SSDEEP:	384:Hon3lnRDR+BXVgcgAAhClrTUISIH/aG12cFo6e:yNRDwBF/nO+rTUIpaG21
MD5:	FA20FAEDA4783EDDB081E9AE512EBC9A
SHA1:	F4178DF1A4637EF3519DAF768668EF9A0669BC32
SHA-256:	D81C358788B06453F5625451B157229A91C4352000DDFFCC66F433A1BC1AB0B7
SHA-512:	DB1910270B33685B2962ABE9917A6C2839EEE1CD54906A84E98777FDF79B438930787F2BDB575A2D9AE47557291091F8B8F4A137B63BCBA1D8614721470B025B
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10-dmp.js
Preview:	var InsticatorApp;!function(){"use strict";var e={d:function(t,i){for(var o in i)e.o(i,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:i[o]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};!function(){e.r(t),e.d(t,{COOKIE_NAME:function(){return n},REFRESH_RATE:function(){return r},cookieInstance:function(){return g},getSession:function(){return s},getTLD:function(){return l},isSecure:function(){return c},reassembleHostname:function(){return d},sendPageview:function(){return u}});class i{constructor(){}static getReferrer(){return document.referrer}static getUrlQuery(){return document.location.search}static extractHostname(e){let t;return t=e.indexOf("//")>-1?e.split("/")[2]:e.split("/")[0],t=t.split(":")[0],t=t.split("?")[0],t}static UUID(){let e=[];for(let t=0;t<=15;t++)e[t]=t.t

Chrome Cache Entry: 1111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2186)
Category:	downloaded
Size (bytes):	62428
Entropy (8bit):	5.434909466624309
Encrypted:	false
SSDEEP:	1536:nygImrQ9lbiv3fG3K2cRGJKeARlXAnVYqkAKDS16nH:x1QzbivRRen9K
MD5:	32BC41D964FAA1B95D9C61FC443DF579
SHA1:	02D3F83DAC14FE996BABBFE332779ED182D39D1C
SHA-256:	369AE154EAB37B7ADA7776B934833183BB053EBD1D0255F70EF8944F65CABB0C
SHA-512:	45539D5A40BF03B25C6F4328C0D10BF62A1012FF9BE634877D62EC8A7FF35B25DD6CDC0FDFD5FCAE2E3D980B6E4BA653B259C099935D52A20E8B6581CCE521D5
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/loader.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var l=ca(this);function p(a,b){if(b)a:{var c=l;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(h){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(h\|\|"")+"_"+e++,h)}funct

Chrome Cache Entry: 1112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	4.1345195377278445
Encrypted:	false
SSDEEP:	3:YWQRAA2nvX0LKRFSABHY:YWQmvv/dxY
MD5:	C466BD434DB29CF02793F8522FDE5F3A
SHA1:	F39A01BB0264479DBE9A4BFB0B80AE0B3B0E8154
SHA-256:	D0D2E098CD489EF7BC528C86DE8AB5C51B5D6CDF9B76A8B08766036992F0D2F4
SHA-512:	81EEC1FC87BBC2A95B34AFF28CBBC6D13EC6C9E78BF76DD6C586ADB48D4E01533D97F1A56BBCC60BC386DF78F6A85252BECD71A945B6AA014A7717EA61CB8087
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0010b00002cG8kQAAS&gdpr=0&src=pbjs&ver=8.37.0&coppa=0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Country not allowed"}

Chrome Cache Entry: 1113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38752)
Category:	downloaded
Size (bytes):	93065
Entropy (8bit):	5.182415079046025
Encrypted:	false
SSDEEP:	1536:gOZ0ptDYb251aRoM7dxBKikcHpOPM9BW7PJGu8ryMUsFg4/:gpxFmxDIPwRu4/
MD5:	824BEB891744DB98CCBD3A456E59E0F7
SHA1:	57082A005D743EC4A7F928A928BD7BD561078C7C
SHA-256:	173460E89E6A7244218BADAE2016F65C48A3EAE9D400802273EECA18B07336F1
SHA-512:	6C19E304AF16AE43504A44EB60C542526D0D8F635E4F57AB557E93999AD608BE99C25354898EF4826DEFE63F8BA72E4D09C5EAC445EFBDE4587534CA202958E2
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/widgets.js
Preview:	Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|(window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.loaded&&window.twttr.widgets.load&&window.twttr.widgets.load(),window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.init\|\|function(t){function e(e){for(var n,i,o=e[0],s=e[1],a=0,c=[];a<o.length;a++)i=o[a],r[i]&&c.push(r[i][0]),r[i]=0;for(n in s)Object.prototype.hasOwnProperty.call(s,n)&&(t[n]=s[n]);for(u&&u(e);c.length;)c.shift()()}var n={},r={0:0};function i(e){if(n[e])return n[e].exports;var r=n[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.e=function(t){var e=[],n=r[t];if(0!==n)if(n)e.push(n[2]);else{var o=new Promise(function(e,i){n=r[t]=[e,i]});e.push(n[2]=o);var s,a=document.getElementsByTagName("head")[0],u=document.createElement("script");u.charset="utf-8",u.timeout=120,i.nc&&u.setAttribute("nonce",i.nc),u.src=function(t){return i.p+"js/"+({1:"dm_button

Chrome Cache Entry: 1114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-dd40f750-a014-4531-a2f1-8878dd503e55-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 273 x 40, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1366
Entropy (8bit):	7.7069274315399845
Encrypted:	false
SSDEEP:	24:yHpfDiwFlHqdSxOiz8UA3+YF4UHC2vZBMCbXnoBe/GUm3gWpgAH1SKcMMOHcfLCY:yHpewFd3pOBmUHRiCbXn3OBgWpdHYKcb
MD5:	D9D306FF9FC9607E0DDCD4D206372784
SHA1:	ADAD3A8D7AD7DF435197EFABBB135C93A9291DEA
SHA-256:	645F2A9FE492E72B589090C521ABDCC569783985F06384F4BA1E1BDE2D3A7744
SHA-512:	772769FDA7EB13A3847D1D210A561728BA7A4D3BDD7E90F7EEF2A73D8495C0A161886E8B72EFFBE998C1F5E95F2A2969FB9F5E958F90FA078060E520871E89DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(......H>m...3PLTE......................................................G....tRNS..."3DUfw.......P.......IDATh..Z..(... ....k{a..i..j.4..l.K\) $@..!w? ....../!....7......H.'%..."...x.<...qk.o]]..mU.\|......>.e.Sq..c#p......."..+....9%N...8.....`v-........&J..B......o.sf.....H.D.!OK.C...c...-"".D\.T.......D.evAD..%"..@k.D.k.SS..u...-'r..5.CD4.u.ZZKpjX............#PL.?......8.W".."..1e.KD.K..".... .....8\|."....2#..n<..1B.z-A....H.....I.......@..DD2J....[h..".#..."Rf..I.S\..^F........dP!.......&.P....)G...BE. bR...LDYr.j.. ..}.....".U......./.p."."..r{V.ID.)"`?.S.M.n....M.z..ZO,.W.oT7.AM...BN.@^.'...mH.P2.._).N..8.....u....p5.S.........".b.d....8.. k......h...Hj.....v..A.f.&....f..>6M.D.r.U..:^r....j......#iH...)"....9.<D..%;kTL.S.Z\|.1.'..N..4km..K...)[.....E{.......\|.!...o.?.......~c[[.&......b.g.W.rc..l......1-H..}C..).v.Po..7...4....^.,....DhG.e..u....Z.6.a....pV...E..W.....\|...w..81R'F*$.Q..p.7...A..I..35.^..S.i.'

Chrome Cache Entry: 1116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (601)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.336290756850807
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GbRlQvbvbUmcY5Y2PqVCLEnxTht1DtfCYKO+kFl+ffVfCYKbEeEU:WDlf8vF+bT9OCYDnKO+kFl4nKbEeEmh
MD5:	25BD59C56A696A73A168F93FAD29DA25
SHA1:	1D7F7D38EBF4DD61FC8EC1C6143E28BA57AE8D78
SHA-256:	E9392EB0A10D270DD7EAF66B414D0ECA4FCF66A249BB4D8E721440BF8873E940
SHA-512:	75BFCA3EA4D09594C7568D3045489A54143F0E87C63A4659D963487B9C08D9B346BB21B2C81F2A87359C7273405996DDF43C1CCCE0614D91745EC8679F40650B
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=NC48x6hCLCCbC&cb=2&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-5%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_5%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_5%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JG4x0h6qAA7iPLDiWQwNRH0AAAGO9n3rggEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBNdyxq","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-5","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"2","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_pm-db5_ym_ppt_cnv"})

Chrome Cache Entry: 1117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	16602
Entropy (8bit):	7.8476334396302905
Encrypted:	false
SSDEEP:	384:XrI/GUsPoM5RwBQTd52tzq/No2dCnYutgjjRirQ8hwnPz:YGUsQ2Kmizq/1dGtgjjR5
MD5:	BAED2F197EDD5B0D8EA361E366767878
SHA1:	4D1819D1D8A899E62E680D3DCAD675E6ECAB11CB
SHA-256:	0378D0411B1595DF747E7EF6F38AA86909BD57922D4E0402D27B1B0E11C8E2FD
SHA-512:	0A8F037E8034322DC898F04CCB51F354537A4F6451B78976A9C1B4D89599F1EF549A1F81C18D7F8308E5397241ADFACEE4D2C4C6A9CD769B6E71DE9B0E922DAF
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/763549668707885903
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0375CC77A3F211EDAD0ACE1C0C8B5E82" xmpMM:DocumentID="xmp.did:0375CC78A3F211EDAD0ACE1C0C8B5E82"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0375CC75A3F211EDAD0ACE1C0C8B5E82" stRef:documentID="xmp.did:0375CC76A3F211EDAD0ACE1C0C8B5E82"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 1118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	4.896244756572987
Encrypted:	false
SSDEEP:	6:8WiIUemo/H1fCYKbY4DCVeOcANYIshV9RvAWudKd+GJpoenM:8DIGoNfCYKbEeOcHIseIdrJieM
MD5:	A751A8E5E91A339C0F22CBD817972280
SHA1:	6F86D1D26EE7688A6421A57294679FE9E11495CF
SHA-256:	56B31E715B17FEB70775E4B087D4B3D8A2E5028FCC5B581BD54CC2EF05A933F6
SHA-512:	8911A001D5EEEE96C286490EAEE13628EBF068B5222F2D2AC14535093F49B9F3552A88018051EA655FFD562ADE9C49ABD20F4B03A0D89D438CB0F3F4B753CC19
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=1&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22highImpactDFP%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fhigh_impact%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 1119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (50580)
Category:	downloaded
Size (bytes):	120685
Entropy (8bit):	5.405947239884956
Encrypted:	false
SSDEEP:	1536:PqDR5+IcYP5qRdReLS9rbl4T/p6ustIzPJfH8/mvk5C0nBbHlMmsgfL8EUcjh8:C6IcYWvKdnuIW/S0nBbl8y8
MD5:	1912ECE13149E0BAA6D45DDE7B95852C
SHA1:	B88FF40F593BCC98F0054B3C7015939C8083E67A
SHA-256:	D0D1DF81F2083742579BB1E7F99ACA99BFF86D6E41AA29C435D6CAC27EAFAD4E
SHA-512:	137262C33ED64432AA46393A5E472A74283CF5592DF02FA48D9B7F7F6291B29C2C6A8AD59EA85AC1AB6642EFAA07C286475AD72960B9E3B11D875D7531A26810
Malicious:	false
Reputation:	low
URL:	https://js.gumgum.com/services.js
Preview:	/** @preserve Copyright GumGum (c) 2024 @ 3.88.29 */.!function(){"use strict";var e=window,t=document,n="gumgum.com",r="https://",a="".concat(r).concat(n),i="".concat(r,"g2.").concat(n),o="".concat(r,"js.").concat(n),c="".concat(r,"c.").concat(n),s="".concat(r,"aba.").concat(n),l=1,u=2,d=3,p=4,g=5,f="".concat(c,"/ads/com/gumgum/gumgum-info-2.1.7.html"),h={mfs:!1,mw:570,mh:570,mcs:{margin:40}},m=/\b\w{1,5}\.googleapis\.com\|inrix\.com\|virtualearth\.net\|mt\.gasbuddy\.com\|mapbox.com/gi,v="margin:0;padding:0;position:static;outline:0;background:transparent none;border:none;overflow:visible;visibility:visible;filter:alpha(opacity=100);opacity:1;box-sizing:content-box;-moz-box-sizing:content-box;text-decoration:none;font:normal 12px/1 arial;text-shadow:none;box-shadow:none;color:#000;text-align:left;vertical-align:top;float:none;max-width:none;max-height:none",b=/_CLEARCSS_/gi,y=/\b\w{1,5}\.mqcdn.com\|3lift.com\|connatix.com\|video.sekindo.com\|static.gacraft.jp\|primis.tech/gi,w='(function(win,do

Chrome Cache Entry: 1120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23553)
Category:	downloaded
Size (bytes):	23678
Entropy (8bit):	5.427979461148156
Encrypted:	false
SSDEEP:	384:EqhROTku6loITotJt0++gdrDRvDe6AuXlnqkxXnATMqBpbKRUQ7LPxxGTyA4tt/:EJTku6lYt0mg6/qYATdBpbyxxkO/
MD5:	6EF104090AB8672EA053D27FAAFD4EE9
SHA1:	D7217A3C3A2F5D363396E28C8AE2B96DF1C2D3F5
SHA-256:	45A4C240A17A4D5F925EF0E125B86D882C6AD7549028D9CBF6F4F06FD1DD897D
SHA-512:	92205501B1B01F4173A16A57AAB0D847C9F574FC1A44A14D62E84AEC7EBCCAACC399EEC6823ADF082E7EBE766EBC8BA8C580E69C73CC7203D8C4C22B3660F6E2
Malicious:	false
Reputation:	low
URL:	https://secure.quantserve.com/quant.js
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function i(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function a(){return Math.round(2147483647*Math.random())}/qcdbgc=1$/.test(window.location.toString());function c(e,t){"undefined"!=typeof console&&console.log.apply(console,[e+" "+o().toString()].concat([].slice.call(t)))}var u=function(){for(var e=[]

Chrome Cache Entry: 1121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://match.prod.bidr.io/cookie-sync/syn
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 105 x 39
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	7.4397638322788255
Encrypted:	false
SSDEEP:	24:LGRiylL8T7L4F7mc/2f0WexJg6XanSYHTMR+ZasfxUu:LGRUT7L4F7/bWex3XaDS+4spUu
MD5:	67E52DB53BCCD3C0CE6BDC5948FDA525
SHA1:	DF567C104106C63735E902C7EC8E2207646E0A8C
SHA-256:	DC5A281743479DCC6F352B67E5219524B6153D1A73DA652498A687E7AA16C81A
SHA-512:	E9FC02686C1CE7661D0A9F446D0B1A7C8D4BB758BCE190B7CFEEB29CAB87E3D67926F9C089B5FA35E8ECE2C73EEE836292D7A4B30589DF0A7270B0E98E2FA268
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/themes/default/images/blackbar.gif
Preview:	GIF89ai.'.............,.0^ad-02"!!...GIL+-%$%/25(()))69<.02$## #&&&'+,.+-.&'' $&$#$.0369;()(((.14025%$$+,+-/-/1 '((,.#""...%%&...)+!!!........./14...................................................!.......,....i.'....@.pH,...d..d..tJ.V..v..z..xLF...z.n....A.....~..g.t........}{...................................................................................!.............................. ......8a......+.....J.H....3j.... C.L@...(S.\....?\|HA...8s.......@.4.A..H.]..).P.:}.jU.X.j....`...u..h.X...p..K..........}+..L......^.....#K.L....3kV.....C..M....=x......c.M....^.v.{...y..M.8...+_.....K.N....k.......WA......_.....E.O..............(....h...&.........F(..Vh..f.a..v.. .(.$.h.(...,...0.(.4.h..8..<...@.).D.`.H&..L6..PF)..TVi.Xf..\v..`. .d.i.h...l....p.).t.i.x..\|....h...j.&..6... .Vj.f..v.......;

Chrome Cache Entry: 1123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129666
Entropy (8bit):	5.22881617430214
Encrypted:	false
SSDEEP:	1536:+qL5WP5UgMR9rYktW81+MBJ8J18tQTAEfT7RckHmWqRvCENk/7MPbDAUA+Xm4A6k:+gghykyuJ1RTjfT7R7HTqRvlbMPz
MD5:	5B1AECC2A221FFB8468C85D41D8BE050
SHA1:	717F8391CC7692FCD1F1ADB074FDCA09B1C000CA
SHA-256:	206EE313138C77BCB7145E7FACC572F13AD9710E2BCEEDFB83DCBAA718942387
SHA-512:	04AD8B99E550A962D17F4F86498EE64F81F92A8656912E15E36C117AB440A2828AEE18A8243B36710C97CD12D41135157A9FF0023F47B53B524B55529A3B661A
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.js
Preview:	!function(){"use strict";var u=function(){function n(){this.allowedPixelLoaded=!1,this.blockedPixelFailed=!1}return n.prototype.isAdBlocked=function(e){var t=this;this.createPixel(n.allowedPixelUrl,function(){(t.allowedPixelLoaded=!0)===t.blockedPixelFailed&&e(!0)},function(){}),this.createPixel(n.blockedPixelUrl,function(){e(!1)},function(){(t.blockedPixelFailed=!0)===t.allowedPixelLoaded&&e(!0)})},n.prototype.createPixel=function(e,t,n){var i=document.createElement("img");i.src=e,i.height=1,i.width=1,i.style.display="none",i.onload=t,i.onerror=n},n.allowedPixelUrl="https://static.criteo.net/images/pixel.gif?ch=1",n.blockedPixelUrl="https://static.criteo.net/images/pixel.gif?ch=2",n}(),B=function(){function t(e){this.timerEnabled=!0,this.timerStarted=!1,this.localStorageHelper=e}return t.create=function(e){return new t(e)},t.prototype.adBlockFlagEnabled=function(){return null!==this.localStorageHelper.getItem(t.ADBLOCK_FLAG_KEY)},t.prototype.enableAdBlockFlag=function(){this.localStor

Chrome Cache Entry: 1124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=7739684612
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63
Entropy (8bit):	4.481425463856622
Encrypted:	false
SSDEEP:	3:YxhACNN7kYCiNQDxP9FxUPB4n:YndkYCiNQtP7uPe
MD5:	723275BB53ABE928249E17F8625E09FE
SHA1:	326D36E384FDBD989B8ADA2259E6FDC057BFBE45
SHA-256:	260AB23D2A79C79DFC00D2AB070876D41A85A7BD55670CC3E2FFB80AB0042B02
SHA-512:	931DADFAF09F7B45F89DE8C33DF064F34740A393B8DAC1B95A4649F3B841B5450DB9D0AFBB21CF70F9AD34F0922AFFB1679300B83C597CD77052BAA625EAC251
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=mp4hjl8&fmt=json
Preview:	{"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:51"}

Chrome Cache Entry: 1127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 1128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?url=https%3A%2F%2Fwww.justjared.com%2F&ref=&_it=amazon&partner_id=628
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 1129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1775), with no line terminators
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.072238527920534
Encrypted:	false
SSDEEP:	24:iQYkD1TmR2w4GOW6fZG8ht1tYcUGwBX8HiMb9JryEM5xwu9z8DxGQI6zlWa1:O/wfGcs8ht1tYrGwBX8CMZJGhQI6Ya1
MD5:	D043F76BBA7AE5BD7B06E35A9B4E9FC3
SHA1:	D20DD3832D521CBB8DF73459819C93287CF68D8E
SHA-256:	8C44807E1ACC8B251DD6EFBB1591B270A5DB8C34C3387ABA9E7EDE28A707204B
SHA-512:	71BBB340C89396793285AC74C8ED33AB7162F739A99DAEFBEB287117264A7B5F9C4CC8FEADE6B23F72C45F1C92FE44DF0B4471C8F798C0BA20578FC617B5D246
Malicious:	false
Reputation:	low
URL:	https://aacdn.nagich.com/assets/scripts/classManager.js
Preview:	!function(t){t.ClassManager=class{constructor(){return this.isInit\|\|(this.bodyDataSet=document.body.dataset,this.bodyClasslist=document.body.classList,this.docDataset=document.documentElement.dataset,this.excludes=["indRatio"],this.indREGEX=/^ind/g,this.storage={doc:[],body:[]},this.init()),this}init(){if(this.isInit)this.restore();else{let s=[`IND${t.isDesktop?"Desktop":"Mobile"}`,`IND${t.browser.name.trim()}`,`INDlangdir${t.langDir.toUpperCase().trim()\|\|t.langDir.toUpperCase().trim()}`,`IND${t.a11y.camelCase(`position-${t.menuPos\|\|"left"}`).trim()}`];[...Array.from(this.bodyClasslist),"INDhasDragTooltip",...s].forEach(t=>{/^IND/g.test(t)&&!this.excludes.includes(t)&&this.add(t)}),this.isInit=!0}}restore(){let t=[...this.storage.doc,...this.storage.body];t.length&&t.filter(t=>/^ind/.test(t.key)&&!this.excludes.includes(t.key)).forEach(t=>{t.root&&(this.docDataset[t.key]=t.value),this.bodyClasslist.add(t.value),this.bodyDataSet[t.key]=t.value})}add(t,s=!1){if(!t)return;let e=this.parse

Chrome Cache Entry: 1130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/prebid?gdpr=false&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dopenx%26uid%3D%24%7BUID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=qvBjs6lOptqAjgSUUpFX7arMZlSiJtUatuOcB0bJkbSi3b-bNopkcfmj0tiIibqD3YpgZwKwDrZegVH8jpWpqHpz-mJ1ECQnhrNDQYJb2eJvTuhBmx5HplTKQd6odrkxMZfgS5-1meA-KnS100um_jjNiuSyR2TPiR9_xnXE2DU4W5eAuEM0eR780sKWlVe7iXLKsiHOeEUm09OZGh63piz4h_sW6gdeMryJlls-a7OSZDz8G1fx-QTSJrfm1ih1uWEnErygMgnliTTZ2d85EtDOwvxchZwLFDHn1l5UJ1Py2KExWLQ_iUun2j0cHJYuD0wgoCZrZywOR9Lw-tHz7aApwhdODtFYRdVRjwZokuIj1ap_Cj70fMIEGp2rOAjlETSZH3894MU8vbAna6o6eP-T7K9djNfDDvtSgtGlpnIobcKRsxCpiZivs7GfJnayUzWHJxofIfp_Tj9RvQc7NF2r4ZHS4YN8z2yGfaj7k7A4kPxV
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1713532387631&did=did-003y&se=e30&duid=4299a5cfa81b--01hvv7t88r5mk5z5grejsrt8f5&tv=v2.14.3&pu=https%3A%2F%2Fwww.justjared.com%2F&ext__pubcid=a59c0898-b4d5-4e01-b773-f0480b65a0cc&ext_IXWRAPPERLiveIntentIp=%7B%22t%22%3A1713532347944%2C%22d%22%3A%7B%22response%22%3A%22error%22%2C%22version%22%3A%221.1.1%22%2C%22data%22%3A%22response%20missing%20id%20and%2For%20keyID%22%7D%2C%22e%22%3A1713618747944%7D&wpn=lc-bundle&gdpr=0&cd=.justjared.com
Preview:	{"bakers":[]}

Chrome Cache Entry: 1133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2116)
Category:	downloaded
Size (bytes):	2151
Entropy (8bit):	5.146647592475259
Encrypted:	false
SSDEEP:	48:YozhSk0nFt2SqGbNtMnmQ+UTAysUyKveG/zOW04tupE:3hyrz7zdKfC1gaE
MD5:	B5B6EEC9B6154480ACDF521A60B757E9
SHA1:	0B1E7960F214A81DF8C5BC38BA3735E9A70CD744
SHA-256:	6C683E448E7C820F3CBBE4D399ADEFCA48DB38D60B7CA02B106603B54E10C031
SHA-512:	CF9756D7930865E7A7C0130B75A7C4BF53DC8E1A5A30C0430470E19FBD2CCD263808F0C598ECAF59FAE2CD7577F214A42C88F332646D16F1CC3E5D959C0583E0
Malicious:	false
Reputation:	low
URL:	https://d188m5xxcpvuue.cloudfront.net/mtc/cmd/remote.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("DefineSlotRemote",[],t):"object"==typeof exports?exports.DefineSlotRemote=t():e.DefineSlotRemote=t()}(this,(function(){return(()=>{"use strict";var e={};function t(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var r=1;r<arguments.length;r++){var n=null!=arguments[r]?arguments[r]:{};r%2?o(Object(n),!0).forE

Chrome Cache Entry: 1134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2023 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	81199
Entropy (8bit):	7.979532434473059
Encrypted:	false
SSDEEP:	1536:yuPKsv9x/4Y2MSsUFXWFMOW2Or9FBtajQdQ1lHYyxyFnfFj99nO0ZPooDmCMxcxO:LPnvsNMSsYXWXSFTaMdUYl9m4woJMxcU
MD5:	3C48138F394B396F908FE7858F61672B
SHA1:	6B4A5454C73ED759AF9313018CCD610B079BC176
SHA-256:	74F80184F257AAD1FC24AE623861BE8CB7D41E5F3F89883CCB2A157D186FDC9F
SHA-512:	43D6B8071525055CC335A7E64E1B021ACBE421867CC911F492DF6D505A381C54390917A13EFF8DA9D1BC5840E26EB2FD0008766D1DFFAC488B6A0C7A446111B8
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2023 Getty Images.......Ducky.......d.....thttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.0 (Windows)" photoshop:AuthorsPosition="Stringer" xmpMM:InstanceID="xmp.iid:28D5C932FE0C11EEA96FD489F202D4CA" xmpMM:DocumentID="xmp.did:28D5C933FE0C11EEA96FD489F202D4CA">

Chrome Cache Entry: 1135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/crum?cm_dsp_id=176&external_user_id=di_9ac5c5704fa24c0696323
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (314)
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.147179151600014
Encrypted:	false
SSDEEP:	6:qARJ8mgO9llqMC17AtJC6Nhz4dEO+J1atBmGlrV0wdTWtXdpI1lLBZY:Iul7CitgYz42O+1MmGxVvJIX38nZY
MD5:	D220FE340D8D9D50C11B5E16933FC2CE
SHA1:	DF0E176949ADE2A75131B98A0E5A86EACC9D72C0
SHA-256:	F54045CD2DF21F39B9B6B17C9864E8EC13113851747C86296A027786A4E284F8
SHA-512:	E36D48DD35BC148D4F9C4E6356DACEBE22123B4645977A75DE85F31DBFAE6A0A39FCD867F4B1516A6E54C7B2FEAE19873281FAF95223750D81E0C5CC0BAA9ABB
Malicious:	false
Reputation:	low
URL:	https://loadus.exelator.com/load/?p=233&g=001&j=d&xl8blockcheck=1
Preview:	var xl8img = document.createElement('img'); xl8img.referrerPolicy='no-referrer'; xl8img.width='1'; xl8img.alt='ExelateData'; xl8img.style='display:none'; xl8img.src='https://analytics.twitter.com/i/adsct?p_user_id=6fe6a4603177c372840da1d3a0d7528b&p_id=28539'; xl8img.height='1'; document.body.appendChild(xl8img);.

Chrome Cache Entry: 1137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	54
Entropy (8bit):	4.171373150231489
Encrypted:	false
SSDEEP:	3:YWR4bb5IXlJFKFbBL4n:YWyb9clLyL4
MD5:	08BAC4F800EFA290ED5F06665DA0C112
SHA1:	DB1F1623935D87A2AEA9A473A4822D1A8A13F13E
SHA-256:	AD3772911D5487E7CA88E42AEDF93451E35D69918CD68DD2157DFA2FB164947A
SHA-512:	4164D5001A67D9EF51E71044E97C81951BC97A81DAE05B2D1D3B0EF572B9E71AE5F969E4AC7E2ED5900CD45AC99AD9F22F6FE7FCB2593B7690D81324E6E13FDD
Malicious:	false
Reputation:	low
Preview:	{"status":"ERROR","message":"Router: No route found."}

Chrome Cache Entry: 1138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63
Entropy (8bit):	4.481425463856622
Encrypted:	false
SSDEEP:	3:YxhACNN7kYCiNQDxP9FxUPy:YndkYCiNQtP7uPy
MD5:	AF20761C05ECF18F9A19CAF7F9537773
SHA1:	E3673146986A61968692CBB3B32B7D9FD028D495
SHA-256:	2BF5A05273B1C9A07609616DD8E0DBF956CCAD157060DD4E5D33B4702532DF09
SHA-512:	9F1942FEC008D9E955098F190B8C6B90325816EC8825A8C72C2B5EA6AE6C15EF58BFB211C0F6CE33EF57647612C99AE5BA694755D3BC2D5F13FE5010B59D915B
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=casale&fmt=json&p=191040
Preview:	{"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:28"}

Chrome Cache Entry: 1139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1711
Entropy (8bit):	7.223332603238184
Encrypted:	false
SSDEEP:	48:TqQNn2qH4rJ3o4jpz2EnY+FBC5dHQ6D50qgx:uY2Kiz2xVdHQ6D5S
MD5:	A8D20EC2C9AF11D807ABD1FA0210FED7
SHA1:	DBE70A99FE1F03FD61D0EA25EE04DAB8E9ED479E
SHA-256:	EF41212A278B695B42D60B2AB9423983C102297349D13439C5E13ABEB3C2AA01
SHA-512:	E91BAD7FCE76CA266C7599DAF12683977FBEEEAC05FCDDA46A026935FD034731A4CED67E8512B17E69BEDDD5022A5A81BD7B8469D54B1BB04C76D6B28ECB0BBF
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/G/01/da/adchoices/ac-topright-sprite.png
Preview:	.PNG........IHDR...`..........:.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:DF00DB4E23D311E2B3CCFE1C1AF72E2B" xmpMM:DocumentID="xmp.did:DF00DB4F23D311E2B3CCFE1C1AF72E2B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DF00DB4C23D311E2B3CCFE1C1AF72E2B" stRef:documentID="xmp.did:DF00DB4D23D311E2B3CCFE1C1AF72E2B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>A..o...!IDATX...o.A...4.....&....'N^..x1...51.....&.....'.b....n.Tm]@..n.E(.(`..V.!..&}q.......8...f...g...F.1

Chrome Cache Entry: 1140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://0bb75389e15f04ee119ce85890c3254e.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 1141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v5
Category:	downloaded
Size (bytes):	622494
Entropy (8bit):	7.986148955003063
Encrypted:	false
SSDEEP:	12288:19+jq55CgAzTTOdruxQqBFJkncXMrIC5gqfgvSh7RTNPuRnhJTmuAmUzfAaJve:19+jOCRzTqdr2QUgc80C5NgvOR8RFAby
MD5:	4A1E0514ADB4DCAA9DEE0E30B23B9F05
SHA1:	E2F5C8D0838E0064DFC6381E91446D4F4E1E4F33
SHA-256:	3D06FF3D0401D1513BF76809BA4ABEB9740D52C048D7ECB6F94445829CED1658
SHA-512:	B9437731620E40CE0DBE37EED4F60A083AABE9F27B76F51468AA1AD27A35B0BF845B7A7AEDBCC2B0D423FFC5BDA6C28EBFF794E996FE6D18F64AD58335252260
Malicious:	false
Reputation:	low
URL:	https://vid.connatix.com/pid-5cad8f3d-ecf1-441c-8c48-779a68f6d6dd/ece582e4-f873-4af7-8e2c-fd3f253ebfe1/mmid-859b9f01-8322-f1c6-1f35-2a8485980fda/0.mp4:2f750923c077f6:0
Preview:	....ftypiso5....iso5iso6mp41...Qmoov...lmvhd....................................................................@..................................Ltrak...\tkhd........................................................................@........h.....0edts...(elst...........B........................mdia... mdhd..............<.....U......-hdlr........vide............VideoHandler....cminf....vmhd...............$dinf....dref............url .......#stbl....stsd............avc1...........................h.H...H.........Lavc60.33.100 libx264.................:avcC.d.....gd.............. ......3@...h.y.".........colrnclx...........pasp............btrt..BD............stts............stsc............stsz................stco............trak...\tkhd........................................................................@..............0edts...(elst...........+.......................Smdia... mdhd...............D....U......%hdlr........soun............Mono.....minf....smhd...........$dinf....dref...

Chrome Cache Entry: 1142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1622), with no line terminators
Category:	downloaded
Size (bytes):	1622
Entropy (8bit):	5.36526479262141
Encrypted:	false
SSDEEP:	24:kRd3s7+DxG7qCJGA2t7X5jrGMLGGSgEqGvBGPxo7ZGO+AqtGeeO6Q:kkqmITx5LqqsqvNX
MD5:	C05D2A20134AAAE19597C15042C57D7B
SHA1:	5C9463EF1316C57B4B6435A22A4060C9700A46FF
SHA-256:	36F5378BFAF2210EE22C8C01008D5CC9D1089996A0AAED2DFEA30C565648DE35
SHA-512:	8BB8A7C19DED3FB3DCF98209357B763E6E94F405424907F2AD28FF69DC207B2545C2F569721E24265A00D777FD5D6468041C651E5E2E375F93A31E147091610C
Malicious:	false
Reputation:	low
URL:	https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dminutemedia%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BpartnerId%7D
Preview:	<html><head><title></title></head><body><img src="https://ads.yieldmo.com/pbsync?gdpr=0&gdpr_consent=&is=mmed&ismms2s=1&redirectUri=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21486%26rid%3DolBHBm7-Cp_mm%26uid%3D%24UID&us_privacy=%5BUS_PRIVACY%5D" style="display:none;"/><img src="https://cs.admanmedia.com/sync/minute_media?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21497%26puid%3D%5BUID%5D" style="display:none;"/><iframe src="https://onetag-sys.com/usync/?ismms2s=1&pubId=765b4e6bb9c8438" style="display:none;"></iframe><img src="https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&ismms2s=1&p=161683&pu=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21482%26id%3D%23PMUID" style="display:none;"/><img src="https://sync.1rx.io/usersync2/rmpssp?ismms2s=1&sub=sportority" style="display:none;"/><img src="https://csync.loopme.me/?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms

Chrome Cache Entry: 1143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63669
Entropy (8bit):	5.95266963012709
Encrypted:	false
SSDEEP:	768:o8UQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtIFPR2kTtWhrJT/TruEKgt0w08be971D:ftR3Q2N7ruJYbgRWV+FC5xm5pheLXY
MD5:	E7ED25BAC4E8125975660D91D01CDD27
SHA1:	A536BA2745178D3C0DA1E8316E50242854352E77
SHA-256:	1265959E4E2F7E9AB9ACAE379D076D764C8253B3B78CC55C15856BC6D0A0073F
SHA-512:	B449CFE199DE9487BEFC01DDAE883BDFD40CB990921232571EA45144DEBA2D0C34E488C5DE4106C2D8144E7A2C918BB4346CFCDC5B835528D34D8C947A72C7E8
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3204156870783777&correlator=2500520077255298&eid=31079956%2C31082853%2C95330210%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_4&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=1&didk=570410212&sfv=1-0-40&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532373613&lmt=1713532373&adxs=820&adys=3374&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=1&ucis=a7z9a7r64ysj&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=336x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=124864849&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356162&idt=16827&prev_scp=tg%3D0%26shb%3D1%26it%3Dil&adks=76579100&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_4":["html",0,null,null,0,250,300,0,0,null,null,null,1,null,[138471003221],[5747548770],[5046746103],[2884915608],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsmmwEjK5oItNwK2RltopAmhELPYCNH7pyJkPGriIis4bP9STGsNTjzPOJldcjFU8a5wKYTFtKhyGN91","CLzbp8StzoUDFeLmKAUdN3gLKw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"a7z9a7r64ysj",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMVjN1OY6Rorf6dveK18D8XLumdKnSz1wGlqdZxyTUQRioWAXVyFD6DPI8VZ_EPkXqOUWeJ728JCp1x",null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240417';</script><script>var google_casm=[];</script><style>a { color: #000000 }</style><script>function su(id) {var a = document.getElementById(id);var b = (new Date()).getTime();if (a && a.myt && b) {var t = b - a.myt;if (window.css) {css(id,'clkt',t);return;}var bi = a.href.indexOf("&clkt=");if (bi > 0) {var c = a.href.substring(0, bi+6);

Chrome Cache Entry: 1144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	869
Entropy (8bit):	4.555358776272458
Encrypted:	false
SSDEEP:	24:YEYz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEskVgMNwsMyVr/mIp
MD5:	0CFD90FA5A29DBCF70B736FF209D4C77
SHA1:	11F7050E23340FF0AFFCE5E1CBC5595E2852D96D
SHA-256:	302DA628A6AFC3E93F1B86BF7C65E4D6536D8283D78266964822A76D1C645AA4
SHA-512:	0DABBAF3830E5F63B8B26F23858C092357BC42F6D07F0B64870073D6D7C044F78ABF1CAED6B1B47376B377B85824126AC85F4E19F3E39183D7FF43183DDC0843
Malicious:	false
Reputation:	low
URL:	https://syndication.twitter.com/settings?session_id=c64088ae7581f5b176ec67ae1f128e4313177360
Preview:	{"should_obtain_cookie_consent":true,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 1145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/pixel/cookiesync?source=6b2595d5-cf4e-4298-a4ac-bcc34433eaad&secure=1&gdpr=1&gdpr_consent=
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 1146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-r1&userId=RX-dd40f750-a014-4531-a2f1-8878dd503e55-005&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 152x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5358
Entropy (8bit):	7.963888144676969
Encrypted:	false
SSDEEP:	96:BppMEDdP/9tjQplpKVvffMCS6wjzAWsE4rwopkEgxyzYMhOMCM83Rn:BfMEDdP1tjQpjKVvf0v6wXAhE4Uo6Px3
MD5:	366D359BAB893BE761B4CE267D05CE67
SHA1:	04875AACE410A6BA5D6D77654D0EB462E8774CDF
SHA-256:	FCFE9F3BA16F8DB6A9DB5EA76359AF9A9F43A08A5FB565DAD5A5DB01B65E0632
SHA-512:	E78DFEAF47F23469B55378A678F88731D2268C95785D3A302CEFAE8E7753485CBB3F65C59C6470BF74B2F11BFFC1FE215DC7A2ADD78C1626D1A449500EA631C2
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400013738750_PAPAYA_486x684.jpg&v=3&w=400&rid=6&s=AJiOHV2oxrcBO_s8TrpVhaxB&b=400
Preview:	RIFF....WEBPVP8 .....c.......>m2.F$#"!-.Jp...cn..$..K...;......?....>.<Y.P=4..uS...d..W...-.o._....'...x....#.+............J.=...-c+$........P......]q.....D$.....P......yM.5/...U,.._...>w....]....D...c.....6.1...G...GJ.uEVi...x..\|Q.L....L"yb.L.q3...M../....{..%k..W"..>.......Wo.+.&....K`....$...i..?.\.\I.V..+w.d.sY`%.+.".3..L.+4"..LX.U....]..j!..!:$..f....g.t..b..\yf......>.~..V^.....m.\|.nn../........?."..;.m.H.J.3..').bq..F..A..&.}[TR.U...xT...U.;&.L.91i.#.........Q;.N.....{4....-.cc^...-.M.}.....U?u.......... ...I....t....L... .bc..>M...{...;7P...'T.(?.d4x..EiP2..e..K..(n......fA.i..T.....E.~..i...'9...e.%..W.b6I.&.a.<`7.^b...#A...@4..1)....#.......kF..o....K`.$J..N......J..uT.=.<..J........"....(@.u..J.8.....B...^..../..W...A.....o.(H...O.6N#..t....et.....<.2=.........H........5.k{.^5pH...?.c.......DD"L).e_...,[.{..=...m...#).....s".H..;.<k(J..%......L....-.u.:o.pR.%.-B2l.D..=.}Q.B1...<r.0......~..".u.'S}...8...Uf.'&.Y....(B.4..f

Chrome Cache Entry: 1148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=a9us&endpoint=us-east&gdpr=0
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3444)
Category:	downloaded
Size (bytes):	3460
Entropy (8bit):	5.200911819695184
Encrypted:	false
SSDEEP:	96:yrnxPAf80g4+h3nAYdqHsfQLsftFWGm+H9BELCHErQYi+Jry:m6HB+h3zsHVsfJr3ELCHErFi+5y
MD5:	771A6A92588A8FB45E42A04FA3FE9DDD
SHA1:	A31526CE79259DD6E386BC9731F5FC764B7C68A5
SHA-256:	D8C49BC14E5B5041853D619FE2DC1B01B28BFD4974B8E732F13FA4943EFAADA3
SHA-512:	8CF2D680F8BCFA30F796FFD8268D7763DB2F58E694AF467CEEFB39ECD0EF39A162C440AD7969BE2E3CA19C034B4D60E5CC8B5F6478E0FDB395DC1E35949659FD
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idl.js?ga=0&gc=&do=www.justjared.com&e=27&uid=a662aef0-1110-44c8-b99d-2acba4a5db18
Preview:	void(0);/* */;.!function(){function t(t,e){const n={brand:t,version:[]};return s(e)&&!a(e)&&(n.version=e.split(".")),n}function e(t,e){return null==e\|\|0===Object.keys(e).length?t:function(t,e){const n=-1===t.indexOf("?")&&-1!==t.indexOf("&");return t+(n?"&":"?")+e}(t,function(t){if("undefined"!=typeof URLSearchParams){const e=new URLSearchParams;for(const[n,r]of Object.entries(t))e.append(n,r);return e.toString()}const e=[];for(const[n,r]of Object.entries(t))e.push(`${encodeURIComponent(n)}=${encodeURIComponent(r)}`);return e.join("&")}(e))}function n(t,n,r,o={}){const s=o.method??(null!=r?"POST":"GET"),a=new XMLHttpRequest,i=t=>"function"==typeof n?n(null,null,t):n.error(t);a.onreadystatechange=()=>{if(a.readyState>=4){const t=a.status;if(t>=200&&t<300)return void((t,e)=>{("function"==typeof n?n:n.success)(t,e,null)})(a.responseText,a);i(a.status)}},a.onerror=i;const c="GET"===s?e(t,r):t;if(a.open(s,c,0),null!=o.timeout&&(a.timeout=o.timeout),null!=o.customHeaders)for(const[t,e]of Obj

Chrome Cache Entry: 1150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1894), with no line terminators
Category:	downloaded
Size (bytes):	1894
Entropy (8bit):	5.31794708778733
Encrypted:	false
SSDEEP:	48:kUNXTopAPvxBficpYnPXCXwPdtMy+Wbmt:n1TYAPvxBnYPXCAPMy+Wat
MD5:	9E50EA2D267428D061D3B6132DACD31B
SHA1:	321ED5B676B0CFC5F07826AFF18840253C5D44E0
SHA-256:	9DA81D4E7171C7AD4EF966E23FA37574ECFAD6C72B1AED8CB4AD1B2D76D18B84
SHA-512:	20B6CCB97AD197136A74EFB875D0176612F4F653DE526B8A777C4F3FC60B54865FDF9706A2B409BFF047B077F381E080162C8FF310B2544E64F4DFE1264E8791
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
Preview:	<html><head><title></title></head><body><img src="https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://casale-match.dotomi.com/match/bounce/current?networkId=19998&version=1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USER_ID%7D" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid="

Chrome Cache Entry: 1151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	187261
Entropy (8bit):	5.6715197839499405
Encrypted:	false
SSDEEP:	1536:iIm2SM2e0RoMx+IPy5EEU7bTeZyaNJJhKK5klQL1QutY2rcgXhH1p/eFJhmX3+PZ:ifhw5klm13jrv8qX38XqXGfMT8YMt4Bw
MD5:	6D4BD6656A2EE632F5A6271FC94542B8
SHA1:	A2CA0322F1559847E0287487165D0763CA5671A0
SHA-256:	0F9F997381D0B8F80D089F47B784BB69902A01CBAF89100FA1094568BDE442C8
SHA-512:	552E93E9A3D469F3841B84443ADAE1D5888C22EE2BCBC9DCEF1D8815399DB8E7A70931E934DBB22D5EB4796BDF8EBCD4E0E74D34C13A5A05B69AECDAAD860983
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/search/ads.js
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15670103027050365096",packages:"search",module:"ads",version:"3",m:{cei:"17301431,17301432,17301436,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableLazyLoading":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.d

Chrome Cache Entry: 1152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1819
Entropy (8bit):	4.6889700834234604
Encrypted:	false
SSDEEP:	48:YOUz3D8lKzocjsxW7qCylkofy+mpMyfDRl:VcoS83fy+mqyf9l
MD5:	6CAB95F904FFE05E67E42D8F55215D9F
SHA1:	1429398E953DE4DAC680FF7F27302F61285CB4DC
SHA-256:	AACB65803DAE5D268A28618C73109E437AA29D8F975A7853DD3D766E9FDC0F6F
SHA-512:	EE5D4CA29B313DB20E396A324EE0C2FC2CB310980A8D3AA2616DF16B998C402E9F804D44C42726139575235CDE25393D51835669069876C9BA5CDA38A5234B95
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/consent/tcfv2/vendor-list/categories?siteId=7443&consentLanguage=en
Preview:	{"categories":[{"_id":"5f29baa851d2ec25ab472942","type":"IAB_PURPOSE","name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here. "},{"_id":"5f2c287abc875929ac38894c","type":"IAB_STACK","name":"Personalised advertising and content, advertising and content measurement, audience research and services development\n","description":"Advertising and content can be personalised based on your profile. Your activity on this service can be used to build or improve a profile about you for personalised advertising and content. Advertising and content performance can be measured. Reports ca

Chrome Cache Entry: 1153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46238), with no line terminators
Category:	downloaded
Size (bytes):	46238
Entropy (8bit):	5.444406779389368
Encrypted:	false
SSDEEP:	768:toyfbmBiWKtUao1GESuGHDUq8iuRx4PxOP:/klao1GESucDUq8iuRCPxOP
MD5:	E980E227FCB9D77361EF161CA802B1B8
SHA1:	36FF6FD7F290721CD5474DD031BDEE0123DC7667
SHA-256:	D6F629E5F86E5276A49685FD704726B5F8C2301888A923C0462D74B631DD1BF8
SHA-512:	83C4DFB8C18995DE3BE288B1B1D331416F65FE26E71B0036CD0FB1B035EC2DDB8813C60CBEAD760CA2D2757A3E0B50F890CCF6C0ADCFA49C7A1D23699C87C684
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/css/playerpage.24722ef5.chunk.css
Preview:	*,:after,:before{-webkit-box-sizing:border-box;box-sizing:border-box}main{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5;color:#212529;background-color:#fff;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0)}[tabindex="-1"]:focus:not(:focus-visible){outline:0!important}hr{margin:10px 0;color:inherit;background-color:currentColor;border:0;opacity:.25}hr:not([size]){height:1px}h1,h2,h3,h4,h5,h6{margin:0;font-size:1em;font-weight:500;color:inherit;line-height:1.2}p{margin-top:0;margin-bottom:10px}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:10px;font-style:normal;line-height:inherit}ol,ul{padding:1

Chrome Cache Entry: 1154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	869
Entropy (8bit):	4.555358776272458
Encrypted:	false
SSDEEP:	24:YEYz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEskVgMNwsMyVr/mIp
MD5:	0CFD90FA5A29DBCF70B736FF209D4C77
SHA1:	11F7050E23340FF0AFFCE5E1CBC5595E2852D96D
SHA-256:	302DA628A6AFC3E93F1B86BF7C65E4D6536D8283D78266964822A76D1C645AA4
SHA-512:	0DABBAF3830E5F63B8B26F23858C092357BC42F6D07F0B64870073D6D7C044F78ABF1CAED6B1B47376B377B85824126AC85F4E19F3E39183D7FF43183DDC0843
Malicious:	false
Reputation:	low
Preview:	{"should_obtain_cookie_consent":true,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 1155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.386842188131012
Encrypted:	false
SSDEEP:	3:AVhcRYD:AVhcRm
MD5:	09F71EFBED1212B64851B5A8032EC26F
SHA1:	EC10DB2BD5556DFC406F32AD9DF9944D11B14233
SHA-256:	89F2D4E6C7A6C41C13C2E7A75E526AA60B9D5274FE28B2D82801C6BEB6BEB879
SHA-512:	48B0B3A340EE2DC39A346E8CE4C67697F166362CEFC60247848858A011C23C0E14C8914B90BC431CC063EE96FAB113064EA2DBC36988B2CBFB5F54183AA67E1E
Malicious:	false
Reputation:	low
URL:	https://csync.loopme.me/?redirect=https%3A%2F%2Fcks.connatix.com%2Fcks%3Fpid%3D18%26ev%3D1cea9752ba4141efa5c1f9f338ffb4de%26pname%3DLoopMe%26api-tier%3D1%26uid%3D%7Bdevice_id%7D%26pubid%3D11186&gdpr=0
Preview:	upstream request timeout

Chrome Cache Entry: 1156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	downloaded
Size (bytes):	2047
Entropy (8bit):	7.449963037801384
Encrypted:	false
SSDEEP:	48:fNIaPUVGOpu1eitNn2VOV/J3gq1L8bdY8aJzuCXtQ6:FUVi320Vmq1f8aJSyQ6
MD5:	094FCE2409D7178B7322028D66A78D1B
SHA1:	264479E65AB0094FB46E22C96FB0D63E3EE8AF60
SHA-256:	CE228FE909A2D596D995EF8C95991D201DCB87527814D7037B1D07355FA2C257
SHA-512:	FC7BDC4D414935564FF10E786941DCEBC77FE827C0339108A64800D8BEA3C06F35AC3ED7DE7458BA9B3CE8FC62D88A07AE0F21786CBEA4532CEB934E519A516B
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/themes/default/images/jj-circle-logo-new.gif
Preview:	GIF89a............................Z]%...QS'.....................LS.z..ms................98-...FFAA+............Zb..........75.......V^..........kq ]`$==,20/!.3......&#2...v\|.sy....)&1y..hm!.................................fk"}..-0NO(KM)0//..4VY&43.............................../-/IP....@@+...cg"w........HI)..........................................<;,??+CC*}...................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:AD2E8617F79C11EA821BF98BFCA31E5F" xmpMM:DocumentID="xmp.did:AD2E8618F79C11EA821BF98BFCA31E5F"> <xmpMM:Derived

Chrome Cache Entry: 1157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1502)
Category:	downloaded
Size (bytes):	1591
Entropy (8bit):	5.7021522793194235
Encrypted:	false
SSDEEP:	24:f1bvTS2ST08FwnthFx0uTeUzkHe8yaynJkbR90n1IdL:tzTSNrgFJjzkHTj46bRL
MD5:	3313CB321AC9FF1343B03D2E9192E020
SHA1:	DEA6722B3069229B45844B5B465ADFDE9684E92E
SHA-256:	2F59754E1AD9A1A9EF7B029F56A86DE9511C7E4D8ABD0D372EE83391566F5AF6
SHA-512:	B6A2E16BC3AABDBF89571E5F33799EF028143A263E9E3F294E1953205D5E2E43AD52CC5D75F2986033820D4F3D9F13B25C846681186DBB3A2334BB623F851998
Malicious:	false
Reputation:	low
URL:	https://prebid.a-mo.net/cchain/0?gdpr=0&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=a662aef0-1110-44c8-b99d-2acba4a5db18","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dopenx%26uid%3D%24%7BUID%7D","https://cm.adform.net/cookie?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&redirect_url=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dadform%26uid%3D%24UID","https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_

Chrome Cache Entry: 1158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1113)
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	5.408047326514979
Encrypted:	false
SSDEEP:	24:WDlf8vmXrbTGt8fmvWnbT8socChKO+kFlSnKbEeEsVdFq:WDqvmXrcvWn0s1sdtFMnCEeFq
MD5:	E0C1C08422440E07A1DC50EB4C4675E7
SHA1:	4AD9F8E58F26FD17E6D9C093F8DBE8E9175D143D
SHA-256:	ADB187D5143982A34C178AA5BC66D7AA8399FBA54820BD963119FB9E1933AEF9
SHA-512:	3229E29EB91728446914A642B3A7BB43E5D628863881924D86B88A60215FB3807205BB69AF822901DF05A4ED2DCE6909DC0CC0B29DE3C1EDA6E6AA5B19B09007
Malicious:	false
Reputation:	low
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JAr7WOoYk69E2U3y28GdytIAAAGO9nzcrgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAtUvil","size":"728x90","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"home_Top_728x90","amznp":"ra43cw","mediaType":"d","amznbid":"150jzsw"},{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JOeIyL4e03AKxFpRlc0KqqYAAAGO9nzcrgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCgJXDx","size":"300x600","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x600","slotID":"home_Bot_Right_300xFlex_InnerRail","amznp":"ra43cw","mediaType":"d","amznbid":"n99zb4"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_sm

Chrome Cache Entry: 1159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	4.733515919311559
Encrypted:	false
SSDEEP:	6:YGKwsxPUFBUQJNd7b2JWwdAn8PP9LHd7W/YMgIQHd7W/f6FQHd7W/3Hd1Yr4:YGK8UcNdksklLHd7fWQHd7+mQHd7OHdN
MD5:	96DDD9FEDC4BB1B873B1DFB107AF0DB8
SHA1:	83E184EDD3A6847F2BAD470A2B4AD031E06D87BF
SHA-256:	C38364868C3137252072C944E193645A128DEBD80F2E98412F0A4F80BC81C82C
SHA-512:	047FE6391507ED8F87EB012F6D5B85C117B4FFCD7FFC5CAEE8718686FF926FB583084F0291732032B1261F568B0FD79C66515A498831DD72345F94B16907D3A8
Malicious:	false
Reputation:	low
URL:	https://privacy.crwdcntrl.net/consent/set?ct=skip&ca=1&ccd=1&cds=1&cta=1&c=9217&fp=2647d031a51b7a31cc96fbee0c73c78c&src=LTJS
Preview:	{"cookies":[],"Profile":{"pid":"2647d031a51b7a31cc96fbee0c73c78c","consent":[{"clientid":9217,"lastupdate":1713532368,"types":[{"name":"analytics","consent":true},{"name":"targeting","consent":true},{"name":"datasharing","consent":true},{"name":"crossdevice","consent":true}]}]},"redirectType":"JSONP"}

Chrome Cache Entry: 1161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2566
Entropy (8bit):	5.347792811933999
Encrypted:	false
SSDEEP:	48:QlpbIaNztbVea+s7udiASLGbPX13bVea+seuriAhLGbPX1fNMPbaX+sru7iA1LGe:7GzDeaoiAvlRea7iAWl1MmXSiAa7v0Oy
MD5:	D1EB05EF8BB6EC976A1F21A62CA7BF1F
SHA1:	CE3B8C0BB6495193647BBC1E63DBF9479CBD76B4
SHA-256:	275F40D9B2A8AFABA4EE519254E3A7DD8C5EDC2E8C0B8C309FD8775A67EC6F87
SHA-512:	DF411A5429F115A70E7E1F5E33AC4C7CEF9EEFFA8C5FBDEA093C4077D31560758054CA11F8D158667D234CCB4F11214000FC2CE4F942A4CCA0491D042A959EC0
Malicious:	false
Reputation:	low
URL:	https://crcldu.com/?pb_url=https%3A%2F%2Fs.update.rubiconproject.com%2F2%2F2.123.0%2F873648%2FAq9FyT4OBMorTKb6%2Fpostback%3Fui%3DLV6OX7LS-1U-G1TB%26pp%3D19116%26c2%3D15%26ci%3D873648%26ti%3D5f4375f3-dfcd-4515-88f1-da167a55c33b%26si%3D284872%26di%3Dwww.justjared.com%26ap%3D%26pv%3De83af57e-5177-45ca-b5dd-b7403bbf6b62%26gt%3Dus%26c1%3D1431476%26sr%3Dmagnite.com%26dt%3D8736481481318196516000%26sid%3DAq9FyT4OBMorTKb6%26oz_sc%3D7f79117292a4ad8f1642d49a%26oz_df%3D1713532427784%26oz_l%3D2%26pp%3D19116%26c2%3D15%26ci%3D873648%26ti%3D5f4375f3-dfcd-4515-88f1-da167a55c33b%26si%3D284872%26di%3Dwww.justjared.com%26ap%3D%26pv%3De83af57e-5177-45ca-b5dd-b7403bbf6b62%26gt%3Dus%26c1%3D1431476%26sr%3Dmagnite.com%26dt%3D8736481481318196516000
Preview:	<!DOCTYPE html>.<html><head></head>.<body>.<script>.const url = new URL(location.href);.const postbackUrl = escape(url.searchParams.get("pb_url"));..async function deviceAge() {. sharedStorage.set("ts", Date.now(), {ignoreIfPresent: true});. . const postbackURLs = [];. const timeSlots = ["NEW", "HOUR", "DAY", "WEEK", "MONTH", "QUARTER", "HALFYEAR", "YEAR"];. timeSlots.forEach((slot) => postbackURLs.push({url: "postback.php?timeblock=" + slot + "&pb_url=" + postbackUrl}));.. await window.sharedStorage.worklet.addModule("worklet.js");. const resolveToConfig = window.FencedFrameConfig !== void 0;. let opaqueURL = await window.sharedStorage.selectURL("ts", postbackURLs, {resolveToConfig, keepAlive:true});. if (resolveToConfig && opaqueURL instanceof FencedFrameConfig) document.body.appendChild(Object.assign(document.createElement('fencedframe'), {mode: 'opaque-ads', config: opaqueURL}));.}..async function deviceAgeBD() {. const postbackURLs = [];. const timeSlots = ["NEW", "HOUR

Chrome Cache Entry: 1162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=sonobi&ttd_tpi=1&ttd_puid=91e92b73fd&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64195)
Category:	downloaded
Size (bytes):	110446
Entropy (8bit):	4.722852336422236
Encrypted:	false
SSDEEP:	1536:cHtVPOgQ7AjBShYcCAq0YXph4hwnea4wfUZvl:WVmeUhd5q1swnHU/
MD5:	D418B8167E2062D3CF8E6E9001DC975E
SHA1:	0E26692C25699A927E0C7A6DAEB514917119E2DF
SHA-256:	127D76A7D7A8ED3B74012A56B36287988DB35D21ADA3BB31004DD161251944FA
SHA-512:	C0E545B10473EAFC484D3A3903ABD9688223B450307CA6548FBAEFD8ED2D7AA76E848931997C9CF711A659E3D60980E848C7A7D4D71122FA07FB7649B867E668
Malicious:	false
Reputation:	low
URL:	https://cdn.confiant-integrations.net/APJrhaGcsmc9rMQust0kw-jx0NU/gpt_and_prebid/config.js
Preview:	/* eslint-disable spaced-comment */.(function() {. var confiantGlobal = window.confiant \|\| (window.confiant = {});. var clientSettings = (window.confiant && window.confiant['APJrhaGcsmc9rMQust0kw-jx0NU'] && window.confiant['APJrhaGcsmc9rMQust0kw-jx0NU'].clientSettings). \|\| window.confiant;.. var integrationSetting = {. config_ver: '202404190506',. integration_type: 'gpt_and_prebid',. integration_version: '202403121239',. exec_test_ver: null,. };. function defaultCallback() {. console.log('Confiant: ad blocked', arguments);. }. if (clientSettings.enable_integrations && clientSettings.devMode != 2){. clientSettings.enable_integrations = null;. }.. var adReporterConfig = 'undefined';. try {. adReporterConfig = JSON.parse(adReporterConfig);. } catch (e) {. adReporterConfig = {};. }.. var settings = {. propertyId: 'APJrhaGcsmc9rMQust0kw-jx0NU',. adServer: 'https://protected-by.clarium.io',. confiantCdn: 'cdn.confiant-integrations.net',.

Chrome Cache Entry: 1164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 20
Category:	dropped
Size (bytes):	3935
Entropy (8bit):	7.740187872619955
Encrypted:	false
SSDEEP:	48:9pf+vv73/Z02XevitNn2VgJ3nL8KnuhwtFf0jgsYi7xlnTY0tUwBdnurjfiOgc64:9pf+X10Meg2oT1kRYi7DTLndnu6OB64
MD5:	248479FE91CF38A2467171D8716A68E5
SHA1:	213903399D305E0033E84740F019DDF07757E612
SHA-256:	5950CFB78B93934DF012CDE7BD4FD79A53DE997713D302FF6928A8BFA0F63213
SHA-512:	FD108DF9193A8DB940731870326152C68B2A7F17574BA534ADB56BB12A6A8D234A0D0F096AB5904EBD9329F70E6DCCFA0C3750B68670142E29CFF4E8716C6A0C
Malicious:	false
Reputation:	low
Preview:	GIF89aq..............m.......S......I'.................w....l......g......................\|........h..............W..9.........%.......u7.........w..;..W...4..H....F........"..................W.....,..l.....................J...............................F.......................J..........n.....J...[....).....#..A.................3+........................<..%...............................?.....................I....j................(g.....................:........!..5..2..4......4.............#.......................+..'..y..................Z.............%.........1..................*...........).........=.........L..^.....(.....................................D...........`..`......N.....R....2...................#...~....(.....z.....f..7......!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 1165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvMUUJV0OTNdqoR2DRzIKRNaB2bOXhmhAblmxmeJeexOi5qMQfFtW9B0IQvQSPsgLwVl-ycaxoX6xhJrdB337cY2zTvX47O4UZP1Z5Q3CbKOW05r04ceF8gz37OCAxn8f6rdKTAT_gqYkWwXLqHqeXU2bwVWqHcVsg&sig=Cg0ArKJSzLrEG9PnrZdqEAE&id=lidar2&mcvt=1043&p=578,820,828,1120&mtos=0,1043,1043,1043,1043&tos=0,1043,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0.94&vu=1&app=0&itpl=19&adk=1494241348&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946523000&rst=1713532430447&rpt=123&isd=0&lsd=0&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	69768
Entropy (8bit):	4.8283523757369995
Encrypted:	false
SSDEEP:	768:Pit6suJ9OLTlvlyqk4/Iry5aQqsLnx5+BYv1x2p52l/xnfwgVJJkkIE7XWe0s:hsuJ9OLTVlM4/Iu5qsLnx5rnrolw
MD5:	D6A74D4A9FE35003C26C21739D639CC7
SHA1:	66EDE33CF39D6D096EAD36E81E8AB72B658C2ECF
SHA-256:	9E7752189A0BEEA73A64F5CD46818D187F00095DC964C1C7760680AFE530E0AB
SHA-512:	3F7FEA5A9D012A959174BFFF1B6BB2AE6535D7F94CD4CCBAF3AA6D2F2BB21FAF290D4D1FB9367F180996F8185A997624A0E1A56745F5049504C408C85A78F40B
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/a/player.1.0.0.css
Preview:	cnx.cnx-center-align,cnx.cnx-vertical-align{position:absolute;top:50%;transform:translateY(-50%)}cnx,cnx-span{box-sizing:content-box;-webkit-box-sizing:content-box;-moz-box-sizing:content-box}.cnx-bp-lg-v .cnx-d-lg-none,.cnx-bp-md-v .cnx-d-md-none,.cnx-bp-sm-v .cnx-d-sm-none,.cnx-bp-xl-v .cnx-d-xl-none{display:none!important}.cnx-float{position:fixed!important;z-index:9999!important}.cnx-float.cnx-content-wrapper{left:0;top:0}.cnx-float.cnx-float-position-top{bottom:unset!important;top:0!important}.cnx-float.cnx-float-position-bottom{bottom:0!important;top:unset!important}.cnx-float.cnx-float-position-left{left:0!important;right:unset!important}.cnx-float.cnx-float-position-right{left:unset!important;right:0!important}.cnx-float.cnx-float-transition{transition:transform .4s ease-in-out;-webkit-transition:transform .4s ease-in-out}.cnx-float.cnx-float-instant-transition{transition:transform 0;-webkit-transition:transform 0}.cnx-float.cnx-always-floating{left:0;top:0}.cnx-float.cnx-main-

Chrome Cache Entry: 1167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40604), with no line terminators
Category:	downloaded
Size (bytes):	40604
Entropy (8bit):	5.415131796298076
Encrypted:	false
SSDEEP:	768:GohFZvtPKkSz/SVRffF2CZ8E/n/ru0MUIM6PQcgaCsJ1PwhdUav/fsP9/rheb:Gof5ZKDz/lGjuV8EQcgNU0/f84
MD5:	13A57A2FF42C7168E8EC5A64B1F85DB0
SHA1:	DB59AA5E2F33554BF4C111BB8C830B6D77C96E6E
SHA-256:	DC199FCF93E35CE958B9A302A47B388778ECF288E81E027012CC6AAEF1C8B59D
SHA-512:	B7E2A2E1628FD9406752DCDEF32E487E66092210DC46E9CE15543B3205DF44CD6D1DFE9994D3982BA946DF14CB8F5A0C6253FA8D3ECC6EEAA8A985855665D2C0
Malicious:	false
Reputation:	low
URL:	https://p.ad.gt/api/v1/p/450
Preview:	(()=>{var t={8709:()=>{!function(t,e){"use strict";t=t\|\|"docReady",e=e\|\|window;var n=[],r=!1,s=!1;function i(){if(!r){r=!0;for(var t=0;t<n.length;t++)n[t].fn.call(window,n[t].ctx);n=[]}}function a(){"complete"===document.readyState&&i()}e[t]=function(t,e){if("function"!=typeof t)throw new TypeError("callback for docReady(fn) must be a function");r?setTimeout((function(){t(e)}),1):(n.push({fn:t,ctx:e}),"complete"===document.readyState\|\|!document.attachEvent&&"interactive"===document.readyState?setTimeout(i,1):s\|\|(document.addEventListener?(document.addEventListener("DOMContentLoaded",i,!1),window.addEventListener("load",i,!1)):(document.attachEvent("onreadystatechange",a),window.attachEvent("onload",i)),s=!0))}}("docReady",window)},8249:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&

Chrome Cache Entry: 1168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/adb_match?adb=06283770382809365182374221610671770227&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&adnxs_id=187107314970053313&gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=19564_2&endpoint=us-east&gdpr=0
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.85441257549751
Encrypted:	false
SSDEEP:	6:PGfo4t5agOhWglybYL16AVrIa5PlgyIIa5UrIa5ojnIa5MzvlIa5XHKIIa5SBLok:PGf44468rDlgnYr0bgDljfcJmiLl95
MD5:	5D645530E8FE19905143D466923DA05D
SHA1:	C0A09A65A17B797E3E11BCCE75D2DCD006521B0E
SHA-256:	3F88C056C8A980006761E2DDAE91D70344E37EBAE9CB51CA77F6717554CAB915
SHA-512:	957C387D48D59B42F499C5BEFC5ABA20EECEE6191D2A7B299150F21D422E8E0322D5EA5AC107DF60E8F071712E4353A6A843A3D7216B61F62B842F2A806A1FD9
Malicious:	false
Reputation:	low
URL:	https://vid.connatix.com/pid-5cad8f3d-ecf1-441c-8c48-779a68f6d6dd/ece582e4-f873-4af7-8e2c-fd3f253ebfe1/mmid-859b9f01-8322-f1c6-1f35-2a8485980fda/0.m3u8
Preview:	#EXTM3U.#EXT-X-VERSION:7.#EXT-X-TARGETDURATION:12.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MAP:URI="0.mp4",BYTERANGE="1389@0".#EXTINF:11.866667,.#EXT-X-BYTERANGE:621105@1389.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:466037@622494.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:454907@1088531.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:414428@1543438.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:436136@1957866.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:494328@2394002.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:525162@2888330.0.mp4.#EXTINF:10.000000,.#EXT-X-BYTERANGE:403381@3413492.0.mp4.#EXTINF:8.366667,.#EXT-X-BYTERANGE:309866@3816873.0.mp4.#EXT-X-ENDLIST.

Chrome Cache Entry: 1173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=3040725985
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (430)
Category:	downloaded
Size (bytes):	38156
Entropy (8bit):	5.10083423695408
Encrypted:	false
SSDEEP:	768:LitTqVoSFGlVgru61adIKnzDL6T9DhqdJv5k15L:LitkoqGC6IKGT9V5L
MD5:	EA9EE93D09A25D03D5278EEDB2C47AE0
SHA1:	7DEB712083D5C488B468F45209565B0C2B471161
SHA-256:	054DDC2BF6548362C0120743EC7E683972FBE80174F351C695D9CE75A9305136
SHA-512:	F66E8AC7AEC1D6111804AE5EB389DB6E093F93BDD9F7484D84C9CF5BBF39FE06F34661D1EC0E5D78AD8B7EF431A99028954625CE6FE52AA76112CE17556C501C
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/themes/default/style.css?v=02092024
Preview:	/.Theme Name: JJ6 -- 790px Stage TAKEOVER.Theme URI: http://justjared.com.Description: new version of.Version: 2.11.Author: chrischoi..JustJared main theme by chrischoi.This is the main layout to accomodate for a 300px wide sidebar..This theme is the copyright of Just Jared Inc. It may not be distributed or used without written permission from Just Jared Inc. ./..body{text-align:center;background-color:#fff;font-size:10px;font-family:arial, verdana, sans-serif;color:#333;margin:0 auto;padding:0; }.#page{width:1000px;background-color:#fff;border-bottom:none;text-align:left;margin:0px auto 0;padding:0;}..takeover #page{border:1px solid #eee;border-bottom:none;margin-top:0;}..topads{min-height: 90px; text-align:center;margin:12px auto;}..tstakeover #page,.tstakeover .topads{position:relative;}..topads .topad{width:732px;text-align:center;margin:0 auto;}..topads table{text-align:center;margin:auto;}..takeoverhed{clear:both;position:relative;margin:0;padding:0;}..takeovertop{float:left;

Chrome Cache Entry: 1175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	5.389826470194219
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GgS+2bvbUlrMJcY5Y2PqVCZEnxTht1DtfCYKO+kFl+o60OBFVfC0:WDlf8vc2bTV1OC6DnKO+kFlrTOXKbEeY
MD5:	F67513BF4EAA2F15A1D9B645EDBA8FF4
SHA1:	1B53B3E7174C347314F3725B406CF611AAF919C8
SHA-256:	D692FED5F63E82E6579512AF354A797A11D74CE9AC1EA42D26520D7E64ECEB2A
SHA-512:	7D65169DDBEE7C17FA8C6605DCFE3E7BD76808306FC7BBDE1ACA621808AB7121173050EEB1C43DD3DF375B12695A13B6B390C8E412F884F583C7392174E407F2
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=MsG0RONB99OMG&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-3%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_3%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_3%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JDZAC1oYCk7XRLuG338Em7kAAAGO9nzv5AEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD-3LAE","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-3","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain"})

Chrome Cache Entry: 1176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (820)
Category:	downloaded
Size (bytes):	72174
Entropy (8bit):	5.35776756007414
Encrypted:	false
SSDEEP:	1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz
MD5:	10092EEE563DEC2DCA82B77D2CF5A1AE
SHA1:	65CBFF4E9D95D47A6F31D96AB4EA361C1F538A7B
SHA-256:	E23A2A4E2D7C2B41EBCDD8FFC0679DF7140EB7F52E1EEBABF827A88182643C59
SHA-512:	CC92CF5A9B3A62A18AF432FDFFB81B76DA84E2F43CE3C7800A919C10809118D0611E29A47F103FF3DF18A54D5331BC5F06EF4771DC406CC763B30FF2A66A3E81
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
Preview:	/!. jQuery JavaScript Library v1.4.2. * http://jquery.com/. . Copyright 2010, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2010, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Sat Feb 13 22:33:48 2010 -0500. */.(function(A,w){function ma(){if(!c.isReady){try{s.documentElement.doScroll("left")}catch(a){setTimeout(ma,1);return}c.ready()}}function Qa(a,b){b.src?c.ajax({url:b.src,async:false,dataType:"script"}):c.globalEval(b.text\|\|b.textContent\|\|b.innerHTML\|\|"");b.parentNode&&b.parentNode.removeChild(b)}function X(a,b,d,f,e,j){var i=a.length;if(typeof b==="object"){for(var o in b)X(a,o,b[o],f,e,d);return a}if(d!==w){f=!j&&f&&c.isFunction(d);for(o=0;o<i;o++)e(a[o],b,f?d.call(a[o],o,e(a[o],b)):d,j);return a}return i?.e(a[0],b):w}function J(){return(new Date).getTime()}function Y(){return false}function Z(){return true}function na(a,b,d){

Chrome Cache Entry: 1177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (716)
Category:	downloaded
Size (bytes):	57143
Entropy (8bit):	5.52952829777176
Encrypted:	false
SSDEEP:	1536:9SjaWYTsMW8cQQ86/vulttKdag0MT7xoYeC88ZEa1D:9nsbQivo3g2+xotCEa1D
MD5:	DAEC4D49229444DCFE368C642D3B08BA
SHA1:	9FFD13B1DC2495CC1C5FC963FBCB9E6C4A8A2176
SHA-256:	297F317A93A75BC505C060F79358F2FD094C9F9A2F9D2BD601E7C953009964F9
SHA-512:	56C522E93258CA7766B23989C2B7F54254DC9E56D5371B01BA2B1D75C1C598AEA823B23EECDBAB4C146BDA47F5B1BE7AA9026D382852FDED952F78FCE4EC93FC
Malicious:	false
Reputation:	low
URL:	https://s.skimresources.com/js/93029X1547060.skimlinks.js
Preview:	/. (c) Skimlinks 2009-2024. Build time: Tue, 02 Apr 2024 13:30:53 GMT. Version: "15.5.0"./.(function(){function Zc(a){function b(a,b){if(!(!a.parentNode\|\|va(a,e)\|\|a.meta&&a.meta.ReadOnly)){var c=$c(a,b)[0];v(c,function(a){!f[a]&&ad(a)&&(f[a]=!0,r.domain_data.domains.push(a))})}}var c=x.get_as_hash_node_dict(),d=Object.keys(c).length;if(d){var e=Ra(bd.concat(Eb())),f={},l=Sa(function(a){fa(a)}),k=0;v(c,function(c,e){window.setTimeout(function(){try{b(c,e)}catch(Db){l(Db)}finally{k+=1,k===d&&a(Object.keys(f))}},0)})}else a([])}function cd(a){var b;var c=b=null;var d=5;a.Limit&&(d=a.Limit);.var e=function(){return a.Priority\|\|0};return{group_id:function(){return b?b.id():0},dec_limit:function(){return d-1},limit:function(){return d},action_type:function(){return a.ActionType},text:function(){return a.OriginalPhrase},start_byte:function(){return a.StartByte},url:function(){return a.Url},multi:function(){return a.Mt?!0:!1},group_priority:function(){return b?b.group_priority():e()},id:func

Chrome Cache Entry: 1178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (697)
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	5.466371626110347
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIn2bVPl0OJlxThUscQMWQxderdDVKm9TuOBIdNcDgXoQL:2e2C6hHfhiVInkb/FdcrwdDxwdNwg
MD5:	99D056CD0E386354AC77661E41884796
SHA1:	2636E310D681F8B5AC02A495358AE1FC7DD6C424
SHA-256:	BA14E07C1FD17F08AE920EEA9E8AFF81C2A3A2AA164642F35E1B89A4407F290C
SHA-512:	D70269532133098D1A31F17B753C8B6CB980CA14715B0A31C965687B1B86FBA1F18DDDB351954CEB265BDA4632AB1171B3728564CD66519164C90DFC1DA23C99
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=edba233c-2b40-451f-8921-b1dad89502fe&gdpr=0&gdpr_consent="><img src="https://id.rlcdn.com/709996.gif"><img src="https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=2df96876-d96c-5a24-39b4-4c8f85e97d6e"><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=9edac919-938e-435c-b808-9c3d4416339d&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D"><img src="https://rtb.openx.net/sync/dds"><img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}">..</body>.</html>.

Chrome Cache Entry: 1179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7653)
Category:	downloaded
Size (bytes):	8930
Entropy (8bit):	5.176375697998008
Encrypted:	false
SSDEEP:	192:GaLtB8pfbHh5zln2Xa/Yl+Nza7Grui62y2+0TK2IJ2ruTxQuVd7bipdpKFdr:GtxB557/Yl+Nza7Grui6ph0TKXJkuTnp
MD5:	0500304C23CFAAF030A11B50B7A5283F
SHA1:	6BB7DCD28743D9379B73678105B72D7D1AD70F54
SHA-256:	3DD3EDDC67A3BCD0B6D9785767B3096B2FBEB7F12347DCCD755E3CD6BE0A712B
SHA-512:	8B999E98499E8AADCC2D719C4EC9FA47458FB8F150553C3746841C12E9C46718B8F35D5A6E9BE027E84EE90E4E74F2A19CCCC9551A454D18B65160378C14D9B5
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/themes/default/js/jquery.mobile.custom.swipe.min.js
Preview:	/! jQuery Mobile v1.4.2 \| Copyright 2010, 2014 jQuery Foundation, Inc. \| jquery.org/license /..(function(e,t,n){typeof define=="function"&&define.amd?define(["jquery"],function(r){return n(r,e,t),r.mobile}):n(e.jQuery,e,t)})(this,document,function(e,t,n,r){(function(e,t,n,r){function T(e){while(e&&typeof e.originalEvent!="undefined")e=e.originalEvent;return e}function N(t,n){var i=t.type,s,o,a,l,c,h,p,d,v;t=e.Event(t),t.type=n,s=t.originalEvent,o=e.event.props,i.search(/^(mouse\|click)/)>-1&&(o=f);if(s)for(p=o.length,l;p;)l=o[--p],t[l]=s[l];i.search(/mouse(down\|up)\|click/)>-1&&!t.which&&(t.which=1);if(i.search(/^touch/)!==-1){a=T(s),i=a.touches,c=a.changedTouches,h=i&&i.length?i[0]:c&&c.length?c[0]:r;if(h)for(d=0,v=u.length;d<v;d++)l=u[d],t[l]=h[l]}return t}function C(t){var n={},r,s;while(t){r=e.data(t,i);for(s in r)r[s]&&(n[s]=n.hasVirtualBinding=!0);t=t.parentNode}return n}function k(t,n){var r;while(t){r=e.data(t,i);if(r&&(!n\|\|r[n]))return t;t=t.parentNode}return null}function L()

Chrome Cache Entry: 1181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	61228
Entropy (8bit):	5.5501061714883235
Encrypted:	false
SSDEEP:	1536:AsqJrOdRY4DCk4Xhyj8tbWnFK85Nkkm37K:fMrOEhPbWI85ukj
MD5:	4042D0017503D7E8C4337D5F08EEFC73
SHA1:	728A9BC19E77198CBBB1D194F8CF1037DA5FA4E3
SHA-256:	4AD68C8B729E22717F327F8D8A5465366772F15B18A479115B0E71A450F790BD
SHA-512:	6AF7CDFC1FF207FF33ABA4E32FCC1E4100540F85FA4229369AC8F595D58F43DC1E9C2D11860D1FA62E742D8510E45F4D74581F61CB816503D59C10F06FB152AD
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/impl_v101.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if

Chrome Cache Entry: 1182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 1183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2023 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	83669
Entropy (8bit):	7.9641825493018175
Encrypted:	false
SSDEEP:	1536:1nyY0/w31qCZ/YboXEw/51/7HIrEU4vo3KID3oQzF5UUIMeXm4RB9:JI/w3oU/Y0Ew/517PjvoRDYQzzUZ/Xmk
MD5:	183F3BC4AE1D8BEF1CCC5E00EE97EBD2
SHA1:	14429EF2328B72CD32FDC18642CADE0B132D132E
SHA-256:	B996961A0DEBF608A03D16933A4A1AB763D2DFFDA55E5BFD0874E8E1BC862D1D
SHA-512:	9E6B44D8F1900E3CA4C28D6FBA69EF70573A26F358E9264384ED494DE14ABBFBBCD98F8CFE7EF43DA695D4E8584600ED29825417E11FC74950CFF8CF28092780
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2023 Getty Images.......Ducky.......d.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.7 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:3E0B9609FDCC11EE94E387E15C7C882C" xmpMM:DocumentID="xmp.did:3E0B960AFDCC11EE94E387E15C7C882C"> <

Chrome Cache Entry: 1184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?us_privacy=1YNN
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=Ew75cZqQhtpEcO-Pru61&puid=&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39827), with no line terminators
Category:	downloaded
Size (bytes):	39827
Entropy (8bit):	5.426881544196986
Encrypted:	false
SSDEEP:	384:D4mbcNLkkKhS/KQ6Nb5mqfAubZB2JjP2F6EUnW5O7WIDXrD+9PM5C9bDuwGGXo0+:DTbAKrL7fAovYr17WIDXngc+pHgQTC
MD5:	21F8671135AFBD2E874C42D3DC478AFA
SHA1:	FBBE938AEBBAF60E3B8388721A41905B36681E60
SHA-256:	F6CD320C5BA515FEF3997AFE473332231160A2CB715F1A99679A7CEFA1CF0BE0
SHA-512:	830FB51CC3DDE68BD79A3961E6F5C2D435A966CE552FBE683A45AC29F20F8EB7C6F048DEF36E590E851A672DA740BD8F7BDA573CE9E65B37F0DD6D59D8CA5F53
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16589/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16589_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16589_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16589_a(a)}}var sync16589_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16589_c; if("function"==typeof Object.setPrototypeOf)sync16589_c=Object.setPrototypeOf;else{var sync16589_d;a:{var sync16589_ba={Sa:!0}

Chrome Cache Entry: 1188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3236)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.311110515964322
Encrypted:	false
SSDEEP:	192:OdjQ65BDlhSsXfHfFuSeNRURvyVOYjmekLihBvEtg38lTjLky3RqUJgFVTB2:O2oXhSWp+OYjmjg38bbgFl4
MD5:	4AF9428D8C901774B6F33D2A094EF050
SHA1:	3E5C245C4FB5FD1824F84CC9E1C403851C4DD673
SHA-256:	E318E0AC932DF7816EC1771B773D18BC0085E0D5ECF63E5CE793B44FFE351A6F
SHA-512:	48178A0724FC0E3DEC8303B22B1AF379F63962422F1FE40992449B9D6E1EE46BCAEDBFA2C01900EFC1228482CFD9925066898CBA541CA9E58CE277BA53A158D0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240417/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 1189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4568
Entropy (8bit):	4.7177776407886896
Encrypted:	false
SSDEEP:	96:JvfFfSf7fWEqGH+f7fWENtlnq9gTzwYT6z/nqUqcOkMiEn7fWEAL:5FfSbqGH+bNbq9ozxuzqcJMiEDAL
MD5:	077F8BA253421EA4F85F913D7C75DE9A
SHA1:	8F75EE47170660B4E64061BA2DBC4D112B1E4D3A
SHA-256:	84BC79A05293CC33178B72D2A06BC9F815F86F0EAFC8A76BA729F504E80A7C8A
SHA-512:	4AA0FD77C491E783ACAE44594FEDF2F850813370C4FD690786D44B41A74BF468BCB688159EA631A677114E89E65FA5F4B9448733BC5C9E280EF732490E9A150D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/tag.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#023D3D;}.</style>.<rect x="192" y="10" class="st0" width="195" height="26"/>.<g>..<path class="st1" d="M201.02,16.52h-4.84V15h11.48v1.52h-4.82V29h-1.82V16.52z"/>..<path class="st1" d="M208.36,15h1.72v4.84v0.82c0.52-0.92,1.66-1.62,2.96-1.62c2.22,0,3.56,1.4,3.56,3.88V29h-1.72v-5.86...c0-1.82-0.62-2.74-2.18-2.74c-1.64,0-2.62,1.28-2.62,2.8V29h-1.72V15z"/>..<path class="st1" d="M218.3,15.48h2v2.06h-2V15.48z M218.46,19.36h1.72V29h-1.72V19.36z"/>..<path class="st1" d="M221.4,25.82h1.68c0.06,1.3,0.94,2.14,2.48,2.14c1.32,0,2.22-0.6,2.22-1.58c0-0.76-0.52-1.26-1.68-1.48...

Chrome Cache Entry: 1190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	163399
Entropy (8bit):	5.340703645719094
Encrypted:	false
SSDEEP:	768:wXaXRXYXPXOXFXsXVXSXTXQXpXGX0hHeH/H4HBHqHrH2HNH0HLHiHZHQHVL+LXLk:sK
MD5:	A8AE81763A4EFE543A240DEC31E7F18D
SHA1:	9A369CA38093A6AA7C85B1CEE463E63C991196BD
SHA-256:	B2118D065EE6A23224C94D5E91B12BC45C0ACEB1B80EE628DC4591A4A8086BD9
SHA-512:	CCA4222BA0D1B137BF55A958432A59A2C0966EF8C1380597A5809C4ED45FE7025F19FC7CF6EFEDB6BA5E94E8819E06ABD9D229BBB593D3E79AC18ADB6034C8D9
Malicious:	false
Reputation:	low
URL:	https://csync.smartadserver.com/rtb/csync/TemplatePool.min.js
Preview:	var poolData={76:{2:{type:0,http:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI2&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64",https:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI2&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64",priority:150,isGdprSupported:true,gdprRule:1,vendorId:755},3:{type:0,http:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI2&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64",https:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI2&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26goog

Chrome Cache Entry: 1191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvpMBKHLMbme3mCBtMtJWlXK9C1tx0awnQPomk6YMWE6hL_v8-RhCYlafkCVgrWd_YN4iYg8DcmmoTk8eF378WCKDwld6PgS_JaRhb0ZZmjHGumh7ioXcEA_WiOylWeQJqq4mNqFCQIupRMVUvK3HAJh175YHrvBNM&sig=Cg0ArKJSzFdXC08UHENXEAE&id=lidartos&mcvt=0&p=3389,820,3639,1120&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0&vu=1&app=0&itpl=3&adk=76579100&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=946517500&rst=1713532375171&rpt=1077&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-33across&gdpr=0&gdpr_consent=&us_privacy=1YNN&userId=212568969054924
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63592
Entropy (8bit):	5.949016244306227
Encrypted:	false
SSDEEP:	768:b8UQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtIFPR2kTtWhrJT/TruEKgt0w08be971I:QtR3Q2N7ruJYMRmVTC5xdyeXY
MD5:	A935E58F10B002AE7ADC1C1FDC70DD73
SHA1:	979C7A5AF270A57F8CC0D6704D4A6413D77677CD
SHA-256:	4ACB7805129D7A49579F2B2B7244F707A070D6429061C8358C79B1F489329839
SHA-512:	1AF1ED6C9EF6539CC2BC0C17BE0800A23E39A68E39693C1F77BB344E4BB7998165EC509949FC7D34D845A720B273B7C3D8E89F915EB79F201F4A2279E8A0CF5C
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3204156870783777&correlator=2725461953059998&eid=31079956%2C31082853%2C95330210%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_4&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=3&didk=570410212&sfv=1-0-40&rcs=2&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532428397&lmt=1713532428&adxs=820&adys=3389&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=3&ucis=a7z9a7r64ysj&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=124864849&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356162&idt=16827&prev_scp=tg%3D0%26shb%3D1%26it%3Dtbr%26iba%3D0%26iaid%3Dnofill%26ib%3Dnofill%26aid%3D5cd8f580-4d02-4540-a447-54b894d18a5a%26at%3D1%26h%3D13%26auto_refresh_counter%3D2%26amzniid%3DJBwkJ7FiZPEfK81JSox-uBUAAAGO9nzxgAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAvBiED%26amznbid%3D1bc3zsw%26amznp%3D9qn0g0%26amznsz%3D300x250%26amznactt%3DOPEN&adks=76579100&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_4":["html",0,null,null,0,250,300,0,0,null,null,null,1,null,[138471570643],[5747548770],[5046746103],[2884915608],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsm1d4wsf2ySubLNwECQPTjqcE4zw8otaqYJITMWUmrL6DKP4AnkYjjhz5-yhsHbrspAWFYHIIGjp5At","CLak9d6tzoUDFSH0KAUdH0wBhA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"a7z9a7r64ysj",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240417';</script><script>var google_casm=[];</script><style>a { color: #000000 }</style><script>function su(id) {var a = document.getElementById(id);var b = (new Date()).getTime();if (a && a.myt && b) {var t = b - a.myt;if (window.css) {css(id,'clkt',t);return;}var bi = a.href.indexOf("&clkt=");if (bi > 0) {var c = a.href.substring(0, bi+6); var d = a.href.substring(bi+6, a.href.length);var ei = d.indexOf("&");var r = '';i

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	4.870133043630076
Encrypted:	false
SSDEEP:	6:dLCeRb2pH8/AaNm9OnC+nC4IuXJH9Ui1CQXWLNHXQOKVplUhe:deeRb2pHsAaNm9mC2CF2JH9njcNHXQOU
MD5:	64614342EABB37728360F6DA19497F59
SHA1:	1018DC5B77D1C5819213274754FA382AEBB199BC
SHA-256:	FB0346A991BF7914C70001D2DD41127D794750B7E2577F9747998FDCBA2EC3DE
SHA-512:	05DCEB14417084D0A11B84C8D91AD253DDE371ADB0EE2FD0D9CA371DDF0DB915D85BB59A6BBA9B4C517D0FA67AD0888BBDABA8CDA34E2551C7C13FD177ACE080
Malicious:	false
Reputation:	low
URL:	https://location.p7cloud.net/locdot
Preview:	aspan.setLocation({"Country":"US","CountryName":"United States","CountryRegion":"GA","CountryRegionName":"Georgia","City":"Atlanta","PostalCode":"30301","TimeZone":"America/New_York","Latitude":"33.74850","Longitude":"-84.38710","MetroCode":"524"});

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219526
Entropy (8bit):	5.418571249895602
Encrypted:	false
SSDEEP:	6144:adRzmcBHahZ0XqyiAD+HbDTEXeqUgcxeVJinW:qCsJAkcx+J
MD5:	06CADD0914E06CC0A76D18BABBBEE383
SHA1:	85CC67A186D6A5A278F6B96995130FDF50EC3A98
SHA-256:	102372B5C55B13196105178B8C401C69D4BA3B780A24217BB09727364D446879
SHA-512:	20B189C0CA9C7A03504F54D84836B96E80E85C48C8AA73507DA185C3B3818FFBEF49FABE61EEFD057AC6B160EBC3253D47524588BDEF443E381F3323433A09CB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjss2tYAfwa6T88hKtAHul8bI1clzp0l6PwXMw33oB-9eUt1WfZWvHGgocnnti2DP9wAe9THYa9cFrECSiATite1urpmOqZqc0u2o5Tz1vyWsKQB11eJPMNGrK3JZPIwipZbKHK82sEAujQXXaXlT4kMxF7w4WCHxc8k&sig=Cg0ArKJSzIUIUdHusF3LEAE&id=lidartos&mcvt=36301&p=365,276,455,1004&mtos=36301,36301,36301,36301,36301&tos=36301,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=1&vu=1&app=0&itpl=3&adk=629776701&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=946515601&rst=1713532356470&rpt=4582&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.586031705032914
Encrypted:	false
SSDEEP:	3:YVXKQJA68j4FBUQJKHZ1ABOTHC0UBiT8W3TMHhODHPY4AfUUWsKB:Y9KQOeFBUQJKHZ8OTiyoWjGgPY46TKB
MD5:	8D04965AFF845AE85394554007092EE4
SHA1:	A03152D7C60BF27F0BBA8396EDC878BBC6BD7959
SHA-256:	4E154E8EDC650716156F1F28692717E7ABD65A413FF346432EED9B470626B99E
SHA-512:	E9E4FE20851E34674D456F630F29D36E708C5BB123888F615D60B0064081F352127F4BF15D0B894B741245686D870AA5BBB8D7E30CE84355B9A94CC59297B98B
Malicious:	false
Reputation:	low
URL:	https://id.crwdcntrl.net/id?c=17248
Preview:	{"profile_id":"2647d031a51b7a31cc96fbee0c73c78c","core_id":"d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4","expiry_ts":1714137198161}

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	70628
Entropy (8bit):	5.320378592575298
Encrypted:	false
SSDEEP:	1536:he3T2cuoc19x3xcMnu4eO2Qwyt4v9Dsiq3p9WVIXTl:hCc/Ju4pt4v9Iiq59WVIXTl
MD5:	2CEA63505A74309263526B320F034C82
SHA1:	130CA3583955D4785E871E9950C05775975D81E9
SHA-256:	C3C9508E905060BB9518439718AEF255B2E29968EB9A33422B28426D96FF5946
SHA-512:	BEE1305D31CAE0D096E97971203D5DDF879E5BDAD7FB12061574A6987BA33B05CDF1669CF44EE3A3FA22E2421B2B33514181AF1E8441757728FEAF363B1AE48E
Malicious:	false
Reputation:	low
URL:	https://script.4dex.io/a/latest/adagio.js
Preview:	// hash: BPhlwK5WfS4SQxgl810qxWXJg79boH9grjC+8EaY3+AZ8rmGzC1WwfqpNd7J1pBQLbyc0rSo+OzhPRsuUcp53eOFDaL1sp+HSf7WnlOAG6lCnILxa3bOQ0o6Zd997LNTxlZj+4WItxlmwfpL3M7VdVZfZfa5kJw2Z2LXykTqhbE=.var _ADAGIO=function(e){"use strict";function t(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function n(e){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?t(Object(i),!0).forEach((function(t){d(e,t,i[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(i,t))}))}return e}function i(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var i=n.call(e,t\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 600, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	4646
Entropy (8bit):	7.581685797888666
Encrypted:	false
SSDEEP:	96:EXJs++t+IyCgleB4KA7OkEk+j4G82jABAnheSTY6footdgvKKbSqKHxD9f/ClTAY:kJs++t+lCqPKiNEk8u4AB4hXYgoozgSK
MD5:	DF9D8C116AC9C2AF941E74F26514DB88
SHA1:	9FB0C9A3E917C3814F64CDF37F664D9215F257F3
SHA-256:	5C6980AE311238B6C58CF3462A6D668E8CFD6ED2C6DE4BDCFAC431B02BBBD7FC
SHA-512:	89BD3BFDDE215FD32E655F6488142611485DCDD1108E3D12324A01380F48D099CBBC9805D5E9FC5ED0742C58619B3D1CD6FC5E471B4C58ADA2B02717DAA82954
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X.............IDATx........q..!.v.bK.QJ-Z/.=...H.-U9.x.0..o$..`HHB .!../..R@....H2.M6....^.y....6/......3...cBdC..+ `...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E..Vl.........o.X.7..2)..O.+."..SeG...t.Z.\.$....L..>.....+..U].X........)...n.X....w..J_3>./......a.P'..5.....V...Q..<....B..+M..(..............;.Eb...p.....q...5......D.X...B.......X...\|+7.V..,R.k...._..."...]........agx.X..V.....O?..7a.o...I`.rXq[;:.E.a.oc...H=,.X..!`.zX..MM.X...a.b.(.H=..7.o.....e..w.....e.+........{.X...a...E.a..S-.".`.........X..8.....a.o...l.e.....X6.2....X6.2.."......ua`...X..3.,`...^`......X...$..eGO...Xv.x...eG...X....Q`..^....l..:.,`..#.....l.....X..EV...eGE....-...X.....l..X...>..X........X..,`..n`.......l..0.,`...c

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64607)
Category:	downloaded
Size (bytes):	507853
Entropy (8bit):	5.392317003440015
Encrypted:	false
SSDEEP:	6144:PX6j3/k4STd9Iph6HJTgWRCHuzVrhI030GgDHOcuX8f:+3s4U9WhiCHuzVZpg6U
MD5:	11E81CB9C1F9E4A9F76454EF3E180919
SHA1:	042647F7FF49794236B4624D70FD5F37192D23BC
SHA-256:	0718640265D24FD39DF119032C6B188854C0F5D2EFE221F0056420B259991038
SHA-512:	55A9A36C507CD67C79C5DCD9F3CF0AC092780C3E1843C9CAF043CF89B7363D472897DDB8C6FB58B2AA91C9D94AF85EF892630C2FDD2B308639FFC2BB5B2D5CB6
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38.js
Preview:	/.Enabled Modules: prebid-core,keywords,connectIdSystem,cmp,33acrossIdSystem,chunk,categoryTranslationMapping,id5IdSystem,gdprEnforcement,ortbConverter,creative-renderer-display,schain,lotamePanoramaIdSystem,htmlEscape,urlUtils,unifiedIdSystem,insticatorV2AnalyticsAdapter,mspa,getOrigin,uid2Eids,objectGuard,pubProvidedIdSystem,transformParamsUtils,userId,gptUtils,currencyUtils,sharedIdSystem,appnexusUtils,gptPreAuction,consentManagement,domainOverrideToRootDomain,identityLinkIdSystem,pbsExtensions,sizeUtils,criteoBidAdapter,sonobiBidAdapter,amxBidAdapter,seedtagBidAdapter,ixBidAdapter,appnexusBidAdapter,33acrossBidAdapter,insticatorBidAdapter,pubmaticBidAdapter,adagioBidAdapter,rubiconBidAdapter,minutemediaBidAdapter,riseBidAdapter,openxBidAdapter,sovrnBidAdapter./.if(window.instBid&&window.instBid.libLoaded)try{window.instBid.getConfig("debug")&&console.warn("other instBid detected.")}catch(i){}else (function(){.!function(){var e,n={35706:function(e,n,t){t.d(n,{Pd:function(){return

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 342 x 50
Category:	dropped
Size (bytes):	2879
Entropy (8bit):	7.62143111234988
Encrypted:	false
SSDEEP:	48:0IhitNn2VqpJ3TPL8a3hxzRg7KiUlyKCITzCwA9ErhzvYEM:82ET/hxNg7KNyBVwkQhhM
MD5:	9098909B853256CD990F06D5ED7D4BA1
SHA1:	758E3E8E02574FE76B64D14150E1B910B6C1B00A
SHA-256:	AEE7EDBCB570CAE2EC689EA12A8195ACDDBDEF7396E20F6389BBA9F0608B39D3
SHA-512:	83B9DD05A9E9C87224EE13D72679BAF32D880352D457FAFE6C0A4056710AC5542D509ADE58F309C74A2D2849310CCC10FD55C5492E98876B3D40AECA78E779AE
Malicious:	false
Reputation:	low
Preview:	GIF89aV.2.......u..;@..........gp.......X`.. ....,0.IP.......................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:B098C8F7842311EAB799FFB08D8CC38B" xmpMM:DocumentID="xmp.did:B098C8F8842311EAB799FFB08D8CC38B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B098C8F5842311EAB799FFB08D8CC38B" stRef:documentID="xmp.did:B098C8F6842311EAB799FFB08D8CC38B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...................................................................................................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-openx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BOPENX_ID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=95054&us_privacy=1YNN
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 105 x 39
Category:	dropped
Size (bytes):	909
Entropy (8bit):	7.4397638322788255
Encrypted:	false
SSDEEP:	24:LGRiylL8T7L4F7mc/2f0WexJg6XanSYHTMR+ZasfxUu:LGRUT7L4F7/bWex3XaDS+4spUu
MD5:	67E52DB53BCCD3C0CE6BDC5948FDA525
SHA1:	DF567C104106C63735E902C7EC8E2207646E0A8C
SHA-256:	DC5A281743479DCC6F352B67E5219524B6153D1A73DA652498A687E7AA16C81A
SHA-512:	E9FC02686C1CE7661D0A9F446D0B1A7C8D4BB758BCE190B7CFEEB29CAB87E3D67926F9C089B5FA35E8ECE2C73EEE836292D7A4B30589DF0A7270B0E98E2FA268
Malicious:	false
Reputation:	low
Preview:	GIF89ai.'.............,.0^ad-02"!!...GIL+-%$%/25(()))69<.02$## #&&&'+,.+-.&'' $&$#$.0369;()(((.14025%$$+,+-/-/1 '((,.#""...%%&...)+!!!........./14...................................................!.......,....i.'....@.pH,...d..d..tJ.V..v..z..xLF...z.n....A.....~..g.t........}{...................................................................................!.............................. ......8a......+.....J.H....3j.... C.L@...(S.\....?\|HA...8s.......@.4.A..H.]..).P.:}.jU.X.j....`...u..h.X...p..K..........}+..L......^.....#K.L....3kV.....C..M....=x......c.M....^.v.{...y..M.8...+_.....K.N....k.......WA......_.....E.O..............(....h...&.........F(..Vh..f.a..v.. .(.$.h.(...,...0.(.4.h..8..<...@.).D.`.H&..L6..PF)..TVi.Xf..\v..`. .d.i.h...l....p.).t.i.x..\|....h...j.&..6... .Vj.f..v.......;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	497811
Entropy (8bit):	5.4070857657039015
Encrypted:	false
SSDEEP:	6144:VvHNTjuOhKrLKFsvb8Tp7LGoHIWW5my9d7wwBmsSPSrZKcku/Ulw6HHzg1QrJ:TxLGoGkK0
MD5:	C24410C35E5D87B630F3D54A49F2B820
SHA1:	333BE3415A7D35C422412F5D91F16B4F3B76D916
SHA-256:	E2E032414AF88512367DB0555F566E941050B9618167BB97DC795E7635F1FD71
SHA-512:	DB6078CEEAB12D1EEE2012C872A595409394F06253B044491FD088B6FD75BD2F6E15EC82E33BD45F4D355D2892ABF90B0805484C6A2D792AAF3EFBA4EAA2AB65
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/assets/smart-tag/versioned/main-v2_c24410c35e5d87b630f3d54a49f2b820.js
Preview:	/! For license information please see main.js.LICENSE.txt /.(window.webpackChunksmart_tag=window.webpackChunksmart_tag\|\|[]).push([[179],{9586:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.createEndcapDeployment=void 0;var o=n(4544),i=n(5483);t.createEndcapDeployment=function(e,t){var n=function(){e.once("impression.bx",u,!1),e.once("activation.bx",u,!1)},a=function(){if(bouncex.state.mobile){var t,n=e.domElementID,o=e.callout_voffset,a=document.getElementById(n),r=null!==(t=null==a?void 0:a.clientHeight)&&void 0!==t?t:0,c=document.getElementById("stickyParallaxEffectId");if(null===c)return;return(0,i.applyStickyParallaxEffect)({adElement:a,adContainerElement:c},n,r,o)}},r=function(){if(bouncex.state.mobile){var t=e.domElementID;return(0,i.createElementsForStickyParallaxEffect)(t),!0}return!1},c=function(){return o.BlockedCodes.BLOCKED_NONE},s=t.getIsReadyForAuction(c),u={__init:function(){n()},canShow:function(){return c()===o.BlockedCodes.BLOCKED_NONE},findCampaign:t.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=SrCpyrdV1RXO2T5
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	39652
Entropy (8bit):	5.298486888835933
Encrypted:	false
SSDEEP:	768:1kNBZTaaONaKbOg4tpLueLsMVbz57CkNsIi1TRXuubHTl709pp:cdgg1F7Zkuqs
MD5:	59A52F4146BC2CEF83D394F70045881D
SHA1:	639131A78120B4754A362468D5BB2A036374ADD8
SHA-256:	0F338A242AB3AB8A11225A8F0FD2FCE015C120C2E00EF07B72E3F3F3BBC7B313
SHA-512:	13AD20DDCE0C759153FA40869F89237CAAD4A31C12470A83125AFDAB35DA2DBC95EE68BD49216345CD9AC5E1CAB1697C0E0BE6CCA24E7D5452B462551EDD0429
Malicious:	false
Reputation:	low
URL:	https://everest.castbox.fm/data/episode_list/v2?cid=3921236&eids=567018231%2C564032508%2C553681366%2C548039517%2C544843609%2C544583019%2C542830300%2C537719976%2C532957961%2C528241106%2C522708940%2C518691930%2C514502604%2C512792695%2C504436661%2C502372444%2C500147724%2C497914708%2C495593596%2C493582438&raw=1&web=1&m=20240419&n=b9bfd31ff99871909a72499e059ffbbd&r=1
Preview:	{"msg": "OK", "code": 0, "data": {"channel_id": "5eb5e00ed53a6141e32737d37e5211d6bcf27240", "episode_list": [{"website": "https://anchor.fm/spout/episodes/Gayle--Blackbear-e1u88ed", "cid": 3921236, "description": "<p>What do you get when you combine an artist whose breakthrough single garnered over a billion streams and an artist with numerous hits in his own right? You get FMK - not the game, but the song.</p>\n<p>In this episode, a veteran of the show Gayle and first-time guest Blackbear join host Erik Zachary to spout off on wardrobes, Taylor Swift's Eras tour, cover songs, food, spelling, Amazon, Grammy nods NYC, and more!</p>", "ep_desc_url": "https://castbox.fm/app/des/ep?eid=567018231", "internal_product_id": "cb.ep.567018231", "private": false, "episode_id": "5eb5e00ed53a6141e32737d37e5211d6bcf27240-302f161d34a3071d091deb50561252a1ab64c7d0", "play_count": 723225, "like_count": 1, "video": 0, "cover_url": "https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded_episode

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.216852565777617
Encrypted:	false
SSDEEP:	3:U3yGqItEsRGD0twQyGnyaDgeDQggp6ngQjMHy/Oh2/w8M1gpRf:U3yGqIt7DtwjGnyac8gUMA8Yw8agpl
MD5:	1606C77F964FED869C1C52AD7F0E3885
SHA1:	5CDDA371D4835193355743A5B7E519F9433E2D69
SHA-256:	600296D979650E8CBC41CA2950C1A33DE723A6137494A8C80B4A7B9C42B2E61B
SHA-512:	B87AFD15585667B91813A392CA26480955223F43A7ACCBBBE9BC0BE8B68DFC3DAD48113FCD6A7D3CFFB48236EDB1C265B8BF73EA179F439F5F15347D32141866
Malicious:	false
Reputation:	low
URL:	https://rules.quantcount.com/rules-p-00TsOkvHvnsZU.js
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2022, Quantcast Corp../.'use strict';(function(a,b,c){__qc("rules",[a])})("p-00TsOkvHvnsZU",window,document);

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=-1nrnf1RgWYi7hJa0nBRJ7lUzOJRTC3fp-r0xAlHwcnZGk19AjhFgA7FlpEWckJS9fvmgRHsLDS7afX8qxXrHRzeiKMDQMpgcfnggmQ0KnE6gD_SJl7e6__A9LmFbMmM5fsbeaw12qBBJnpPQ7n1OhhayJyBn6BM4DAAhrxp3wf8RVcI6t_hIz6wXtY6ziTCjnNOXl_JVEjr4I9FJU4vTFchessgPT8WOMmUAwIlnhg_MgQuH1kAtS6scfPPcq4vTglxFt9zPbWbgqtbt62mF27DYUn9ih71znOsIT11uEwPSvp2Hy1POhB96kXJYG1sWe7HYWRvT95vh8-FncM033qWuY0dw-Q-qY_fWjz3JjwnbSWiZ9am6PL5h5PMSfJERU0-NaMIQGYfBRQfPJhvLbsPQ4dhwqT1PeS7ypGMqZ6Rf8wZtskbuCU4gkSKv3Uy4TR8XQ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.7004397181410926
Encrypted:	false
SSDEEP:	3:c11Kn:cS
MD5:	1E1210C1FB09DC80C1DFDFDF15061BF9
SHA1:	B7ACB9C4F4E679892692960EF186F1D1D11B52E2
SHA-256:	AADF2FDD0FCB02DD08B4160905BC3FA1FDAAEF1E145DDF28EF8074F6FD1DCA5E
SHA-512:	C7254D88569E181B41A733AB27A40FC38B37E272A308EBBE29092383F01443A354228BB30135BA9ADE5A6F368817C2AD6AEF71FD3D74A65597779B14B064A119
Malicious:	false
Reputation:	low
URL:	https://lit.connatix.com/ea5f8a6a-93f1-4570-8103-7a5aa38414f6/blockedDomains_1.bin
Preview:	..fakeurl.com

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:W:W
MD5:	ECCBC87E4B5CE2FE28308FD9F2A7BAF3
SHA1:	77DE68DAECD823BABBB58EDB1C8E14D7106E83BB
SHA-256:	4E07408562BEDB8B60CE05C1DECFE3AD16B72230967DE01F640B7E4729B49FCE
SHA-512:	3BAFBF08882A2D10133093A1B8433F50563B93C14ACD05B79028EB1D12799027241450980651994501423A66C276AE26C43B739BC65C4E16B10C3AF6C202AEBB
Malicious:	false
Reputation:	low
URL:	https://c2.eu-3-id5-sync.com/
Preview:	3

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-sharthrough&userId=7456771a-49ee-4e2a-b013-668de61e15dd
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	165556
Entropy (8bit):	5.237498888338292
Encrypted:	false
SSDEEP:	1536:UiACTVzEvlx+2ydoyM4YR2hi7v4a8rw1usvz5OzQ55f:VA++x14oyM4YR2hiT4a8rw1usvzwUX
MD5:	422AD6B0FD603C5938C3BE15E008FF66
SHA1:	DB36F9A1D940A1D528BEDEA4F4F71FCC740F54BB
SHA-256:	89527917F6065C70896067581359803A632FDFA2BFA051CEA794CF555F6E76D5
SHA-512:	EAEF8E2D8940B9AF34FC1F9093DF9EF67E846D8FDC0F6BAC481B395DD54412D6D0DCA8B0FF4FFB950CD3F89A92963058853607A38C04B35718573BF7463BA546
Malicious:	false
Reputation:	low
URL:	https://silo40.p7cloud.net/as1.js?uri=https%3A%2F%2Fwww.justjared.com
Preview:	_a1cfg={cat_perc:80,include_cohort_evaluate:!0,include_ortb_modifcation:!0,include_behavior:!0,include_composite:!0,include_modeled:!0,include_tapad:!1,enable_gam_listeners:!1,enable_pps:!0,include_mdomain:!1,silonum:40},aspan={SILO:`https://silo${_a1cfg.silonum}.p7cloud.net`,debug:!1,gdpr:!1,gdprConsent:!1,ri:[],nri:[],iab_cat:!0,dlog:t=>{aspan.debug&&console.log(t)},dDiff:t=>Math.round(((new Date).getTime()-t)/864e5),prebidBidders:{"Index Exchange":"ix",PubMatic:"pubmatic",Magnite:"rubicon",Xandr:"appnexus",Yieldlab:"yieldlab"},iab_audience_1_1_map:{KrEgKtmC:214,XVTaRN8P:220,dU4scZ3s:222,SjxUc2gU:226,nGVP26jV:229,VLmy8UqU:230,heuxZWrf:231,V4W98WhQ:232,J7Gg66dv:238,"7JW4fUrN":241,YRHcQ5e9:243,t3UkVfS5:244,"3Fk88aH4":245,DJowuy8a:246,gS6k2g2t:247,B7Ki4gAY:248,FPPEguta:249,"38zjj44g":250,VKTzeuez:251,ZTUZ9Bhz:252,cDZCvbfy:253,"7UiKTfbh":254,"6Dntw9x4":255,"85Vof6FL":256,MLaSoeqS:257,MTDTsJjJ:258,jTHbBWDG:259,eYyQyUBE:260,nEwB7w8S:261,HSeeu9sw:262,NHhmAa48:263,"9vuZhbtU":264,Lst4QWZe:265

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	424
Entropy (8bit):	5.143809088426608
Encrypted:	false
SSDEEP:	6:Iz0pBJ0mjA0CI1Nqsw9tQpelgzBLVRaN2CgG8HphXBinKDoKB7yT4X5MfMnNtdde:IMBeX0CwQsw0wgJVR0JAL4Kg8X5GM3e
MD5:	88F5DBB5752C1769B87EE80BC250C087
SHA1:	DE2B1792180F0884068FCFFB47C83C3C434947C7
SHA-256:	D533D520A7BC97BBB3F7EB3FDBBE4A9A0E42495C5FD6CD3C0ADAEC0F07F4DC4C
SHA-512:	2C63977114684804D9DA581BAF653428D81D313359A428E80F9F01B0E6EED2AE82489E491F81CCC1CE91EEF4AEC3A70C2DACE6FB12EDD87A65A0AE63579465B7
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/themes/default/js/jj-mobile.js
Preview:	.function returnToMobile().{..del_cookie('deviceGroup');..window.location = window.location.href.replace('rd=d','');.}..function del_cookie(name) {. document.cookie = name + '=; expires=Thu, 01-Jan-70 00:00:01 GMT;path=/';.} ..jQuery(document).ready( function() {..if( document.cookie.indexOf('deviceGroup=all') >= 0 ){...jQuery('#returntomobilelink').show();...jQuery('#footermenu').attr('style', 'width:730px;');..}.} );

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB?gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	4.90307069513954
Encrypted:	false
SSDEEP:	6:8WiIUemo/H1fCYKbY4DCVeOcANYIshV9RvAWudKd+GJpoeoM:8DIGoNfCYKbEeOcHIseIdrJieoM
MD5:	D9DBD3318814CDCCABA057C08AF65705
SHA1:	526CF7F0A422A4A68386370780C9D07D086E6E6A
SHA-256:	E7FAEC8B61422524A5BCA3F040860C1D135028BB0139A5906F463793DA0E4A77
SHA-512:	57C2BBE9C47ED929FD628FC3390045712E48DF17A8F37C8A5A98E1A2E698F11E288DDEA32A773D97FCD4FCED96B8C2725841490804E1A09169C45F39E15A458B
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=2&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_InContent1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fincontent%2Fhome%2F1%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain","cb":"2"})

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1YNN
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://measurement-api.criteo.com/register-source?impressionId=66226deda9076d75f64217de5863594d&partner_domain=saksfifthavenue.com&external_uid=0a3d9304-8516-448f-910b-5243e3168aa4&partner_id=40380&source_type=event&campaign_id=262917&marketing_objective_type=0&hashed_external_id=3456102569213193224&hashed_external_id=-2290104695126906289&hashed_external_id=8654451598536046547&hashed_external_id=-7639318776259380780&hashed_external_id=-7065153232918501012&hashed_external_id=-6515369187864709287&hashed_external_id=-2831020607418177690&hashed_external_id=-7577822430246766019&hashed_external_id=-2114828387279349401
Preview:	OK

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 248 x 124, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15754
Entropy (8bit):	7.969223071896611
Encrypted:	false
SSDEEP:	384:vJDo1e/8w3whl9Xj+eK5JCdquc1jpSfAXX/XvPajsrA:hDSe/8wAxj+eK54dmjpSfAXv/Pa40
MD5:	3041D30E5DDAA092E0783679BED6E84D
SHA1:	AF72C02F4AA86FD729C142A3AFEEED18F4411B6C
SHA-256:	EFFF3C27EB47CB7D1F949951B0A740AD8480BEFB1BA027D7053D5ADBFD5E9C9D
SHA-512:	B0D84A1C4CFD4CE56CD203AD3CD64E173E6BAB40774A5E105425900A236EA29954886383DD1CCEC3C410AF5419BBE74C9C7CF50CD744F4D15F7D8ED7299AC821
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?h=124&m=0&partner=91644&q=80&r=0&u=https%3A%2F%2Fstatic.us5.us.criteo.net%2Fdesign%2Fdt%2F91644%2F5409671%2Fc792ea85e45641eb9950d5969ec32a7d_phr_regrow_logo.png&v=3&w=318&rid=73&s=78naYr8eKTuMidzc8kU9gFI2
Preview:	.PNG........IHDR.......\|.....D.}.....pHYs..........{Rk.. .IDATx..w.U....k.r......".".b.^bKLL41&....H.!7y..DHyS.O..\.K.{o...b.......r..k...1.*..s(9...g.>.}.>{.5.s.9.\.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.!C...2d.....K.6.l@D.;..F$....].....r.3.4w.x.00.m+.Kh...n....1..zq.q......+..=.h`KK.s[..Yq+.6._).^;k?w..:..>.KQ@.b...;Ar.)!.L.............9..[...@\|..H.}.._>3y..'...@..F.n..J..n....r.g..;..0xv..[.o..........nq.M.....gF.D.\|.+..nlL..dy^.p..lEg..]..3..o?...G...\...k..Azb.`..(:.C....>@...F`...cVD..d.(>&Q.5.=..l..G29u..N..o....5....-.../...U.V...oc....S..2...k.^....9I.G...}.6..@...^..A..2k.K..,...f\|..6n%r]R...)...?......".m.........k.W.3mf.j....PB<....h..B..v.z.G.U.,...n..<B..PT.A..q.U3:....`..[-.U..".....y.......i3;f.Z..p.c.......E.\.N...w...nC....<....pm.@i.T'...S.S...RF8.XJ}5.C.)w...5(....;.............".9`..#"...P.":.\.V.k.<&.. `B....[._...i?...p~...E@9...\|./...7.g..@_D.....Q.9.'._.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	106
Entropy (8bit):	4.704506982595993
Encrypted:	false
SSDEEP:	3:HWLrCHTJA6MBv0IEsdRHJT1pEXkLdIHAn:HWLrETVMB/XdhJvsgn
MD5:	C29876A4DF613CD0E25C36C7500CFFBA
SHA1:	39F6B95A99A21FB0D836EFF5F30A694CE7B36AD1
SHA-256:	434E6B4D6D3A6E0D04531BA4AC3218577EB45CA665AA6FC9939DC941C2C879B8
SHA-512:	76BA41E2887453BD57D392E68E21E3C9D6500EA3EB49C188497A19B4C7BA5570B5133DC6F58AC208E020EF0AE300C80C553F59BCE4522BED6A9E86C9DB8D20CD
Malicious:	false
Reputation:	low
URL:	https://id.hadron.ad.gt/v1/hadron.json?_it=amazon&partner_id=450&sync=0&domain=www.justjared.com&url=about:srcdoc
Preview:	{. "addr": "81.181.57.52",. "base_id": "25b30431dd72816edea988f3b9d816fc",. "domain": "justjared.com".}

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10355), with no line terminators
Category:	downloaded
Size (bytes):	10355
Entropy (8bit):	5.174934558972624
Encrypted:	false
SSDEEP:	192:UIP5q+QNcNwUKTEAX9q6/rycQFcDLCYN3rE84dQ:hIHNcNwCAXF/HPLCi3rD4G
MD5:	5430732207EC42B7392DCB6F8C81620E
SHA1:	C001CA1B80E56B18BF015F2D0BAB9D336419EE05
SHA-256:	4988D132D0FD2403236624E0FFE273C3414B960CFBD88731648A179EC38E47AC
SHA-512:	73C9D0EFC2B299940BE04C93B3DA80402DD2E030435EBBD3088F296B930BBB3368AA67B50634E99544950A0EEEE73C9DDB8FCE311C913D37D090FC223CF20AE7
Malicious:	false
Reputation:	low
URL:	https://ced-ns.sascdn.com/diff/js/modules/cmp.js
Preview:	var sas=window.sas\|\|{};sas.utils=sas.utils\|\|{},sas.events=sas.events\|\|{},sas.cmp=sas.cmp\|\|{},sas.consent=sas.consent\|\|{},sas.debugMode=sas.debugMode\|\|{},sas.debugMode.logsQueue=sas.debugMode.logsQueue\|\|[],sas.debugMode.bannersQueue=sas.debugMode.bannersQueue\|\|[],function(){var e=window.sas;Date.now\|\|(Date.now=function(){return(new Date).getTime()}),e.utils.extend=function(t){for(var s=1;s<arguments.length;s++){var n=arguments[s];if(n&&"object"==typeof n)for(var a in n)void 0!==n[a]&&(Array.isArray(n[a])?t[a]=n[a]:"object"==typeof n[a]?t[a]=e.utils.extend({},t[a],n[a]):t[a]=n[a])}return t},e.utils.Latch=function(e){for(var t=[],s={},n=e=e\|\|[],a=!1,i=0;i<n.length;i++)s[e[i]]={};var o=function(){if(!a){for(var e in s)if(!s[e].status)return;a=!0;for(var n=l(),i=0;i<t.length;i++)t[i].apply(this,n)}},l=function(){for(var e=[],t=0;t<n.length;t++)e.push(s[n[t]].result);return e};this.isComplete=function(){return a},this.notify=function(e,t){s[e]&&(s[e].status=!0,s[e].result=t,o())},this.addLis

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19112
Entropy (8bit):	7.98784204113897
Encrypted:	false
SSDEEP:	384:jx9SO6lRN5i/EatTaBvEQ2NtQxOvA85vWAmjO4d9ZYcOqYO1VQTKN2:twVN5AFkCbLo2eO45YqX4TKg
MD5:	2575E62A20129DE29C4816168A379BD0
SHA1:	2597DE0F52103477A50603A48F07085EA5E01CEB
SHA-256:	7E8FBD4F69085F45BDF78D2A7C66CFDEB9366D6179D3ADF66903A210DBC2EA3C
SHA-512:	C59203B78820F6790267DBF75D9F4B05F50D26CED992943B69628299414DB998C2979318BFB17710ADC70A41E89F3E22EB609A383176EA66EF4CF62A1CB15CAA
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/brands/ulta_300x250.jpg
Preview:	RIFF.J..WEBPVP8 .J.......,...>I..D....+..(......9..G...........{+.?->..gky\t..../......._.;....p../..."~8=n.s.....;.w./._.=.?....c...w...._....v+...B...........o.........e.r.....K........../.c)...;._.......3.W...\|Q...w.Oa..?............n....'...._.k.7...'.'......w..pO......n.{.....g.?.{..W...O.................../.....?...............g....._..e<..,.Z.w..'q.6...Ev...O..&.X.%.....I.x...u.....K...w$[=s......l{........M.....N0...;..@.$z..]...<..=]..6.....QqzW...gqV.0..NG....m.S~+Ohq.l.......PV..........%.A.7.h.....3]....U.........T......'f..".w.........a.(....wU.ut.i.u...../.L.om...:2.2...uECA..(..{.U..6.e........v..i.......DI.P.&U.>._O.....P#B#...).C.H.....&p.l.Vc.t....=.c..~...7..\8..4.....l...;...,. c..x......'.........aBrh;.T.77.,...C.j..........h..o.._..:....D......2..D...?....i5.......kW.QU.mY...2."QC..O]._..OK....>....?.......Bdl.}L......1....n.o.d"..\|....D.........n......6.....m.2If...K.[H...a.....o.J;.B}X.YE_.`.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2023 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	83669
Entropy (8bit):	7.9641825493018175
Encrypted:	false
SSDEEP:	1536:1nyY0/w31qCZ/YboXEw/51/7HIrEU4vo3KID3oQzF5UUIMeXm4RB9:JI/w3oU/Y0Ew/517PjvoRDYQzzUZ/Xmk
MD5:	183F3BC4AE1D8BEF1CCC5E00EE97EBD2
SHA1:	14429EF2328B72CD32FDC18642CADE0B132D132E
SHA-256:	B996961A0DEBF608A03D16933A4A1AB763D2DFFDA55E5BFD0874E8E1BC862D1D
SHA-512:	9E6B44D8F1900E3CA4C28D6FBA69EF70573A26F358E9264384ED494DE14ABBFBBCD98F8CFE7EF43DA695D4E8584600ED29825417E11FC74950CFF8CF28092780
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/andy-cohen-bravo-rumor-debunked.jpg
Preview:	.....6Exif..II*.......................2023 Getty Images.......Ducky.......d.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.7 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:3E0B9609FDCC11EE94E387E15C7C882C" xmpMM:DocumentID="xmp.did:3E0B960AFDCC11EE94E387E15C7C882C"> <

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.357588998363434
Encrypted:	false
SSDEEP:	24:hauOzK+ik7ODCwGYVT87O607Ob8MhvYA+7OU+kAcz8k:9Qvik7rwbVw7D07vmYH7YJcQk
MD5:	843CCA4601AF276E0900B387C438F8C8
SHA1:	243C305033ED426DFC87FD2E644B00FB1DFE32B9
SHA-256:	5E0FBE979E2AC07C610E9811A6C83D866D70435E0DEEB0651A92683D0927AE57
SHA-512:	9B1D4DE0BB1872E2AEB27AF61DAAB8CAA0CF1520577BCBEA05A2C2CF4B2DC7C79D67E1417FF2B67C2CD5786C319B8C4B7577A041060C31484721A0E518D226FB
Malicious:	false
Reputation:	low
URL:	https://pixel.s3xified.com/sync/?ssp=1601&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadmedia.com%26id%3D%5BUID%5D
Preview:	<!DOCTYPE html><html><head></head><body>.<iframe width="0" height="0" scrolling="no" frameborder="0" src="https://s.amazon-adsystem.com/ecm3?ex=admedia.com&id=b775784632323f34fcd70d90833d7507" style="border: 0px; visibility: hidden; display: none;"></iframe>.<iframe width="0" height="0" scrolling="no" frameborder="0" src="https://ad-cdn.technoratimedia.com/html/usersync.html?&srv=cs&source=admedia&UID=b775784632323f34fcd70d90833d7507&cb=https%3A%2F%2Fpixel.s3xified.com%2Fdspsync%2F%3Fpid%3D1642%26buid%3D%5BUSER_ID%5D" style="border: 0px; visibility: hidden; display: none;"></iframe>.<iframe width="0" height="0" scrolling="no" frameborder="0" src="https://match.prod.bidr.io/cookie-sync/syn" style="border: 0px; visibility: hidden; display: none;"></iframe>.<iframe width="0" height="0" scrolling="no" frameborder="0" src="https://ad.360yield.com/server_match?partner_id=1669&r=https%3A%2F%2Fpixel.s3xified.com%2Fdspsync%2F%3Fpid%3D1667%26buid%3D%7BPUB_USER_ID%7D" style="border: 0px; visibili

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://c6.eu-4-id5-sync.com/
Preview:	0

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (628)
Category:	downloaded
Size (bytes):	647
Entropy (8bit):	5.346858920094228
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7G0H4d2bvbUrJcY5Y2PqVCZEnxTht1DtfCYKO+kVNl+MHfVfCYKb5:WDlf8vUG2bTsOC6DnKO+kDltHnKbEe5r
MD5:	6EA11F7A027C6B3616AE5CA21C521108
SHA1:	E23222A90A155F3D02AB6A87EE6DCC1C4B4D56C2
SHA-256:	A5978A8EF5BAB9E7D661528C0E08372FD52DF1A1F343553BDFFA529FA0244B4A
SHA-512:	5813280A1539DD0030E5949A5C24D87DB6E3235935C903EA76FDFCF7E8324176CCEF6ED86754DD19F1A68DCBB7015C2FCDC6DD51D8581B32790AA136F8848BFD
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=MsG0RONB99OMG&cb=1&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-3%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_3%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_3%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JOrfKs_eZYmlKAMjoqT3O3UAAAGO9n1WhAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDk7eUq","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-3","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv3.js","status":"ok","cb":"1","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-adMediaV1_n-onetag_pm-db5_ym_ppt_rx_n-acuityads_cnv"})

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.50118938350047
Encrypted:	false
SSDEEP:	3:RFNAWRcE/2JNv/Sn:jSWRcE/2JtS
MD5:	33DFFF848A16635BFA59962BD9E101B5
SHA1:	2CA034B4C2535985A6B00C3CBCE7E5D5FD9E8FEA
SHA-256:	1BA9B1C33C9BD730CA9E429C7B6D1661E1F0126659475CDD8B340BF324DEA7A4
SHA-512:	341F6C79A2535B2AEE34719A6783660D52D1943E6F87D042F00A27DEDC277EBC6DD574B8F2E57D0E6920291871EAF86CCC1903C07622F89074845AF7B7C1D475
Malicious:	false
Reputation:	low
URL:	https://aax-eu.amazon-adsystem.com/x/7318ffc0e8fa1d771446
Preview:	// invalid request.aax_render_ad({"html":""});.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48587)
Category:	downloaded
Size (bytes):	780197
Entropy (8bit):	5.543796844429053
Encrypted:	false
SSDEEP:	6144:txyCdaW1ADe5oU2xe1q4liOXTHIsCusyDIdqAPR7BeoNjppTVJnkEb4QUALCsBI+:TwD2seI4EODtwqApNUlRwz
MD5:	A63B0ECC09CAB0033D643E7FFE41341F
SHA1:	59FE3020160FFEFA5AF3AE36397ED7CDB0393EAE
SHA-256:	58E7C73B90CDC7D20235FDA430532C7D94E42A9DB2DFBE631238BC27FF321875
SHA-512:	776CB19AA774FA9768544E8E727D28C01D52B8C3FC7A5F64271C17790C2493EF0FB8EBCF80B03721683C59D8FC616C7F1513DE147F70612E32192D28EC5DD628
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/core/bridge3.634.0_en.html
Preview:	<!DOCTYPE html>.<html class="ima-sdk-frame">. <head>. <title></title>. <style type="text/css">.videoAdUiActionCta{position:absolute;bottom:30px;-webkit-box-sizing:border-box;box-sizing:border-box;padding:5px;max-width:75%}.uac-android-on-3p-instream.videoAdUiActionCta,.uac-ios-on-3p-instream.videoAdUiActionCta{background:linear-gradient(to top,rgba(0,0,0,0),rgba(0,0,0,.4) 100%);bottom:unset;max-width:100%;padding:12px;top:0;width:100%}.newProgressBarVariant .videoAdUiActionCta{bottom:46px}.videoAdUiActionCtaInset{font-family:arial,sans-serif;font-weight:500;font-size:16px;background:white;display:-webkit-box;display:-moz-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-ms-flex-direction:row;-webkit-flex-direction:row;flex-direction:row;-webkit-border-radius:8px;-moz-border-radius:8px;border-radius:8px;-webkit-box-shadow:0 1px 3px rgba(60,64,67,.5);-moz-box-shadow:0 1px 3px rgba(60,64,67,.5);box-shadow:0 1px 3px rgba(60,64,67,.5);overflow:hidden;height:50px;pointer-even

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 342 x 50
Category:	downloaded
Size (bytes):	2879
Entropy (8bit):	7.62143111234988
Encrypted:	false
SSDEEP:	48:0IhitNn2VqpJ3TPL8a3hxzRg7KiUlyKCITzCwA9ErhzvYEM:82ET/hxNg7KNyBVwkQhhM
MD5:	9098909B853256CD990F06D5ED7D4BA1
SHA1:	758E3E8E02574FE76B64D14150E1B910B6C1B00A
SHA-256:	AEE7EDBCB570CAE2EC689EA12A8195ACDDBDEF7396E20F6389BBA9F0608B39D3
SHA-512:	83B9DD05A9E9C87224EE13D72679BAF32D880352D457FAFE6C0A4056710AC5542D509ADE58F309C74A2D2849310CCC10FD55C5492E98876B3D40AECA78E779AE
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/themes/default/images/jjlogo7.gif
Preview:	GIF89aV.2.......u..;@..........gp.......X`.. ....,0.IP.......................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:B098C8F7842311EAB799FFB08D8CC38B" xmpMM:DocumentID="xmp.did:B098C8F8842311EAB799FFB08D8CC38B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B098C8F5842311EAB799FFB08D8CC38B" stRef:documentID="xmp.did:B098C8F6842311EAB799FFB08D8CC38B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...................................................................................................

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	366301
Entropy (8bit):	7.977092679050423
Encrypted:	false
SSDEEP:	6144:PTh+6j4SpIcYG0E57WpwWEC2U3j3csXkM5j/vCXdkjBp5+c/b14K+SwVk4LgBM2g:7hWaYG0EFC7EC2U3jxjvikB+le4LCB6
MD5:	56C1ACF7DBF857FB2F8B5A595E305033
SHA1:	13DF9F357ACF46218EA37149CB68E166B5372EC3
SHA-256:	3576F2385DBDC5033CB4B90AF0D37DEABBC8EE912387852E3C42809990A2EE50
SHA-512:	B4E7F3AD06C61F6BA0C8318A42700A37F7C471477E66658A1939191AADACD7F123AC02ABC0ADE2607727395693ABB50486292AACFBDFC7847F99A2485CF118EE
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/dt/91644/5409671/6e29e5204e824421ba7a64a4b6e77dad_untitled_design_(8).mp4?ibv=1:2f75092362f61f:2
Preview:	...<kIS.0..j.$a_.#.....gx.}.j...5..r9\|y.C..PZ s0..D.\7....Yg...#.}...7........"...y.a9^3{....k..9..u.)j....X..Q.. .>..&.L&kb.{......~..aU>\|..v"._......1h{R.r..'.q...m.+k..s.$K.H....~..#or...q....\....c{G.?.Kq.}T....\28e.rV>.'.6.C.K Pk_N$...uH.5..r.A.D.g......+.O.FOx..;.....S.._$Y.d.k.a..s....U.]l.'..>A....W.......b./.6..:h/H.fV...]....&.P../YM...K[.,v..C.p...-I..T@....GF.2T..;#c......N.7......'....Zp.8N.6....$..F#3....D....Jf.w.3..I.d~.$.....,^....Y..3.A.....G.h..e.....'...n%Z..........7.?3...fY.9....tHT.`.f.D....O./~./C..{2u.[.veE.z$%-K ......mo....0...A..v..3..7..DM...onC.7...4.}.a....n.[A/L5....`?...0..5o....u[.,.N........++.S'...J..-.%..<`n>..!).B...@.w6...hJ&74r..[..C=1...u..........S...kU.....Z+~M.[.SF).(eH..f.g...G....&.}fM.....e.q..r...F..Z..$t...?Y...5..j%.^....P2...&..\|.g.4v..4.B..Ok.OM..-a....{./M._..._,.&..,.J.{._N"....J-8V.Rvu=.D..t.6.(_..~..>....Os?.L.9....A:K......@d2]iXb ..7....7.%.G.........o...........J....)8..J.....nd.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	160238
Entropy (8bit):	5.198084320031487
Encrypted:	false
SSDEEP:	768:NCWPkbC3pWWfxuWmeuUXCoA+eFCrJxCrJFpCrJxfISqC5n3xSEeX13TAfENtzrC7:9PkqUmYi/9teX13TAfetzWMDuVvZt
MD5:	2143D49524E48555B3F69E0590182ADF
SHA1:	5A815C3E69ACB93A49E95766960AECF3EC671479
SHA-256:	1C43AC29D5219A8CBCED1F40BCD12460785EDA36A772BDDB79A7448A0F3654A1
SHA-512:	AAEECE1146BA6792C2D7CC6A04717EAF2A2C541AEF4F2EF94CF03C6835D0E0F91474932FC22402430B5234E99B67EDE311622C78CB071CACBFE7762957319898
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/unified/4.21.0/gdpr-tcf.326dc0fcac2e9cce1493.bundle.js
Preview:	(window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[4,3],{180:function(t,e,r){"use strict";r.r(e),r.d(e,"default",(function(){return P}));r(22),r(27),r(54),r(28),r(29),r(71),r(141),r(102),r(101),r(51),r(49),r(50),r(30),r(31),r(32),r(186),r(187),r(33),r(69),r(52),r(34),r(53),r(55),r(68),r(35),r(72);var n=r(0),o=r(14),i=r(59),u=r(192),a=r(199),c=r(196),s=null,f=r(146);function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function y(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?p(Object(r),!0).forEach((function(e){S(t,e,r[e])})):Object.getOwnPropertyDescriptors

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	5.5692618816029995
Encrypted:	false
SSDEEP:	6:YbVA8igtLcSxm2SX1irNETcyiHmWKNcGh4roo3XTyHJK9V+I8cuEUZr5XI6COj/Q:YBA8i0I2DiTcX5iHub3DypK9MI8cuHpS
MD5:	BCAF580FCA3CE22C80D295B69CFA962C
SHA1:	FEA45843DA36E8AE52973F7C46A9F186813C76A2
SHA-256:	E9F6A5C27D7386B9B4AF678455A91D607B5369997166350FBD4669EA712B3763
SHA-512:	282D96B43F9A622B8D92B2487BF62AC76B2BD9DFAFAA1232339DD67EB76A54208760E090DEF12814596DF823D9378BAC48488C61AA8D1D1C60AD2A6615F5F495
Malicious:	false
Reputation:	low
URL:	https://idx.liadm.com/idex/did-003y/any?duid=4299a5cfa81b--01hvv7t88r5mk5z5grejsrt8f5&gdpr=0&did=did-003y&cd=.justjared.com&pu=https%3A%2F%2Fwww.justjared.com&_pubcid=a59c0898-b4d5-4e01-b773-f0480b65a0cc&IXWRAPPERLiveIntentIp=%7B%22t%22%3A1713532347944%2C%22d%22%3A%7B%22response%22%3A%22error%22%2C%22version%22%3A%221.1.1%22%2C%22data%22%3A%22response%20missing%20id%20and%2For%20keyID%22%7D%2C%22e%22%3A1713618747944%7D&resolve=uid2&resolve=bidswitch&resolve=medianet&resolve=sovrn&resolve=magnite&resolve=openx&resolve=pubmatic&resolve=index&resolve=nonId&resolve=connatix
Preview:	{"nonId":"5fe0TfrSxK7wTOnPJAGbUcu4D4Mv1UTEej83pG2QP1h7ZHwvzl7DmpJSd2g","bidswitch":"c6372ce9-3eb8-49df-af9f-ff39cbc1b1d7","openx":"086456d8-461b-4cf8-8bbc-9e6c195653b2","magnite":"LJ4QP6ME-H-E06V","sovrn":"INMmAPZHhbxr3RbBQkKJ3JJW","pubmatic":"838A0441-A2F9-4BD2-8BE4-1A3F10E7F91E","connatix":"dd94131a15a74a71816fc7ad5abb05c2","index":"YCa5QyLisf2nw37HgSqZrwAA&2630"}

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2024 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	63435
Entropy (8bit):	7.97568172150735
Encrypted:	false
SSDEEP:	1536:g6lxrf0JQLzb5MI0jjHWoMjNbiYu8OvwcSBGevsmg:Nxrf0JQnnoMjNbO4TkeQ
MD5:	2FDDA1FACB0769061BBEF090F1CBC76F
SHA1:	124F1CBE26563D0A13530057206BF566736FFA2D
SHA-256:	218BC8FB6462186D990E047FCCF1F36BB0AB60EEA536019A8FAF241582FD7EFB
SHA-512:	D087E0B9109BCCD7D6C2C817123E0FA211FCE701158B313A06CF53A25C58D9A36B4AFD9F88E190D4E719086FE4E0A6065105EDA98AC6ECD35FAD2A241E620869
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2024 Getty Images.......Ducky.......d.....shttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.7 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:6437A669FC4611EEA4B0F7E43DCBFA92" xmpMM:DocumentID="xmp.did:6437A66AFC4611EEA4B0F7E43DCBFA92"> <

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-medinet&gdpr=&gdpr_consent=&us_privacy=&userId=3565339623115671000V10
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4543)
Category:	downloaded
Size (bytes):	6188
Entropy (8bit):	5.742654184362639
Encrypted:	false
SSDEEP:	192:LXHaub/hnBVWifZChAHfTiEEXutKy4P6M:L3ai5BVWckhZEdtKRx
MD5:	6F993782FAF204CCBD4BE2781A24AC6E
SHA1:	DC0A4E8D54DF6FB4C6F86CC5BE860F1595A062E9
SHA-256:	6E570E614679BC3271F1DF0FB5325C59689CCD367B6EE53CCA0E6FD608A61577
SHA-512:	3791DADAF300BDE7F7AD533CA73955FDAC5FD1447FBBD422984A09437C9C275E9A231ED0617FE37AAF96875ECF1235E4123D25D16BB9A7720EAF52E699EA4D6A
Malicious:	false
Reputation:	low
URL:	https://widget.us5.us.criteo.com/dis/dis.aspx?pu=104452&cb=66226deda9076d75f64217de5863594d&r=https%3a%2f%2fwww.justjared.com%2f&crossorigin=false
Preview:	.<!DOCTYPE html>.<html lang="en"><head><title>Dising</title>.<script type="text/javascript">..rD = false;..function edcTimeout() {.rD = true; }..function cto_AI(u,n) { if (rD) {return;} var cto_ifr=document.getElementById('cto_sub_ifr_px');var cto_ifr_doc=null;if(typeof(cto_ifr)==='undefined'\|\|cto_ifr==null)cto_ifr_doc=document;else if(cto_ifr.contentDocument)cto_ifr_doc=cto_ifr.contentDocument;else if(cto_ifr.contentWindow)cto_ifr_doc=cto_ifr.contentWindow.document;else if(cto_ifr.document)cto_ifr_doc=cto_ifr.document;else cto_ifr_doc=document;if(cto_ifr_doc.createElement){var im=cto_ifr_doc.createElement('IMG');if(im){var d=document.getElementById('cto_pc');if(d!==null && d.appendChild){d.appendChild(im)}if(n){im.onload=n;im.onerror=n;im.onabort=n}im.src=u}} }..function cto_l(){if(typeof(cto_loaded)==='undefined')cto_loaded=1;else cto_loaded++;}..function cto_run() {function l_i1_1(){cto_AI('https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	4.960487814950511
Encrypted:	false
SSDEEP:	6:tI9mc4sl9D4PWAbyXgMMZhH/w0P/jhYXQRbWGZkUtVP/ZMU:t4L4P7SiZhHYC/lYgZkU1R
MD5:	D9F776BDC698E1BC9C6A1977218019CD
SHA1:	5763CFB5AC79ADF0FA7F03A82BAD04EEA2DCA243
SHA-256:	725E869434FEF8013208ED4C233D29744F9B363F867DCFB8F23E862880FA699A
SHA-512:	84264D0441EDF682C5F2567B06B5F61D22BB7059D590F38D5345A95935235956B62AEE6EA9BEE520E4DD35CFA7368D8B7C55073E9FB34CD29520C31A6431D05F
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/flash/icon/back_button2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 24 24" height="15" width="15">...<style>.. .native-arrow {.. fill: #848484;.. }.. </style>.. <path class="native-arrow" d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z" />..</svg>

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3972)
Category:	downloaded
Size (bytes):	3973
Entropy (8bit):	5.48649339653457
Encrypted:	false
SSDEEP:	96:op5jm89Ejmz9Rhjm4uRjmwCyjm99xAjmM9OjmyALQjm99GJk5jmz9Mjm99G3L:M5jmIEjmhvjmDRjmwzjmjSjm4Ojmy0QA
MD5:	C5A65C53C30DC462FE20AB4949C078EF
SHA1:	1E31AB93A32EC369313DD454D6167D2F8D0F6FBE
SHA-256:	DD7CF1005639687307E7AC0E62A199A96763107E1AD2BA121AD4EF825EB9BE1E
SHA-512:	2B58D3BE61EB88B1FD1074B58273BFB749E494E6301FB0D2793DC2B0F2C0C980D7BA47FCA006007669CD6F4D76BC5509C3513191DAE62BC5E14DC87BA59FE8B5
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	<html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN%26userId%3D%5BUID%5D" width="1px" height="1px" style="display: none" />','<img src="https://ads.yieldmo.com/pbsync?is=kueez&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirectUri=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-yieldmo%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN%26userId%3D%24UID" width="1px" height="1px" style="display: none" />','<img src="https://match.sharethrough.com/universal/v1?supply_id=SzhEXqCN&gdpr=0&gdpr_consent=&us_privacy=1YNN" width="1px" height="1px" style="display: none" />','<img src="https://ssp.disqus.com/redirectuser?partner=kueez-zeta&gdpr=0&us_privacy=1YNN&gdpr_consent=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2235)
Category:	downloaded
Size (bytes):	2324
Entropy (8bit):	5.672165282857357
Encrypted:	false
SSDEEP:	24:f1bvTS2tR4P/MK00PigT08FwnthFx0uTeUzkHe8yaynJkLI409R90yQ09x9L:tzTSA4PEKlrgFJjzkHTj46kLRP
MD5:	F81D4FFB84795690F8AEFDBF339885E8
SHA1:	E61BABDC2D57B7FE72D74A60A50FBE16B84DF5C1
SHA-256:	F3098ACAE85B8714DD164D3F6832CA1435DC76E7386845131BD2136BF173B203
SHA-512:	6779BDD091DEF68122A3FE19FD7157BBC592706992B9B9A6C088A83E3B797C1329F79866AE1CA8C5E9D4E2D71BA4D84D1998544C1AB230BDDFC19D6E41C436C3
Malicious:	false
Reputation:	low
URL:	https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyRhYzFjZjZiZC02N2MyLTQyMjktOTdmNC0xZjk4MmJkMTFiNDmqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=a662aef0-1110-44c8-b99d-2acba4a5db18","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://id.a-mx.com/u?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Damx_com%26uid%3D","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dopenx%26uid%3D%24%7BUID%7D",

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19261), with no line terminators
Category:	downloaded
Size (bytes):	19261
Entropy (8bit):	5.258945303143264
Encrypted:	false
SSDEEP:	384:64GPSjrMqRthMt2rWN1h2e9AIxV7KQtdS2EGo:M2dRDm17KQfEGo
MD5:	3BE93FD15D2F7DEE2FC0C8981C6FA5C6
SHA1:	8CD88C36FAD3E96641DBC4D781F5DDBE5123312F
SHA-256:	17106BF803D42BCF2F2BDF778ECE084D3F91C68E7EA41DAE7BFF61FEFA573DEE
SHA-512:	148291151C600F6D26A00A3DEA1919432FF94288D90C06F2C74990D7B8C418708973FBE2D06D875CBB687F00FB4373668AFBCFF5AB7911581B46A39A3906FE46
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var i=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),i[t]=e>>>((3&t)<<3)&255;return i}}},508:function(e,t,n){"use strict";var i=n(944),r=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|i)();if(

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	78571
Entropy (8bit):	7.969564329693208
Encrypted:	false
SSDEEP:	1536:hMXOghUme8vm1DVea4Q4E0YfXtOXzdfxI3vnT+JwWZG/AUA73WuP66oIuy9a0M:hQh4gmxV6EnvAXzdfxIfT69ZnZDP6k9a
MD5:	CF64D88058BE3F18DA46485D46FCD356
SHA1:	45D9AE1868BA8C8A39903A14E30403069ECCB0B3
SHA-256:	F783AE364FC571C03042887829C239FEDAB5B53FC760BD2595FA93165E206E5F
SHA-512:	006E28B08E6F7ECA514BD3A967D014F66285000F248F89B2A2748BBB58E2D346D8DE256C0B48E4003A922B02FC55E0B46D1C10A2856D1687B089859593316B21
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/10498768178339937961
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	5.123898001391016
Encrypted:	false
SSDEEP:	12:2JqxHpiBk6m4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2JDfm8uVCxwgxkHEZ1VZflok
MD5:	44C083D274E94744C75B89DD9D8DFA7E
SHA1:	A1022D284B23AB65E1FE3B97D49875F4F7B070AC
SHA-256:	804E003F3ECE080816F72DEC9C23F752ADAA86D57F036C1BB9E33879A149A37D
SHA-512:	F73F4565E5C7E8C543E0D11AA3B3BD389C88F1F025D0F55F33AA65323185959AD4E07B9AE7CBDCE82CEA49503B274AB9291319B957CFA02030F171E3BC5DACBB
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/78a541f2-9748-4ba5-9cda-85fd7a44b234
Preview:	(function () {try {const accountId = "78a541f2-9748-4ba5-9cda-85fd7a44b234";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1024
Entropy (8bit):	5.1014263364964165
Encrypted:	false
SSDEEP:	24:YGXTBlQvPjiK5lHMGkke+elvHM9+elfMar5UE72Mvh0la7:YXddMke+SvW+Sj5UE72Maa7
MD5:	1D0887E49ADD372A2DF09B410E70DB45
SHA1:	E9DD09D7F018875126F94B0DFF786EDB799BE076
SHA-256:	CDC8A5241D466696F254EA83125AED1834E51A9C4329FB581D6B8226D712EAD4
SHA-512:	F02B18ED63D752A840D6A1376F2FC1ED64DB7E0BB1F1AE950277B5929C16530E19747136593B940B27533566BFC33A38B44F997F1F3A64DA0AF8FECB5784DAC2
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/data-scripts/0120/9357/site/www.justjared.com.json?t=1
Preview:	{"uid":1209357,"dkey":"800653062d60440abbd955079c55a837","updated_at":1712574023,"version":"11.5.202","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0120/9357/site/SITENAME.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"d70561faed0bd91cc2ef66424a3fc832db4871b0bbc8603941c7916fce13098e","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/6735f9594d6bb8a4f1fe56c6b3e21cf5.js","stat

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2985), with no line terminators
Category:	downloaded
Size (bytes):	2985
Entropy (8bit):	5.160222565116412
Encrypted:	false
SSDEEP:	48:J46bB6AVGbg/NPlATxc0eZ+22CdmDKXJIDHX3efB+fPxMX5XixIMX5XixAihJxHq:B1PlAT4422NWIefB+xMpyWMpybfxZ/T4
MD5:	45CB969C0FAF127FD3E1EECE36BC6CAB
SHA1:	4581F49CF9691ECC2CA523431F8B37EB7D21FAAC
SHA-256:	E6E48BBC337A51CE8A8D042A287CFC3854C62CE1F71A3D7949AF40889DE782A0
SHA-512:	38576EC80045D00F18E0FD10D0418E02856677E7A63E031FFF53A7909DEB018824FBCE2221C8AF2FA091F4BC5FB950E5D49AC38DB7B95419C4A046221F63350F
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/elLoader.js
Preview:	(()=>{"use strict";function e(e,n,t,c){return new(t\|\|(t=Promise))((function(o,r){function i(e){try{l(c.next(e))}catch(e){r(e)}}function s(e){try{l(c.throw(e))}catch(e){r(e)}}function l(e){var n;e.done?o(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(i,s)}l((c=c.apply(e,n\|\|[])).next())}))}Object.create;Object.create;"function"==typeof SuppressedError&&SuppressedError;function n(e,n){(function({requestUrl:e="",requestType:n="POST",contentType:t="",timeout:c=3e4}){const o=new XMLHttpRequest;return o.open(n,e,!0),t.length>0&&o.setRequestHeader("Content-Type",t),o.timeout=c,o})(e).send(n)}const t={"connatix.com":"cnx","elements.video":"cnxel"};function c(e){const t=e;if(t.pageUrl=function(){let e;try{e=window.top.location.href}catch(n){e=window.location&&window.location.href}return e}(),void 0===t.callStack){const e=new Error(t.message);t.callStack=e.stack\|\|""}t.callStack=t.callStack.substring(0,500);t.ddsource="browser",t.service="player",t.ua=navigator.userAgent,n({

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2055
Entropy (8bit):	5.206635399622503
Encrypted:	false
SSDEEP:	48:1OLgAdlOLgA8FZKOLgA/OLgASyOLgAQcOLgAntomOLgAVNkoD:1OLgklOLgrFZKOLgUOLgnyOLgPcOLgmM
MD5:	DEBE3E478A5081419EB3443BBEDE80DE
SHA1:	E0F239CE1F0B642F5B60B1D5CB0041D005392548
SHA-256:	F3BD93BAF2D7EA7FE404497A78897E9300A56E1EF8E452CDD29C0156B2FF3AA5
SHA-512:	E90702ACD6731B395B6EE8BB6EDE41CAEEBEBD2079C2EDCC17671F60826458972FD163B2841F1C998C2AC1FB044DC97B2151DB5615D3B45904DE99A0C96D480C
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/googlefont/roboto/roboto-400.css
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://static.criteo.net/design/googlefont/roboto/roboto-400-cyrillic-ext.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://static.criteo.net/design/googlefont/roboto/roboto-400-cyrillic.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://static.criteo.net/design/googlefont/roboto/roboto-400-greek-ext.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://static.criteo.net/design/googlefont/roboto/roboto-400-greek.woff2) format('wof

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	75
Entropy (8bit):	4.478149024547245
Encrypted:	false
SSDEEP:	3:/VIfH3YyewTt/HjDsh2MhJPBAJROHhe:deFt/HjDsh2Mh7HI
MD5:	0D53578331DFF000DCE580ACD4D4E09E
SHA1:	E7B00A9BED137C27929C459303CD79C252744BDC
SHA-256:	2D8C677A5883430DBDE41086473C186AA9A1FE269987F1A68505527F90296FA6
SHA-512:	BAA0FA6EC0B67EBE312E8D0522A7545ED1FEB346699ED67696544B2962C87D087F42C4711AA3F57432420D618EAC00A54D674C656DCD55AF8199D1BF852D0A98
Malicious:	false
Reputation:	low
URL:	https://ua.p7cloud.net/asp?aspan=YXJjc3Bhbi11c2VyOmFyY3NwYW4tZHJvd3NzYXA
Preview:	aspan.parsedUA({"browser":"Chrome","os":"Windows","deviceType":"desktop"});

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=130&external_user_id=AAEPf07MRNwAABWcWeK7WQ&expiration=1714741977&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.206386490523196
Encrypted:	false
SSDEEP:	3:U3yGqItEsRGD0twQyGnyaDgeDQggp6ngQjMHCwgcCSDm+H91gpRf:U3yGqIt7DtwjGnyac8gUMilSDm4vgpl
MD5:	12EEE0C4454508F93DECA7600FBFE4E3
SHA1:	685DF3DD42D0685F991033E4685287089DB49FEC
SHA-256:	B5B70390F68AC96BEF61BFA0740697E222FD924ED6D89173B3ABF3CC5E5C0D4D
SHA-512:	6FB5FEC3D79E73B018CA05C52D35ADED5C3FE98A937AFA5B672DD47C6619ED826571D5DA6B572C5F95B65FAEC6C838855105932CAB1E8D6F7783953B21121020
Malicious:	false
Reputation:	low
URL:	https://rules.quantcount.com/rules-p-2bXhGE9g7fCno.js
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2022, Quantcast Corp../.'use strict';(function(a,b,c){__qc("rules",[a])})("p-2bXhGE9g7fCno",window,document);

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	51739
Entropy (8bit):	7.976599339111269
Encrypted:	false
SSDEEP:	1536:RqKqyfyU0Me3kj4i9EOPc3Y7Ft54SjOcrhGwo76:Qa30Me3kj4i9FPgORLOcrhjB
MD5:	FC433AB7E288AB8DAAAE4A0772E74BB7
SHA1:	1FF75F2432ED120B78A06A8F853C78A0DC706B0D
SHA-256:	A70E7B8B3DD457D2C5CC0AF286D513F0098E9019BC5B7AD5D1A9145A7D9FD0A3
SHA-512:	017DBD69CBFC350D3870971ADD31A8399149F89AF629C6BB7CE1AD48BF715EC589EB515748D7970A168E4720CF5893D55E69A2EB92E2C2ADAB9521F48E64EAED
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/pll-summer-school-cast.jpg
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:20AC4321FDEC11EEB19CDA5B7C547A08" xmpMM:DocumentID="xmp.did:20AC4322FDEC11EEB19CDA5B7C547A08"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20AC431FFDEC11EEB19CDA5B7C547A08" stRef:documentID="xmp.did:20AC4320FDEC11EEB19CDA5B7C547A08"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	90894
Entropy (8bit):	7.973971294474728
Encrypted:	false
SSDEEP:	1536:J/4rdLqEIjwtHKVHccUo332407sxWPhY7/3pWdQphv:J+eEI0te8cUD404WPgqQpt
MD5:	CA37731E84A4EC169F64F6EFE475D874
SHA1:	D6A6348932952D987184D14FD1B0FFEAD32F1A8B
SHA-256:	3B28842D809256EA305A37024CF472FF8B9004256FDFE32B5738490276D52F77
SHA-512:	E05952A6F04274D96D344CA8AA894AC40E65372CABF1930A76052DE6490BD6C1DA014B769B30ED16D07E2F009FF71069B8EE4F82AFF897FA9329C8000215A71F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0D6D3385FBF311EE9CB99A6D4C90CA73" xmpMM:DocumentID="xmp.did:0D6D3386FBF311EE9CB99A6D4C90CA73"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D6D3383FBF311EE9CB99A6D4C90CA73" stRef:documentID="xmp.did:0D6D3384FBF311EE9CB99A6D4C90CA73"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ........................................

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://c.4dex.io/imp.gif?adg_com=0.2&adu_code=div-insticator-ad-3&auction_id=6f829b7a-f351-44f4-8a3b-0767209573cc&bid_id=10&bid_ts=1713532393&bidder=rubicon&breq_id=b4ba23e7-ac19-4e16-a5a7-68357ac3c5dc&browser=chrome&buid=1&buids=131073&cpm=0.0528&crea_id=2149%3A10967427&ctry=USA&curr=USD&discrp_adjst=0&domn=justjared.com&dvc=2&environment=desktop&h=250&it=adg-pb-clt&ivt_adjst=0&lzy=0&mt=ban&net_cpm=0.04224&org_id=1376&os=windows&partid=2024041913&plcmt=d-std-3&pn=2&pv_id=ff8d52f5-f701-474b-8f31-b889b869ca80&rpmadc_smpl=1&rule_id=1904&seat_id=8&seattyp=shared&site=justjared-com&spr_id=163&sspv=3.0.0-gcp-las&tiv=9&url=https%3A%2F%2Fwww.justjared.com%2F&ve=organic&vr=0&w=300
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/triplelift/3059573620546902553906?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/15597?id=6qnymkyv6p1rqrpd3isnsmcle
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFY2T1g3TFMtMVUtRzFUQg==&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	28205
Entropy (8bit):	7.958203096242771
Encrypted:	false
SSDEEP:	768:lysFYl8sE/XAAQ4oCbIiPGNopMRqdxYCUkm+I/Ypmo:lyd7EiLCciPyWMAdxxpBI/YV
MD5:	FFAF321A47CE1B4EEDFBEC57B1259F1A
SHA1:	9269E1FCB549F13C6B08879E6C6743A7A60FA1F1
SHA-256:	816B0A1C6FD732861604AF66E9F4999AD458E9AF487B73E004EB0A0176797E13
SHA-512:	E661D035CBF35DBD5907D53601CB30E1401109315BFBC1CE29649BBE982AF3A3145B232272C2B9A8F039A771D6A8B9949DE3B043ADBED4CB32C061F5F3A0971D
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/kate-beckinsale-released-from-hospital.jpg
Preview:	.....2Exif..II*.......................Getty Images........Ducky.......F.....{http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:7EEDFAEEFDEB11EE868EF58B37195AB7" xmpMM:DocumentID="xmp.did:7EEDFAEFFDEB11EE868EF58B37195AB7"> <dc:r

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4418), with no line terminators
Category:	downloaded
Size (bytes):	4418
Entropy (8bit):	5.424347070530849
Encrypted:	false
SSDEEP:	48:kClk8VULcX2Moy9lKJdG8+oLBiC6IzNLJ/OnSYvR:zlXHhoyu6oFRJmSYvR
MD5:	1A9CDC33F9A226E7467CEC8C35B4D2EF
SHA1:	E3767D8C10A5C1C996439CCA007B17BD0611FA4E
SHA-256:	D97CDC14EBC95B8CB60773A21C401A9249C4BFA850DBF17EF0D5133A66DBD207
SHA-512:	F523F17A1B9DEE13A7E4D5E1C8CC61E9A68ED9F53290206C18E7AE73588DCEA73EAB3D12CE78C5B4006DDEE9F66BF96F094690CCFA1AF680ACDB38B8F5A0DBD7
Malicious:	false
Reputation:	low
URL:	https://cs-tam.minutemedia-prebid.com/sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dminutemedia.com%26id%3D%7BpartnerId%7D&gdpr=0
Preview:	<html><head><title></title></head><body><iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=minute_media&endpoint=us-east" style="display:none;"></iframe><img src="https://u.openx.net/w/1.0/cm?id=29975467-6f1b-4e06-b545-920b22ea49b2&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21477%26rid%3DolBHBm7-Cp_mm%26id%3D" style="display:none;"/><img src="https://sync.1rx.io/usersync2/rmpssp?sub=sportority" style="display:none;"/><img src="https://csync.loopme.me/?pubid=11555&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&redirect=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21511%26id%3D%7Bdevice_id%7D" style="display:none;"/><img src="https://rtb.mfadsrvr.com/sync?ssp=minutemedia" style="display:none;"/><img src="https://bh.contextweb.com/bh/rtset?pid=562760&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21494%26id%3D%25%25VGUID%25%25" style="display:none;"/><img src="htt

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 247x367, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7490
Entropy (8bit):	7.976378866715
Encrypted:	false
SSDEEP:	192:4PiI7dA+4xGKKZVC9TpR5ps+wzbmjgUIqHuvKVL16Ad:4t7dB4xGRQ8+cSjRFJVL1rd
MD5:	6F07C695123462B0DE65DCEA80AD6D1A
SHA1:	E696276CD3197CB345323FB75496426967FAD6F6
SHA-256:	40C7EE534D34414613D8E2D0EE354AE9CD12F88223583DC361DDC978720BA71A
SHA-512:	68A454BBA938AE5D1C057F35C767989C3D350096EA946169C66EBEEA3A790EAD3784658354F184AAE1ABA4CBC392CC9DEB3B8B2F1143521DD547AB53FBDD88A7
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400014599172_NAVYBLUE_486x684.jpg&v=3&w=400&rid=6&s=lomilqKbjYPFw1FRb5J45-z4&b=400
Preview:	RIFF:...WEBPVP8 ....0......o.>m2.G.#"!'.p...in.h.]P.....9.s...?......V%.....r?.x......x..%...n./.'./`..?.?..E..............pM?..,7tGN..{.f......i.G.$A..[...s.Oa.......4.g.R...x.o.b...d.........l...?.b.1...n.N_D...Z#e.J.i.....c...[]..Uv..G..S.N._.......+...[.....<.`.[..QU.M.v.&..0..........lTq..Y...7.Y..+...;.4.#.4&.9......g.][....<.\......(.....$....P..u.N?......9t.D\|.EzQ?.3..../OlV!8....4.4..3.A...l..sr9)u.....&.P.....s.:.;...2....\.0.......K..N..ari......<z...~L.\.t..oB`..`.....D.....j.....G..}.s...T}=.N...>v.+2...6....g.!h.....c.y.s(i:4.Gc.y4+x.7D.1....a.....s.W.#....\......pB}.n.f...0.d}.......C.....D...qUF.B9?=...u.<..74..%..JY..G.\|'_..k..u..a...G.s..UP...[...(...3Tc......Q.[.....a..X..pn..1..O..j..)G...c..u.R.}"..1/..Z.A.M.K....{;.....r....<... %.....:fX...,4W.yF..p.8..h.]...HdT..uz.?.c..t.n.j....<.....5\dg[...S.%. Dr.fFu_....D.x.%@.a~.X.GE.&..."v2U8....(.....$......+^...T........F.&q...g..........74..m..h.......e...K"0....i.j.]...R...

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (601)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.340199629221286
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GFk3abvbUf3cY5Y2PqVCAREnxTht1DtfCYKO+kFl+ffVfCYKbEe3:WDlf8vF/bT8POCVDnKO+kFl4nKbEeEmh
MD5:	0490D334806F4437DEC6FB2DAAE31460
SHA1:	2189B0E249E4C488BFCEEF616DA208834A9A3AE9
SHA-256:	AB75326112EC68566032F3FD493EA71C2ABB2212B450ECEEE2BBF973CC2577F3
SHA-512:	8DCBBA8A620BF025BC352C2C49BFF96667D3C4BF26E776E185F3C85ABCAEC32C042083E60D1598C85D7DEE615AE5F8282093AE88ACABF39ADBA588996F5CB6AE
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=bUAiigz35TDj7&cb=2&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-4%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_4%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_4%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JHhOvT4cZGB4jZ-8WasypLYAAAGO9n3UlgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCjjIGf","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-4","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"2","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_pm-db5_ym_ppt_cnv"})

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (41544), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	121287
Entropy (8bit):	5.381605472107988
Encrypted:	false
SSDEEP:	1536:JY7fhD3WhvmdkRLYkjA6jQPbl1XvIELUxVhSKJUWjLzHgTulsm5GRj94VrEwE646:VhvxYlPX3Ux93MulVQbTSvitElpzh5
MD5:	7898B94621219A60EFA51F92C08C6E69
SHA1:	3857704310EB3D0DD2559E0C117A2C540211A15F
SHA-256:	D7E68E5AEEE71A98FD95D40295677ED0544358C8F718DFA9DD2808D58B929492
SHA-512:	41189F4782BA8484026F6F9599C627C577372C863C8742B7718A4054D32E62A4CB13F794C4EFE736D4874AA3BC104787635E4B093FB04D872074EBD43989E0B2
Malicious:	false
Reputation:	low
URL:	https://ads.us.criteo.com/delivery/r/afr.php?u=%7CADCH582yXjkG%2BEk57elDrd2S4kM5ajCj2onUBMRufy0%3D%7C&c1=m7oIQCLYgBviNiUzyYOc2kjMnk6vmALkFqVtTGkXC3yyQMccv7J0JEqO9lg8q9Dulj9qmJ30sGFDCE3nLTh5pPYWUDYr2yDsb7Arv7h6f0SuYtsA_-vEoVgPDRHEHGt7ZkzRTckYmjAk7AvMx0WKNodjUyccERqETWYHTwmD0sYMWX0WZQVzWGvBvLTqdsqSi1S2OThldma0FqeVZ_nmp3lXubOrNKCpTRWS95Bt03VDUVbvDs64dEvJT0y-7giAYYY6vhMseqEyFujFFUvJHXYo1R4wZoXIXo8TSVG-0hIQKof4YhhfHSEJp7-0o2O99WWnTUOv_08icfaN7bhLWstoYvIEdEKY-_1faLeZK68yZ_f_DOsJT98GjkCrmr-h74rA4eCnfhtw2OAe122MLuxD1cVu792JU4LApt4eHp_U_fOqc7qrFnDvOCqfm2rfWhilROoMsESu_ONKULozAv-Vu_elr79G0fi7LirubmTh4fAqy9bNvXN3wS2a8pzkK09hEVkvDTOe7S_lgkKnR8r2loZf_LUwNfWI4oyanBdCDmKatVJAmkuS8wPOfwUMoSHP73pDJDLWn3fmwpsr_YYYMzaSytTmQ7zWjrr-8kOFormf2TVubF8Llrt4SJ30ofaOXfteRlq8_ReC6IB1aA
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Advertisement</title>.<meta charset="utf-8">.<meta name="format-detection" content="telephone=no">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<meta name="viewport" content="width=device-width, initial-scale=1" />.<style type="text/css">body{text-size-adjust:none}</style>.</head>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>. BannerId 11508842, ZoneId 1707442, AdId 1811900 -->.<div id="main" style="position:relative; padding:0; width:300px ; height:250px ; background-color:#ddd; cursor:pointer; overflow:hidden; display:inline-block;"> <style> .privacy_element, .privacy_element a, .privacy_element img { text-decoration:none; margin:0; padding:0; border:none; } #privacy_icon, #privacy_icon a, #privacy_icon img { cursor:pointer; } #privacy_icon { position:absolute; z-index:100; top:0px;bottom:auto;vertical-align:top;margin-top:1px;

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvTgH59AdgRTWyS7YH1SwlRneiivrYg765c_gIckcn3OZ5IydjZZdSYD3uTDxFoqmAHj4fgQuzucakgtJ9Xpf3fkHB2iJWT685Edd7QLdq5Pvheau1PhRP5W3wrn-t2ysw7C3sIaSNqTcnDeTi7WzG9Ze9hRknXY8k&sig=Cg0ArKJSzG1uun3ratlJEAE&id=lidartos&mcvt=31762&p=578,820,832,1120&mtos=0,31762,31762,31762,31762&tos=0,31762,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0.93&vu=1&app=0&itpl=19&adk=1494241348&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=946519401&rst=1713532394137&rpt=4438&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=us-west
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	109598
Entropy (8bit):	7.98249953518859
Encrypted:	false
SSDEEP:	3072:1thMeyDItuJQFDG87PSzTUP04j4KdXQY49dX2OZAo:X0ItuJOKkiTUPb54n9Zh
MD5:	40C5C38027495361B1D954D3C1354A2E
SHA1:	153878364F9455864E0DFAEFD17C5965AB16B6BF
SHA-256:	A5222157E28C2BEAFCD2479B82D8B4482ED5A00CD975E37A7BE81314409F2389
SHA-512:	7180D6FE0D6BF5EB680BCA554E4E6F63A8EFBA673BB450F48DF7C0311D1EC189F65A57F5BC244C1F3216FB54059C9EA901E2D3F9ECC159D090EFDC06C609C7A5
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/sia-paris-hilton-team-up-for-new-song-fame-wont-love-you.jpg
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E1DA84BFFE1411EEA706BD19FE895D4B" xmpMM:DocumentID="xmp.did:E1DA84C0FE1411EEA706BD19FE895D4B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E1DA84BDFE1411EEA706BD19FE895D4B" stRef:documentID="xmp.did:E1DA84BEFE1411EEA706BD19FE895D4B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8085377179
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://p.skimresources.com/px.gif?ch=1&rn=8.172352690297082
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.43085190156809
Encrypted:	false
SSDEEP:	3:OC0hNejBWk9JyiA:OC0hNuB7A
MD5:	9ACA9D15ADAFBE7AAECCAB50F115CD8B
SHA1:	0FAF57FCB79A2B2D7F4161FFAFB7D9679D3F5DF0
SHA-256:	189B8ED64093B12937354B2EF71CCF1DF59690D90432241A10FE1CB25000ACBA
SHA-512:	A561D48D340192C05E37C089CEE1BB3FE00553FCC055C478C86A7C43C41A6C2CF740E07F678D09025D8B72E2D7E26D9F4E17A20BA2F0B24D559928DAAB61AD94
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
Preview:	TRC.getRTUS({"status":"Unknown","userid":""});

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	55
Entropy (8bit):	3.68118198617326
Encrypted:	false
SSDEEP:	3:qVZxgROMCXbZ6U0Hacz:qzxUpCX96v3z
MD5:	656D408E84FEEBB88E950B10EFB49503
SHA1:	3A6E047D24C8ACE7D3F04AB66E4D914E31B0ACE9
SHA-256:	74B03851B17506833B0506EB8292BD9842E5B32AAACCB1B5553FA967B65DB792
SHA-512:	6A63FA64E872977EC921B73B27CD028471F6B753D6F7DF3783ECA4FE34188EBF62E2FE3243BA4A30BF629AC281F65BD161E110174FA8B0D4023EFACCF4F3C450
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/jp?r=https%3A%2F%2Fmatch.justpremium.com%2Fmatch%2Fgg%3Fjp_uid%3Dr-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319%26ex_uid%3D%5BUID%5D&gdpr=1&gdpr_consent=&us_privacy=1YNN&limit=16
Preview:	<html><head><title></title></head><body>.</body></html>

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=158111&userIdMacro=(PM_UID)&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D76%26type%3Diframe%26id%3D%28PM_UID%29%26auxuid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	51739
Entropy (8bit):	7.976599339111269
Encrypted:	false
SSDEEP:	1536:RqKqyfyU0Me3kj4i9EOPc3Y7Ft54SjOcrhGwo76:Qa30Me3kj4i9FPgORLOcrhjB
MD5:	FC433AB7E288AB8DAAAE4A0772E74BB7
SHA1:	1FF75F2432ED120B78A06A8F853C78A0DC706B0D
SHA-256:	A70E7B8B3DD457D2C5CC0AF286D513F0098E9019BC5B7AD5D1A9145A7D9FD0A3
SHA-512:	017DBD69CBFC350D3870971ADD31A8399149F89AF629C6BB7CE1AD48BF715EC589EB515748D7970A168E4720CF5893D55E69A2EB92E2C2ADAB9521F48E64EAED
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:20AC4321FDEC11EEB19CDA5B7C547A08" xmpMM:DocumentID="xmp.did:20AC4322FDEC11EEB19CDA5B7C547A08"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:20AC431FFDEC11EEB19CDA5B7C547A08" stRef:documentID="xmp.did:20AC4320FDEC11EEB19CDA5B7C547A08"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	175826
Entropy (8bit):	5.454705299096547
Encrypted:	false
SSDEEP:	3072:Oyb6j9U4JiSw3WWkx2jWuiCg8ecmKTDh9DRtv66:OyWji4JiSqWWkx2jWGecmEN9Ntr
MD5:	6050DDCCF765871F12BD6A51220F3F85
SHA1:	A0890603CEAFE5865F1762AE8910E43191E60570
SHA-256:	77E9ACA8F0398B50783E060DA8FEAAE38F86894D1F926F455E0C31B1BBED0EF3
SHA-512:	062FF942894985432E76E760A87985CFFE6BF5A39A7D843599D41B99C29B73782273F6463DBB3C40D483E7C5782E84F6B2ED1F381DEE43124D425CD1F41B7B85
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/player.lit.ui.js
Preview:	"use strict";(self.cnx_webpack_global_elements=self.cnx_webpack_global_elements\|\|[]).push([["litUI"],{2147:(t,i,s)=>{s.d(i,{r:()=>e});const e=(0,s(2471).A)({PlayButton:0,BigPlayButton:1,VolumeButton:2,VolumeProgress:3,VolumeControls:4,ExpandButton:5,SettingsButton:6,CaptionButton:7,CaptionComponent:8,UpNextButton:9,UpNextBox:10,PreviousButton:11,LogoComponent:12,LogoOutstream:13,MoreButton:14,ElapsedTimeLabel:15,TotalDurationLabel:16,RemainingDurationLabel:17,ProgressBar:18,QualityMenu:19,QueStateOverlay:20,Loader:21,ContextMenu:22,ElementsSettingsMenu:23,CloseButton:24,PinnedCloseButton:25,SkipAdButton:26,AdLoadingScreen:27,NextProgressButton:28,StayProgressButton:29,CtaButton:30,PlayspaceProgressBar:31,PlayspaceSettingsMenu:32,ClickToPlayButton:33,OverlayComponent:34,SlideTitle:35,TopTitle:36,TopLogo:37,TopSlideTitle:38,TopStoryTitle:39,TextLabel:40,LivePoster:41,LiveIcon:42,ElementsCaptionMenu:43,PinnedTitle:44,FloatingCloseButton:45})},564:(t,i,s)=>{const e=globalThis,n=e.ShadowRoo

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=7243068170
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156592&predirect=https%3A%2F%2Fcapi.connatix.com%2Fcore%2Fus%3FDemandPartner%3D2%26UserId%3D1cea9752ba4141efa5c1f9f338ffb4de%26DemandPartnerName%3DPubmatic%26tier%3D1%26DemandPartnerUserId%3D&gdpr=0
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:10,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532386684"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/images/pixel.gif?ch=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4312)
Category:	downloaded
Size (bytes):	4313
Entropy (8bit):	5.7889948887408424
Encrypted:	false
SSDEEP:	96:L4A4Q1Q1KItP+XPE9iijHwgLdCZbs5CT2wM0:UA4Q64ItoPUjPsZI5ChM0
MD5:	7CDD158085BA93932769B37B41ACA667
SHA1:	6D975A030E04D544BD91E8B9DA7800336E532EB9
SHA-256:	AAE9C69E350C53A164F39E3DD9A338A11728AD5FECBC1EA150BFC1058D2D2C79
SHA-512:	630404843A6B9A2801D691E56432E4BF1A9499ABA13E20C7C1AFB6A155F913D147A42DF64F1DBBAC8771E2544575C5DCAE5FBD4ED3965703327C90552F1B39A5
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/infolinks_main.js
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('(z(){6(5.24){y}5.24=1d;7 K=9.1I("3o");7 U=L("2A");6(U&&U===39&&13.1h()>=0.4){y}6(5.18.31=="2e-1V-1R.1c"){g();y}7 W=5;1b{6(5.10&&5.10.18&&5.10.9&&5.10.9.1f&&5.1K!==5.10){W=5.10}}1e(n){1y.1A("1j 1G 2g 17 1R 2V 2h 2I 1G 2O 2t.")}7 f=2s.2k.2l(),X=z(p){11(7 q=0,e=p.x;q<e;q++){6(f.1p(p[q])!=-1){y 1d}}y 1Y},R=X(["2C","2y","2n","2o","2p 3y","2q 2r","2u"])?"2x":"",Y="23"+R+".16",C=5["2v"];7 o=L("2w");6(o&&R){y}7 B=L("2f");6(B&&!R){y}z a(){1b{y 5.1K!==5.10}1e(i){y 1d}}z L(e){y 5[C+"2D"+e]\|\|5["1F"+e]\|\|5["2E"+e]\|\|(5["w"]&&5["w"][e])\|\|1v}z P(s){7 r=s.1P(/[&]/);11(7 q=0;q<r.x;q++){7 e=r[q].1P("=");6(!e\|\|e.x!=2){2H}7 p=1D(e[0]);7 t=1D(e[1]);5["1F"+p]=t}}z m(){6(5.w&&5.w.1M&&a(

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	50051
Entropy (8bit):	7.98170014199728
Encrypted:	false
SSDEEP:	1536:B7aYT0UAuWx6QRhWDXkZw6C5LCVIf6+XIoN:xtT5AuWMQ3uswhpCKR
MD5:	1053F2BDB16FFB70D5CBB74AE53388B4
SHA1:	267B3A3CCC5767CA686659E7FB84F36F6FAC76B2
SHA-256:	C8F45270C96213376F196DAD1AE8BC5525266348F7896187A298B91B16D166FB
SHA-512:	AEC4BB38E25DFCD8AE76D040B6152DCD99A63083446705551D41B8EDCB042FD29F9FCEBCB623845231F83514F16372CE7E937A71D16CDF527E6094D0C8FCDF3B
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/every-lyric-about-matty-healy.jpg
Preview:	......Exif..II*.................Ducky.......F.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:8A88044AFE0D11EEBF26F6A27ADCF907" xmpMM:DocumentID="xmp.did:8A88044BFE0D11EEBF26F6A27ADCF907"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8A880448FE0D11EEBF26F6A27ADCF907" stRef:documentID="xmp.did:8A880449FE0D11EEBF26F6A27ADCF907"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-east.amazon-adsystem.com/x/px/JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ/v/%7B%22v%22%3A%7B%22p%22%3A100%2C%22t%22%3A1.011%2C%22def%22%3A%22iab%22%7D%2C%22vs%22%3A%22visible%22%2C%22ah%22%3A90%2C%22aw%22%3A728%2C%22ttv%22%3A32.46%2C%22ts%22%3A1713532431568%2C%22bn%22%3Afalse%2C%22pixelId%22%3A%22kk5z5rtpai%22%2C%22ver%22%3A%22r-1.32%22%7D?cb=9121076
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	250588
Entropy (8bit):	5.940829994003443
Encrypted:	false
SSDEEP:	1536:aR3zoVhC5x4cYBXIuXz2KafFseTiAE6VDVxMXFCqXwuR1R37oV0mhmC5xa6m2mhK:4+cY0DSaROHxy/HVruJyCR+
MD5:	5BEED6F0B41AB136FCD16D49B168263A
SHA1:	03BCEF090055C7ABB06862912D6DE4407253F869
SHA-256:	8F4D1608DF3443F4294F8C14FBC37DAE8FCC4282085C345B8AB37FFF28A88FAD
SHA-512:	09BC1081A2F8C5BE80C2B1B307D056F78347FDDD59C28C72190E679B0050186531E4C1CBA3734113304D9115F8AF56E6C29C845CDA5592B293A9CBBB2410DEEE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1961765009388584&correlator=3333872983477502&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Crail%2Chome%2C2%2C1%2C3%2Ctop&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F8%2F4&prev_iu_szs=320x50%7C300x600%7C300x250%7C160x600%2C320x50%7C300x250%2C320x50%7C160x600%7C300x250%7C300x600%2C728x90&fluid=height%2Cheight%2Cheight%2C0&ifi=3&didk=4152496204~1812581917~2418314740~3894687449&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354753&lmt=1713532038&adxs=812%2C812%2C812%2C268&adys=1511%2C564%2C3374%2C365&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3%7C0%7C4%7C0&ucis=3%7C4%7C5%7C6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x800%7C300x403%7C300x600%7C1000x184&msz=300x800%7C300x250%7C300x600%7C728x90&fws=4%2C4%2C4%2C0&ohw=300%2C300%2C300%2C0&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_Mid_Right_300xFlex_InnerRail%26pos%3Dhome_Mid_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_Right_300x250_InnerRail%26pos%3Dhome_Top_Right_300x250_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%26hb_format_rubicon%3Dbanner%26hb_size_rubicon%3D300x250%26hb_pb_rubicon%3D0.06%26hb_adid_rubicon%3D7038d15946e9bf6%26hb_bidder_rubicon%3Drubicon%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.06%26hb_adid%3D7038d15946e9bf6%26hb_bidder%3Drubicon%7CdivID%3Dhome_Bot_Right_300xFlex_InnerRail%26pos%3Dhome_Bot_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_728x90%26pos%3Dhome_Top_728x90%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=2076731111%2C4110530880%2C3132801048%2C629776701&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/21854935662/justjared/desktop/rail/home/2":["html",1,null,null,1,250,300,0,0,null,null,null,1,null,[138461749291],[6481416626],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR","CK7mpbutzoUDFXb0KAUdUd8IPg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure L

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	5.5692618816029995
Encrypted:	false
SSDEEP:	6:YbVA8igtLcSxm2SX1irNETcyiHmWKNcGh4roo3XTyHJK9V+I8cuEUZr5XI6COj/Q:YBA8i0I2DiTcX5iHub3DypK9MI8cuHpS
MD5:	BCAF580FCA3CE22C80D295B69CFA962C
SHA1:	FEA45843DA36E8AE52973F7C46A9F186813C76A2
SHA-256:	E9F6A5C27D7386B9B4AF678455A91D607B5369997166350FBD4669EA712B3763
SHA-512:	282D96B43F9A622B8D92B2487BF62AC76B2BD9DFAFAA1232339DD67EB76A54208760E090DEF12814596DF823D9378BAC48488C61AA8D1D1C60AD2A6615F5F495
Malicious:	false
Reputation:	low
URL:	https://idx.liadm.com/idex/did-004d/any?duid=4299a5cfa81b--01hvv7t88r5mk5z5grejsrt8f5&us_privacy=1YNN&gdpr=0&did=did-004d&cd=.justjared.com&pu=https%3A%2F%2Fwww.justjared.com&_pubcid=a59c0898-b4d5-4e01-b773-f0480b65a0cc&IXWRAPPERLiveIntentIp=%7B%22t%22%3A1713532347944%2C%22d%22%3A%7B%22response%22%3A%22error%22%2C%22version%22%3A%221.1.1%22%2C%22data%22%3A%22response%20missing%20id%20and%2For%20keyID%22%7D%2C%22e%22%3A1713618747944%7D&resolve=nonId&resolve=uid2&resolve=index&resolve=openx&resolve=pubmatic&resolve=magnite&resolve=bidswitch&resolve=medianet&resolve=sovrn&resolve=connatix&resolve=thetradedesk
Preview:	{"nonId":"5fe0TfrSxK7wTOnPJAGbUcu4D4Mv1UTEej83pG2QP1h7ZHwvzl7DmpJSd2g","bidswitch":"c6372ce9-3eb8-49df-af9f-ff39cbc1b1d7","openx":"086456d8-461b-4cf8-8bbc-9e6c195653b2","magnite":"LJ4QP6ME-H-E06V","sovrn":"INMmAPZHhbxr3RbBQkKJ3JJW","pubmatic":"838A0441-A2F9-4BD2-8BE4-1A3F10E7F91E","connatix":"dd94131a15a74a71816fc7ad5abb05c2","index":"YCa5QyLisf2nw37HgSqZrwAA&2630"}

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5109
Entropy (8bit):	4.592684961096106
Encrypted:	false
SSDEEP:	96:JvfFGGczl+P/882qJQSqmTW7Kszq+j0Z4mTf6R5zi6tInVpI:5FPcp+P/8semT6J2+jKy5+6tt
MD5:	133427D307E1E60867B8E70E3BE1F35B
SHA1:	8ED4DD66B1F482E56FFD0194D30D18821E64D334
SHA-256:	9CF91CD0186C3F8F70F451A1652BA24528C64A0F7BF9441A8B22BC33799C8F05
SHA-512:	F500930D38166AE9070E2BBA6D297931DECAC5523DA5973FB07CE241452B4C817526B9CF9B4CD0054510B96B283B9AF20B183968892588A3BDFDC58DFD62E3FB
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyOne_line3.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M192.62,52.82c0-1.67,1.33-2.47,2.88-2.7l1.85-0.29c0.67-0.11,0.88-0.34,0.88-0.86c0-0.95-0.74-1.51-1.75-1.51...c-1.33,0-2.02,0.7-2.05,1.78h-1.55c0.05-1.58,1.3-3.01,3.48-3.01c2.16,0,3.38,1.28,3.38,3.28v5.69h-1.48v-0.43v-0.74...c-0.43,0.9-1.37,1.44-2.67,1.44C193.95,55.47,192.62,54.46,192.62,52.82z M195.82,54.26c1.39,0,2.41-0.94,2.41-2.34v-1.28...c-0.11,0.16-0.43,0.29-0.95,0.38l-1.26,0.23c-1.03,0.2-1.8,0.65-1.8,1.57C194.22,53.72,194.94,54.26,195.82,54.26z"/>..<path class="st0" d="M201.36,42.6h1.55v12.6h-1.55V42.6z"/>..<path class="st0" d="M203.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	53
Entropy (8bit):	4.1638854924956314
Encrypted:	false
SSDEEP:	3:YIzHLUQBh2zEI:YIzLURz1
MD5:	16E56788109CADD674916DB9E5E74E76
SHA1:	CFF538D89644650B142684E6F59119E9AC38F1AB
SHA-256:	E4861B24E7CFF27CA605344E2AD5A5205633CB699A4BF359D8B1BE1B93135C98
SHA-512:	FED60D4C20F14379E46D3FC5156F56893812DE0DBF896F45AB4C8FE1D3BF5FDF7547CB1CDD5657C79AD0DF805C1E2A18E36CF723EB3A1631C518E57F1644FBF0
Malicious:	false
Reputation:	low
URL:	https://cs.ingage.tech/v1/sync/amx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid=&gdpr=1
Preview:	{"message":"Bad Request","statusCode":0,"error":null}

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.583782761526579
Encrypted:	false
SSDEEP:	48:t+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwKdDuExjGx:t+5AQHAray48f5JMYHIq0Du9
MD5:	AC8ED21FBAE6C0E0123B2636B57502C5
SHA1:	5059708CDFFF736BC13B0438276A433CF14A4E9C
SHA-256:	3BE7127BFF1DE22A9DC744FDCF4ABBE41DA26C1A5452E0D189D6837F5C7FE3F2
SHA-512:	83E771CEEB964A83F24EC7D5D7ADEBE4A91DEFA75696A1110EBE52351CC26AF4EA6F79EDE4806298933DB6E920A42131966FB8BF56F588B301DD29DA779C38DE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1713531913,,JIT Construction: v1012906458,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://measurement-api.criteo.com/register-source?impressionId=66226dd912a240cc09dd14c999926558&partner_domain=nomatic.com&external_uid=c180d7cf-fea2-4bfb-8f00-85b381542aa1&partner_id=100366&source_type=event&campaign_id=343905&marketing_objective_type=0&hashed_external_id=-5162943182333746466
Preview:	OK

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3000
Entropy (8bit):	4.824491451089734
Encrypted:	false
SSDEEP:	48:8mWPVilxWE3XlwHpxCHISjwxdT2r09x/Cuij53/SIcyAAtGeQ4:ei5lwHpIHISUxdTl9x/CuGSvVAtGet
MD5:	486FEFD3024C230FA4689D3BDFD81B49
SHA1:	88A0CA933136475EC974C52C51712B83E14292BC
SHA-256:	28F61159BFAAEC611B267553761ABA542221F0DAF41013D0E00B3ABFA988A3A0
SHA-512:	DA982BCFF665E3053133E0248459326D4F82BC75B5292B1B483AB5A21D9F2DC394545E244B226E63F4A4D33BDA2CD7FC0F7270943CBCAA920CD58ACFAAB87E9F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/js/main.js
Preview:	"use strict";..~(function() {. var $ = gsap,. ad = document.getElementById("mainContent"),. easing = "power1.inOut",. currentLoop = 1,. loops = 2,. bgExit = document.getElementById("bgExit");.. window.init = function() {. ad.style.display = "block";. bgExit.addEventListener("click", bgExitHandler);.. var tl = gsap.timeline({. onComplete: doLoop. });.. tl.addLabel("frameOne");. tl.to(".copy", { duration: 0.5, opacity: 1, y: 0, rotation: 0.01, stagger: .2, ease: "power3.out" }, "frameOne");.. tl.add(bounceCTA, "frameOne+=1.53");.. tl.to(".copy", { duration: .5, opacity: 0, rotation: 0.01, ease: "power3.out" }, "frameOne+=2.4");. tl.to("#img1", { duration: .73, x: -182, rotation: 0.01, ease: "power3.out" }, "frameOne+=2.83");. tl.to("#img2", { duration: .73, x: 0, rotation: 0.01, ease: "power3.out" }, "frameOne+=2.83");. tl.to(".copy2", { duration: 0.5, opacity:

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1819
Entropy (8bit):	4.6889700834234604
Encrypted:	false
SSDEEP:	48:YOUz3D8lKzocjsxW7qCylkofy+mpMyfDRl:VcoS83fy+mqyf9l
MD5:	6CAB95F904FFE05E67E42D8F55215D9F
SHA1:	1429398E953DE4DAC680FF7F27302F61285CB4DC
SHA-256:	AACB65803DAE5D268A28618C73109E437AA29D8F975A7853DD3D766E9FDC0F6F
SHA-512:	EE5D4CA29B313DB20E396A324EE0C2FC2CB310980A8D3AA2616DF16B998C402E9F804D44C42726139575235CDE25393D51835669069876C9BA5CDA38A5234B95
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/consent/tcfv2/vendor-list/categories?siteId=7443
Preview:	{"categories":[{"_id":"5f29baa851d2ec25ab472942","type":"IAB_PURPOSE","name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here. "},{"_id":"5f2c287abc875929ac38894c","type":"IAB_STACK","name":"Personalised advertising and content, advertising and content measurement, audience research and services development\n","description":"Advertising and content can be personalised based on your profile. Your activity on this service can be used to build or improve a profile about you for personalised advertising and content. Advertising and content performance can be measured. Reports ca

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	7.468388899138082
Encrypted:	false
SSDEEP:	24:3HJPDX1B1AM/I/9k9lLGalkOweE00jl9W7knBJnEqFiOyxc4hRKlSbA66pgFLtym:5PDXtdQ/mu6kHe8zxcqAVKlUA9utybK
MD5:	F90F22F880DF4AE94EDA7CD8C107ACB5
SHA1:	E6C43C70B14D5591D893A53BA74C44CE4D84C09D
SHA-256:	8EAA3BE9055370C233D3DF6B3BF088768915C503748CAF2CFF104298AFEE9934
SHA-512:	EC785D0DACFC50CFE6015BBF76D4521BF0D57FCCEB3F5B68CAB0AC21305939815A28C346464229190DFD341F46B4B5BBED4D9B84A4E6EAC0DE74392690F725CA
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/themes/default/images/jr-circle-logo.gif
Preview:	GIF89a........v.............................X.....8\[..V...........-..........&.V..+E..J.~.....z.....Ht.Ai..-....4U.#8.;`.....3.........................................................................................................8......................1.....................................................................x.................Ak@..............z...S.b....U....d.o....-.........x....\|....p.....v.Q...z....)..N......S.........u..t;...:.6X..1.)A..?P..S............_....s...S..H.....i........l.....>..:T..g...R.2O.....v.g........./..-.. ..(..%...J..9..:.....M....0.....0..1............y..\|.h..l....e..e... j.m.p.D..q....!.."....%...P.y....\.......g........^3...j..4..6..p.........4..R.....q.p.I...>d.l..z.X.........n.X....&..{.N......V.............!.......,...............H....!X.......iy.....,4<...D...a....I.+.<.............7........D...i....8...b.....j.la..4..Z.\.....lBI...b...;...]#..A2.&.k_...W...Y`..X....6....,P7#......@z,..l...+K7.E.K4...(..@l...o{

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81043
Entropy (8bit):	5.158300859051252
Encrypted:	false
SSDEEP:	768:wHjZOqIX1wdkkE0T6vpvsK5CXgOSexYPWPbndtVy7xtSulZPoQvXvBvB8:NqICdk75MY2y7xtSujQs2
MD5:	C6AE63D05A6E322C91282FA7B91A8392
SHA1:	B1BBBFD5FB74070EF5211F1865257D8CD506A9D6
SHA-256:	FBE225EC0A2E25E29DFEC24E9856EF113334F4E3BBB7B4E3036F41C1D93E0799
SHA-512:	7B0BD705ED330722D0B25DB57897D01529122DEB6A5A85E29EECDBC39F01F1C232E34A5B5957EB8BE53C108F7FE8886DF057B93D675345C60BF834955179DFE4
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/D16GKapowStatic-b1bbbfd5fb74070ef5211f1865257d8cd506a9d6.secure.min._V1_.css
Preview:	.status-active,.status-approved,.d16g-status-green{color:#090}.status-disapproved,.status-ended,.status-inactive,.d16g-status-grey{color:#aaa}.status-rejected,.d16g-status-red{color:#d00}.status-paused,.status-pending,.status-awaiting-security-scan,.status-awaiting-moderation,.d16g-status-orange{color:#e47911}.dataTables_length,.dataTables_paginate{float:right}.dataTables_length label{display:inline;margin-right:5px}.dataTables_filter,.dataTables_info{float:left}.top label,.bottom label{font-weight:normal}th sup:hover{opacity:1}th sup{color:#333;margin:0 -5px 0 0;font-size:.8em;-webkit-font-smoothing:none;padding:.04em;display:inline-block;vertical-align:middle;opacity:.4;-webkit-transition:opacity 200ms ease-in;-moz-transition:opacity 200ms ease-in;transition:opacity 200ms ease-in}@-webkit-keyframes fadein{from{opacity:0;-webkit-transform:scale(0.98);-webkit-transform-origin:top center}to{opacity:1;-webkit-transform:scale(1)}}@-moz-keyframes fadein{from{opacity:0;-webkit-transform:sca

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4700
Entropy (8bit):	5.474379881719652
Encrypted:	false
SSDEEP:	96:UOW8OW5Vc+uCOWgNUOLDOLVVc+uCOLNNUOgBOg8Vc+uCOgnNUOxTKOxTDVc+uCOg:wYFpiGBAuPGrtJLiO
MD5:	210CEA046504F01DA4FBE60B15544D55
SHA1:	5EB5129577390E3E1D6104449B90568C1891EF83
SHA-256:	7E860755EAEC151E679880005E7BD0703CDD308D5A2DF0DBE6BA2D105105068A
SHA-512:	D05E07784FE49AEEEEF31228E32D3EAA077EAACD34D8AAE5A41D3ED5ACDA53FECE3994007E78ED5EDCB63F59FA3BC0902B8E07FF1DAAC1DD8798CB19AC648B95
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Hind+Siliguri:300,400,500,600"
Preview:	/* bengali /.@font-face {. font-family: 'Hind Siliguri';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRDf40vQVKxGv.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ latin-ext /.@font-face {. font-family: 'Hind Siliguri';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRDf40ugVKxGv.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Hind Siliguri';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRDf40uYVKw.woff2) format('woff2');. unicode-range: U+00

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=a_ngialOptqAjgSUUpFX7arMZlTOrYT9I36AdIwSj9j-6mD59cpLM3XWO_ZEdAjEh7u5M0MuFoKF-eLwGBXnOY2BpixWu1DCr7Rbt9I_IHFoEFMdL7tpkKaM1tb_eMA8tuzBKzZ8u3i7bJPCt3NsZxEva3UTmQabwBUTeKmmzRj7aZQrA1vPdespk0v4A5ADGY72l3aEchd7m2xJ_VLF_hD8yIeK9KF3fXgCBHRcFS6KYQswOTSYX5O01T1CunE_z6unEXmT7HuxtD729I2h7NCt7TAyDHoWDvXNcvnXyCrXQ4CL9vjbtZef7GJY_CpDQAEQmo8I-ecRCwrELdnxI7gY-4Tmq25UK_4HpjZOcgXp4Ur2uIXpM-M9n3hu5ozlPfTBLZ80AeXB4H-GMp82kSNJs33x3XcZBcY6awLDRzpo2hd-rB4ITP6pvqy2tTqEBCE5h8IC213Sgl_q0iW4XdY9utHVNrUlVIskVQ_SodE-HnJH
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63
Entropy (8bit):	4.449679432110591
Encrypted:	false
SSDEEP:	3:YxhACNN7kYCiNQDxP9FxUPGYn:YndkYCiNQtP7uPPn
MD5:	211AD1A9C62A95DBB3B4BB80E07EC24A
SHA1:	523438055F9C54FB81195B911043B45A41146D5B
SHA-256:	D4C2DA58D38201D7E232F20D30BABBA963FAC0ED33D5372DCB470F8E6B992CE6
SHA-512:	ED796A64AA0944CB2875F247C5CCC8BB228DAB7ECC5415FA04897ABD31DC1997B87AD5137C2284B1ADC2C616CB84408DD339D48FA1CD33F05AE706822A101291
Malicious:	false
Reputation:	low
Preview:	{"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:29"}

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6470
Entropy (8bit):	5.221616130967681
Encrypted:	false
SSDEEP:	192:Lz8ShYKOqJIflT5+VJPfg5FfBpdBuNhdO69x0cIuYk:Lz8ShYKOIIflT5+7Pfg5FfBYyvuD
MD5:	538EDC0308202F221D31C2BE6B47E8D7
SHA1:	CFCEB70E4F505BCFB36AC5EE4CE38FC88A2BE9D8
SHA-256:	885329082FD4B718BD14ADE817EB970C59841697B8E0C306972F6E14AD651973
SHA-512:	127F3A6E88784FAD5E9736FA2A38C638EBC64AC719CDD0CFE03C4C69189F09B049EACF4FA0F64E3EAFFBF9C501F553796E1DC9DFF04A2BA8762394A6CCB3944F
Malicious:	false
Reputation:	low
URL:	https://castbox.fm/app/castbox/player/id3921236?v=8.22.11&autoplay=0
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <title>Spout Podcast</title>. <link rel="canonical" href="https://castbox.fm/app/castbox/player/id3921236" >. . <link rel="dns-prefetch" href="https//s3.castbox.fm">. <link rel="dns-prefetch" href="https//everest.castbox.fm">. <link rel="dns-prefetch" href="https//data.castbox.fm">. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" >. . <link rel="icon" href="https://s3.castbox.fm/app/castbox/static/images/logo_120.png" type="image/x-icon">. <meta name="apple-mobile-web-app-title" content="Castbox">. <meta name="apple-mobile-web-app-capable" content="yes">. <meta name="twitter:site" content="@CastBox_FM" >. <meta name="twitter:creator" content="@CastBox_FM">. <meta name="twitter:domain" content="castbox.fm">. <meta name="twitter:card" content="summary" >. <meta property="twitter:title" content="Spout Podca

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46368), with NEL line terminators
Category:	downloaded
Size (bytes):	100533
Entropy (8bit):	5.397381913962526
Encrypted:	false
SSDEEP:	1536:O4eg22HisliUTny3tjq6C+VLJ+xssNCMABN5J92E:Z22CnUbutjztONCB2E
MD5:	CC5601F6F62CC1FA307587CE6872711C
SHA1:	E86D175CD64DDE9B12A743D3DCE361F9EA0F2130
SHA-256:	DF67C8073D84D89FEFA20BFEE3EFCAF145A1BE01AB7649540DCBDBFF4C9C8A91
SHA-512:	DEE69ECFBD9D8902DCDE46EBBF3D30E5E11F1A8A25E7F39B20C69C7432EE1BACA0BF8AF43415224853595A4506635C480C0A526F0C3A54BF34A506A3DD52787F
Malicious:	false
Reputation:	low
URL:	https://d-code.liadm.com/did-003y.min.js
Preview:	!function(){window.liQd=window.liQd\|\|[];window.liQd.push({"globalVarName":"liQd_did_003y","distributorId":"did-003y","defaultEventDelay":1000,"identityResolutionConfig":{"source":"did-003y"},"identifiersToResolve":"_sharedid,s_vi,trc_cookie_storage,gup_anonid,_li_uuid,hid,_parrable_id,tmguid,ajs_user_id,globalTI_SID,muuid,dtm_token,_shopify_y,_pubcid,IXWRAPPERLiveIntentIp,_aalyticsuid,s_ecid","contextSelectors":"title,meta[name='description'],h1,link[rel='canonical']","contextElementsLength":5000,"resolutionSync":{"enabled":true,"strategy":"ls","targetKey":"__connatixLIResolveResult","resolutionOptions":{"resolve":["uid2","bidswitch","medianet","sovrn","magnite","openx","pubmatic","index","nonId","connatix"]}}})}();!function(){"use strict";var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function e(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}v

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5350), with no line terminators
Category:	downloaded
Size (bytes):	5350
Entropy (8bit):	5.339825284046238
Encrypted:	false
SSDEEP:	96:qowEpE1XxQJfzNGtXbuERFBE/oFErv7NEtWxUz1gOvZr:qyC9x2fOhD2ASrvmMxUzmu
MD5:	13A2A3B5F0AE1D91593BB20ED211D995
SHA1:	92FFFE780C859E9072BF2056BAF054F7F236F086
SHA-256:	B6E78DBB7BC03676D00BF249B260D8BFD48D214DA1A0B3F09F80A1CF73160342
SHA-512:	77F70DC561BEA94F8C82070C70089702CD89093110DB50BFDC8B45673E284D15C72F14BCE9A3AE7E036025954A5027CE0EEDE35192AFA6942074A27E5E6E21BA
Malicious:	false
Reputation:	low
URL:	https://ssp.api.tappx.com/cs/usersync.php?type=iframe&ruid=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dtappx.com%26id%3D%7B%7BTPPXUID%7D%7D&gdpr=0
Preview:	<html><head><meta name='referrer' content='no-referrer' /><style> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://cm.adform.net/cookie?redirect_url=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D50%26type%3Diframe%26id%3D%24UID%26auxuid%3D" sandbox="allow-same-origin allow-scripts"></iframe><img src="https://ib.adnxs.com/getuid?https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D32%26type%3Diframe%26id%3D%24UID%26auxuid%3D" width="1" height="1" style="visibility: hidden; width: 1px;height: 1px;position: fixed;"/><img src="https://csync.loopme.me/?pubid=11227&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D109%26type%3Diframe%26id%3D%7Bdevice_id%7D%26auxuid%3D" width="1" height="1" style="visibility: hidden; width: 1px;height: 1px;position: fixed;"/><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://ads

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	33373
Entropy (8bit):	4.367822177590366
Encrypted:	false
SSDEEP:	384:5Br30S7ryXcGlQmZ6kPrOLljnlgjRxdhrUmyHG3O4URhIDv:rr30SfWcGlQmpPsljnlmHYmN+Juj
MD5:	7B09047F9951B4084DFCE5CC51AEC29A
SHA1:	A2685053D34E67BA093B4858095ED94B75395E00
SHA-256:	E027328C0EE6689B33B19B4F980260541D73FFB37DEF75969A1B92E7C1D96F57
SHA-512:	AE0BDACB9F58D9C088748D3789BCC15FBDA7DDF856E28FAA9D883C93637A250AE98F102D8E89C3AD24479866FEF4CD15851A6D78C8C2916A984EA5BB85954235
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyTwo_subcopy.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M347.62,11.46h1.32l1.96,4.96l0.28,0.71c0.09-0.25,0.18-0.47,0.27-0.71l1.94-4.96h1.3v6.52h-0.84v-4.9v-0.81...l-2.21,5.71h-0.95l-2.22-5.7v0.8v4.9h-0.84V11.46z"/>..<path class="st0" d="M355.88,16.34v-2.86h0.8v2.69c0,0.86,0.29,1.31,1.02,1.31s1.15-0.56,1.15-1.53v-2.48h0.79v4.49h-0.78V17.7...v-0.35c-0.21,0.48-0.76,0.76-1.36,0.76C356.45,18.11,355.88,17.48,355.88,16.34z"/>..<path class="st0" d="M360.79,11.46h0.8v6.52h-0.8V11.46z"/>..<path class="st0" d="M363.06,16.72v-2.58h-0.84v-0.66h0.84v-1.48h0.8v1.48h0.93v0.66h-0.93v2.49c0,0.52,0.26,0.69,0.66,0

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38016), with no line terminators
Category:	downloaded
Size (bytes):	38020
Entropy (8bit):	4.944594634214689
Encrypted:	false
SSDEEP:	384:Nm3LX3ia/5i7klXPKPWPHi9bexNorWkV0AcUfaXzGCjkRPfCWRx:Nm3Lnia/5Kkt+CtX7XzGgktCu
MD5:	43D7A340EC3CB386EF6866920D93C0E0
SHA1:	616C99DC13DEFEB9635B2BBAA259AC5612A95B47
SHA-256:	286A9EB90B3236F3C77E9CD147B524D542D53BA83973DE175C45BE3EB1147805
SHA-512:	6BBD939FFB72F50A159D4153C228626DAAC6577E6CD942214DA02E07A7F6D1C8DDE17714575286E80E6273B1D34FEC3B60A64E558D3CC7DE00358D0FE7ECAE31
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/tag/css/creatives-base-styles.a53944a2.min.css
Preview:	@charset "UTF-8";.bx-client-body,.bxc svg:not(:root){overflow:hidden}.bxc,.bxc button,.bxc select,.bxc.bx-base .bx-vtext{text-transform:none}.bxc a,.bxc a:active,.bxc a:focus,.bxc a:hover,.bxc.bx-base .bx-close:hover{text-decoration:none}.bxc body{margin:0}.bxc article,.bxc aside,.bxc details,.bxc figcaption,.bxc figure,.bxc footer,.bxc header,.bxc hgroup,.bxc main,.bxc menu,.bxc nav,.bxc section,.bxc summary{display:block}.bxc audio,.bxc canvas,.bxc progress,.bxc video{display:inline-block;vertical-align:baseline}.bxc audio:not([controls]){display:none;height:0}.bxc [hidden],.bxc template{display:none}.bxc a{background-color:transparent}.bxc a:active,.bxc a:hover{outline:0}.bxc abbr[title]{border-bottom:1px dotted}.bxc b,.bxc strong{font-weight:700}.bxc dfn{font-style:italic}.bxc h1{font-size:2em;margin:.67em 0}.bxc mark{background:#ff0;color:#000}.bxc small{font-size:80%}.bxc sub,.bxc sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}.bxc sup{top:-.5em}.bxc su

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2015 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	31318
Entropy (8bit):	7.956077221659759
Encrypted:	false
SSDEEP:	768:Aw27Gaw7PcJKJvU/QXbkBNz05Q3sa8IGeKv6l6:AG40M/QXQBNz0msa85eVl6
MD5:	F2DC96F66E24D5865E9450590FE88C1B
SHA1:	49A9AA92AF43A71D78F33AE6BDC8C67152CF3EF9
SHA-256:	513C439AC9BEB12711DFE418177B4C90A569A117F3FC3552C3609C51694349F1
SHA-512:	4565FD83C53F180F530D15B2B822CC45A95F4F64661CF1682093B6EC5FE8FEF94F2456E9C01884D63259B1C12F411CA83C8CA5109A033E9E60AF7350B281FD88
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/thank-you-aimee-song-lyrics.jpg
Preview:	.....6Exif..II*.......................2015 Getty Images.......Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:94A83461FE1811EEB53CA38EE5B467C5" xmpMM:DocumentID="xmp.did:94A83462FE1811EEB53CA38EE5B467C5"> <dc:

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45686
Entropy (8bit):	5.993184492024297
Encrypted:	false
SSDEEP:	768:oQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtweTUVgO/HVCzlxqDNCDYR8RwF+S9omRzi:ZR3geoVV1C5xqDNCDHRwFz9XS
MD5:	F28A36DDFFC5EFD062284364C158F9A9
SHA1:	94E212B9503FD7255A3A24B7CF0A1753EB747E22
SHA-256:	5BD66DA399D93E79D9C4628228C00A8724E7F91E1D966DDEBC96EEEE9BC3E108
SHA-512:	66DCD7B1D6F7CB776FE2DB1900FB5E7920FA479BA2A58315B62F005025E1B899F1A4A298061D28DBDD99D014FF558EDF5612AFB0791D531B4D34866021F6BDB5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1528228483345781&correlator=3486281901356435&eid=44809527%2C31081518%2C95330210%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_3&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=3&didk=570410213&sfv=1-0-40&rcs=2&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532428360&lmt=1713532428&adxs=820&adys=579&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=tw3qlj9kv5i5&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1842863151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356335&idt=16616&prev_scp=tg%3D4%26shb%3D1%26it%3Dtbr%26aid%3Dc36df651-84cf-4a27-a064-d6324fae9f10%26ib%3Dcriteo%26iaid%3D75e0e664827c511%26iba%3D00003%26at%3D1%26h%3D13%26ics%3D300x250%26auto_refresh_counter%3D2%26amzniid%3DJDZAC1oYCk7XRLuG338Em7kAAAGO9nzv5AEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD-3LAE%26amznbid%3D1bc3zsw%26amznp%3D9qn0g0%26amznsz%3D300x250%26amznactt%3DOPEN%26axa%3D0.03%26axa_on%3D1&adks=1494241348&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_3":["html",1,null,null,1,1,1,0,0,null,null,null,1,null,[138455860196],[6421202390],[5046746103],[3273481138],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsljPrMRPC74oNvYelo8A7Sw8ZiIleA6554dVUn59RkJcVxo6TeozTCgfQdxYOucXymEh6aYQfb17K70","CM638t6tzoUDFd8rigMdjcIEng",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"tw3qlj9kv5i5",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/29535?limit=1&id=28GTkcaJzomLt-g-QM4DQFjpwHcWis-iK37oVSwYpAxM
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31398)
Category:	downloaded
Size (bytes):	104537
Entropy (8bit):	5.47397583324788
Encrypted:	false
SSDEEP:	1536:tYagKkecz5adbf0fT3+Zz8qV4dQcdnjtAP0wJFhRqSb6Cgn9hem+:B3uRfb+OqQpdnJ1wJF2KkheT
MD5:	7BE53F66BDF44D558733ED9981B68B8D
SHA1:	64AFC51982B5354564FDE75B80833BEB25E96F28
SHA-256:	1EB3D9CF83D497A5B9CEE415CC8399D3455B1553FD3F8E217C59667E4634CDD7
SHA-512:	E793DA2178DC4791DC1987039B84971A45D0541727EE5B64B20B0403C385866F8833B729B48CDF9DEC34B471281F624788AC5ABDC214E30DAC37E74436DE735B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	77560
Entropy (8bit):	5.867394602755971
Encrypted:	false
SSDEEP:	1536:KvzUOE529Lg2pYu5YjSWIb9Zkkrr5pUUml3mRw7vyzXTcDwHc7:KvfEoLg2VpsClzjcsq
MD5:	B9A07EDE4DC5F21E03D06ADDC28BE33E
SHA1:	9C8B52F6ED218A18DA0C3B38639684EE566DB9D0
SHA-256:	55BC523D6DB369963E11B4C1838C8B1CD8959C6155F0112F01289D8896D57730
SHA-512:	3A85ADB358369FF215B92591DF4C1EC9C24CA9F85D85E8887700BC38DC50CBF1DECECE7F3A4B7414113B804E3EDBF4DC4E45E255BF19217A96F4D5CFC236C993
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N1768557.3738686ADSP/B30677159.392783356;dc_ver=101.296;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=1355889453;ord=z42usx;click=https%3A%2F%2Faax-us-east.amazon-adsystem.com%2Fx%2Fc%2FRLimfTpKpwT3C7wjI4EeOsgAAAGO9n1yJQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ%2F;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.justjared.com$2,https%3A%2F%2Fwww.justjared.com%2F$0;xdt=1;crlt=DGz5)IEVHf;cmpl=8;gcsr=m;stc=1;chaa=1;sttr=3859;prcl=s"
Preview:	document.write('\x3cscript\x3e(function() {(function(){/Copyright The Closure Library Authors.SPDX-License-Identifier: Apache-2.0/var g\x3dthis\|\|self,k\x3dfunction(a,b){var c\x3dArray.prototype.slice.call(arguments,1);return function(){var e\x3dc.slice();e.push.apply(e,arguments);return a.apply(this,e)}};var l\x3dfunction(a){a\x3da?a.toLowerCase():\x22\x22;switch(a){case \x22normal\x22:return\x22normal\x22;case \x22lightbox\x22:return\x22lightbox\x22;case \x22push_down\x22:return\x22push_down\x22}return null};function m(a,b){for(var c in a)b.call(void 0,a[c],c,a)};var n\x3d{o:\x22ad_container_id\x22,D:\x22hideObjects\x22,J:\x22mtfTop\x22,I:\x22mtfLeft\x22,N:\x22zindex\x22,u:\x22mtfDuration\x22,M:\x22wmode\x22,K:\x22preferFlash\x22,A:\x22as_kw\x22,B:\x22as_lat\x22,C:\x22as_lng\x22,F:\x22mtfIFPath\x22,v:\x22expansionMode\x22,L:\x22mtfRenderFloatInplace\x22,s:\x22debugjs\x22,G:\x22dcapp\x22,m:\x22breakoutiframe\x22,H:\x22inMobileAdSdk\x22},q\x3dfunction(a){m(a,function(b,c){if(c.toLower

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/rum?cm_dsp_id=65&external_user_id=&expiration=1713618789
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1326159754
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219526
Entropy (8bit):	5.418571249895602
Encrypted:	false
SSDEEP:	6144:adRzmcBHahZ0XqyiAD+HbDTEXeqUgcxeVJinW:qCsJAkcx+J
MD5:	06CADD0914E06CC0A76D18BABBBEE383
SHA1:	85CC67A186D6A5A278F6B96995130FDF50EC3A98
SHA-256:	102372B5C55B13196105178B8C401C69D4BA3B780A24217BB09727364D446879
SHA-512:	20B189C0CA9C7A03504F54D84836B96E80E85C48C8AA73507DA185C3B3818FFBEF49FABE61EEFD057AC6B160EBC3253D47524588BDEF443E381F3323433A09CB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/pixel/cookiesync?source=2c3b95b9-6513-42b2-beb7-260851c73b75&secure=1&us_privacy=&cb=1713532390474.5
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:k:k
MD5:	7FC56270E7A70FA81A5935B72EACBE29
SHA1:	6DCD4CE23D88E2EE9568BA546C007C63D9131C1B
SHA-256:	559AEAD08264D5795D3909718CDD05ABD49572E84FE55590EEF31A88A08FDFFD
SHA-512:	21B4F4BD9E64ED355C3EB676A28EBEDAF6D8F17BDC365995B319097153044080516BD083BFCCE66121A3072646994C8430CC382B8DC543E84880183BF856CFF5
Malicious:	false
Reputation:	low
URL:	https://c5.eu-3-id5-sync.com/
Preview:	A

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 50160
Category:	downloaded
Size (bytes):	15751
Entropy (8bit):	7.986530432458034
Encrypted:	false
SSDEEP:	384:94UXLULhukcyruFBxkDFnXeB+5JbMzXUTePFpbgcXtA6266Xb:XXOYHFTkZOB+jmXUT4gcXtl26yb
MD5:	D7DC7D7EBCC4F5AF5FC2D4804E7EC737
SHA1:	5951925F50E7A6565855DCDA0CB5C4BC78005554
SHA-256:	0A39EEB894C7C78F44CD94E4A1E9D93D29660346DCB2D6E288CD1028A968CD74
SHA-512:	66FAD2DB59CA53552792EDEB582042CD6CB84F2A3F34F8105A38CA1F2152819A0DE2FBF71C04A219901D658D8B59273BE76F09CA05769A2C699C1FFA8D05E333
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/assets/smart-tag/versioned/cjs_min_1e55b565811f11b08485230cf1d150d6.js
Preview:	...........Z}W..........N2.....'....dG.K.q.....!.&A.....Tu^A.q.{v........_ug..N.<.+.k3?b..........<f.)b.bKS....K..u.M........Q....V..<i....d....cr.$.<..8R......2e<.m.C`4.y.P-h.2..,C..C....J3+....Q......l.Z.Eqm[.=.^I..z..X..$.a..x...'n$......J..}d?V.PZX.,.1.P.qqej]..DU..a.P..m.<vC.4h..r.L7........{...A.ui...$f...rP..M.V....7..S..... JGj_.Zwh.?A.=.lu...l...a....V......b..z.h....qJ.].....v&.4.u...[_....3V......=u..\GY...,.Q.a.....wi.F......Z.)p.Jm.C.....FCq;,.`.............,R.........y`.d.SB..m...n3i7`xc..=1?.r.}...!.]n....mi...-Q.....w=.d.fq0..9;]....ZzW!.4..GhBe.w.~..1P.i....1...............E1]B.R}.$6#"..-3....^X.(s..s....tz...k1...R.....'.LC..l...I.....so,....,..[W]..&1...C...>jj....+..<.r..A....w..&..e.`a.. .V.."..K.B.$...(..)D.JZ.........n...1...z.._..v..a....M.`..0..O......z.yxt\|..Oh..D...UX.3.."....<.?.=.4..;.....a...Q.#p.......'c.....p..:..r}U".......v...V.f.CF(xd.o.P...-........j..'sZ...,."...*....U...-%2..Z.... ...0....

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?partner_id=450&sync=1&url=about%3Asrcdoc
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64771), with no line terminators
Category:	downloaded
Size (bytes):	64771
Entropy (8bit):	5.357655370864635
Encrypted:	false
SSDEEP:	768:M4FoBgd3HXwqDO7nfuKLdF0puKYjADL6pKw+jOtWMVypF30VFFQeTnPRA7lD17EZ:TFoed3XwqDQKYj4LVOQMAHMYpia6fH
MD5:	01C1FA55BE8CB6CC9F00F58C6CB57D08
SHA1:	D693FF91FA355607DCB1EF84E3AADB52F7813EE8
SHA-256:	B5780D204726B29912AC1528F67BA3BD3584CE5F23983DFA2F1EE6E68E608736
SHA-512:	FE9D6A83F2AE618D0CF3128E1D0D9E2DC8065B43F1C7152E7F41058123BC422CC98AB42E1290562A9E9571EE419F782D969A42F26D0B0F2BC54E10956C2F10AA
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1928.005-3.034/frame_incube.js
Preview:	var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},IL_FRAME_CUBE=(!function(t,e){"object"==("undefined"==typeof exports?"undefined":_typeof(exports))&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(t){"use strict";function n(t,e){t.prototype=Object.create(e.prototype),(t.prototype.constructor=t).__proto__=e}function x(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function B(t){return"string"==typeof t}function f(t){return"function"==typeof t}function T(t){return"number"==typeof t}function _(t){return void 0===t}function k(t){return"object"==(void 0===t?"undefined":_typeof(t))}function F(t){return!1!==t}function m(){return"undefined"!=typeof window}function A(t){

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32017)
Category:	downloaded
Size (bytes):	37919
Entropy (8bit):	5.395217097881697
Encrypted:	false
SSDEEP:	768:+jM1NhGHPDA8OX0MPxprTbpIoDV+elqgVs4dWONp:+xS3Ik+fgVs4Qk
MD5:	F6C0EAAF2077B32896132A3B7B3E8125
SHA1:	5355560CBA012E59856520C859E450B03775317D
SHA-256:	47DF71DCC8B0B049C4B431CEEEAA92879ABC79962FF8B5E2308C5B3BB3AC2BE4
SHA-512:	348A5E13A45695DF5D18DF12F82D717B38D348170A89D652EF2BC14D3E931A7A130A93A7F2A3BD63A1F0102CE37BE3A51CC7451862D0E978FB8A597160C7A4D2
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/direct/csm_view_onlyv6.js
Preview:	window.amzncsm=window.amzncsm\|\|{},window.amzncsm.rmR\|\|function(){var startCsmComp,amzncsm=amzncsm\|\|{};amzncsm.errorCodes={SLOT_INSIDE_UNFRIENDLY_FRAME:1,UNSUPPORTED_BROWSER:2,ERROR_SENDING_PIXEL:3,INVALID_API:4,MALFORMED_URL:5},amzncsm.errors=[],amzncsm.errorMessages=[],amzncsm.exceptions={},amzncsm.isV6=!1,amzncsm.isV6=!0,amzncsm.reportErrors=function(a){var b,c;for(b=0;b<amzncsm.errors.length;b++)-1===amzncsm.errorMessages.indexOf(amzncsm.errors[b])&&(amzncsm.errorMessages.push(amzncsm.errors[b]),c='{"adViewability":[{"error": {"m": "'+amzncsm.errors[b]+'"}}], "c": "viewability", "api": "'+amzncsm.api+'", "error": 1}',amzncsm.isV6?amzncsm.sendPixel(a,c,""):(new Image).src=a+c+"?cb="+Math.round(1e7Math.random()));amzncsm.errors=[],amzncsm.detachAllHandlers&&amzncsm.detachAllHandlers()},amzncsm.sendPixel=function(a,b,c){b=b.replaceAll("%","<per>"),b=encodeURIComponent(b);var d="?";void 0!==c&&""!==c?a+=c:(a+="?p=",d="&"),(new Image).src=a+b+d+"cb="+Math.round(1e7Math.random())},funct

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31061), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	55092
Entropy (8bit):	5.295786539632903
Encrypted:	false
SSDEEP:	1536:XFbSKxfqPPkqR3KQXd+2KundjO43OeqiZEL6RZe7:VuqPBM3OD7
MD5:	42030B0BDFFEC6A0E52EED3CA3229DD3
SHA1:	FF8CC8D1EC900A9F7135C7A361810549C40406B1
SHA-256:	43F804D38A294C6DF1CE8EE64FB95AD0FF5A8D6D5685D9537DF02212668A1DFF
SHA-512:	5B97FF7174BC06198BE133CE87F98AEF38F7FF66923D4DAE27054066BC4231B216F282310D5162AB06BE904EFE99479AB70B26E68943999B514533BCD6A42498
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
Preview:	/!. pubcid.js 2.0.5 - https://github.com/prebid/Shared-id-v2/. * SPDX-License-Identifier: Apache-2.0. */!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)}

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-east.amazon-adsystem.com/x/px/JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ/?p=%7B%22adCsm%22%3A%5B%7B%22ns%22%3A1713532397490%2C%22st%22%3A%223053.70%22%2C%22re%22%3A%2210121.40%22%2C%22ldTot%22%3A%227067.70%22%7D%2C%7B%22lteu%22%3A%220.10%22%2C%22ltut%22%3A%220.00%22%2C%22ltpq%22%3A%220.00%22%2C%22ltvd%22%3A%220.10%22%2C%22csmTot%22%3A%221.10%22%7D%2C%7B%22vdr%22%3A%221012.00%22%2C%22tdr%22%3A%221012.00%22%7D%2C%7B%22vdr%22%3A%222002.00%22%2C%22tdr%22%3A%223014.00%22%7D%5D%2C%22pixelId%22%3A%22kk5z5rtpai%22%2C%22ts%22%3A1713532432560%2C%22ver%22%3A%22r-1.32%22%7D&cb=2819588
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	39652
Entropy (8bit):	5.298486888835933
Encrypted:	false
SSDEEP:	768:1kNBZTaaONaKbOg4tpLueLsMVbz57CkNsIi1TRXuubHTl709pp:cdgg1F7Zkuqs
MD5:	59A52F4146BC2CEF83D394F70045881D
SHA1:	639131A78120B4754A362468D5BB2A036374ADD8
SHA-256:	0F338A242AB3AB8A11225A8F0FD2FCE015C120C2E00EF07B72E3F3F3BBC7B313
SHA-512:	13AD20DDCE0C759153FA40869F89237CAAD4A31C12470A83125AFDAB35DA2DBC95EE68BD49216345CD9AC5E1CAB1697C0E0BE6CCA24E7D5452B462551EDD0429
Malicious:	false
Reputation:	low
Preview:	{"msg": "OK", "code": 0, "data": {"channel_id": "5eb5e00ed53a6141e32737d37e5211d6bcf27240", "episode_list": [{"website": "https://anchor.fm/spout/episodes/Gayle--Blackbear-e1u88ed", "cid": 3921236, "description": "<p>What do you get when you combine an artist whose breakthrough single garnered over a billion streams and an artist with numerous hits in his own right? You get FMK - not the game, but the song.</p>\n<p>In this episode, a veteran of the show Gayle and first-time guest Blackbear join host Erik Zachary to spout off on wardrobes, Taylor Swift's Eras tour, cover songs, food, spelling, Amazon, Grammy nods NYC, and more!</p>", "ep_desc_url": "https://castbox.fm/app/des/ep?eid=567018231", "internal_product_id": "cb.ep.567018231", "private": false, "episode_id": "5eb5e00ed53a6141e32737d37e5211d6bcf27240-302f161d34a3071d091deb50561252a1ab64c7d0", "play_count": 723225, "like_count": 1, "video": 0, "cover_url": "https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded_episode

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15013), with no line terminators
Category:	downloaded
Size (bytes):	15013
Entropy (8bit):	5.271884149775902
Encrypted:	false
SSDEEP:	384:C4d9YqgjkGNv5jK528zGZVI4pXyM0/sjjYrJYRWq+ZhKIzUtA70UNsl:xdPgjkGTKQEGM4piM0/svYlYRsZhKDqe
MD5:	577B2143E87513306B349E082615863D
SHA1:	06BD6C9DB0027A337E5502EC25889B07EE1BE05E
SHA-256:	8BBC8959FF0A0239A46A482BBB2C11DABE56C51F932B01ACEDD01963D02B6D5F
SHA-512:	510467D346F6ACEA024CF5B72C401D1EB53DEF8B73CA7678D22241884C6D1EC84B57CE8F17BB91A43AE1528DF4207432EBBC9933293D77057F62B2BDB89794CE
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ppid.js
Preview:	var _33AcrossPpidMappingsProvider;(()=>{var t={753:(t,e,n)=>{const{loadConsentData:i,LocalStorageId:s}=n(59),a=n(67),o=i();function r(t){let{expires:e,refreshInSeconds:n,...i}=t,{fetch:c=!1}=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};const l=new s({idKeyName:"33acrossEids",expires:e,refreshInSeconds:n}),h=new a(i,{consentDataHandler:o,localStorageEid:l});return r.providers.push(h),c&&h.fetch(),h}o.hasChangedSinceStored(),r.providers=[],t.exports=r},67:(t,e,n)=>{function i(t,e,n){s(t,e),e.set(t,n)}function s(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function a(t,e){return t.get(r(t,e))}function o(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/ppid",h=1e4,u={GDPR:t=>{let{consentString:e}=t;return{gdpr_consent:e}},CCPA:t=

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-33across&gdpr=&gdpr_consent=&us_privacy=&userId=212568969054924
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2024 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	59795
Entropy (8bit):	7.970623367152065
Encrypted:	false
SSDEEP:	1536:E37JTlBfGxBShLbe0NOm48XOtU+93uV5/H1QMKSFqZ6M:ElRkihXRx/OHU5W9
MD5:	FC1454498A5AD77880C4FFBF710AF584
SHA1:	CFB3AE798E0175C34DC7D78738DE4378971C9516
SHA-256:	7B3D04FCBC62F2EF2282B2FAF2EC5176EA416AF77A4B83881CA2B158E1B6D073
SHA-512:	D9C83E427008066E7C1A6744A9463329B2EF5F18B4849CFE61AE110B4DC4C761CC3F1F8C93ED8B6B8487EA03ECC472B4B0F6D60453B7C731F4FB535D5E01B3FC
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2024 Getty Images.......Ducky.......d.....whttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:626DCB69FE0511EE91C7DEA4F058183F" xmpMM:DocumentID="xmp.did:626DCB6AFE0511EE91C7DEA4F058183F"> <

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZiJt2wAAP96DXABZ&_test=ZiJt2wAAP96DXABZ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://62997692ca45859e5b2beb4e3f350c38.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8831915717
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
Preview:	Not Found

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/register-source?lineId=593399596890441530&bidId=uKZ9OkqnBPcLvCMjgR46yA&campaignId=582347282419143467&destination=https%3A%2F%2Fdrinkag1.com%2Fen&creativeId=590904568646777949&gdpr=null&gdprConsent=null&is3p=true&sessionId=null&sourceName=CS&uid=null
Preview:	{}

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://match.prod.bidr.io/cookie-sync/33across?us_privacy=
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 590x360, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	15640
Entropy (8bit):	7.989508138562187
Encrypted:	false
SSDEEP:	384:af5W29JwuKGkMKD8nv/Ub1Gv6qCI0eJiei2WXuSJzncgqveY:ak2DwuKdvonEb1GCqOeJieYjcg2eY
MD5:	18AECC2AF634AB87CA7BD5CCF8BE3519
SHA1:	5001540356486AB851A81F849BBFCD83597F4B00
SHA-256:	7957C97DFEF1D4E42C5FF3A27219F713E24FA7568C513DDC4DCA832B05057620
SHA-512:	EF6DA0ED9D3E489DBB8BFF76D4C3E62A0EB10CCDCF481C92563A4CE7B21337DBB36711B9E5DCBA07D8B13658075812480B90425116637F33D5DCF7E7441398D2
Malicious:	false
Reputation:	low
URL:	"https://img.connatix.com/pid-5cad8f3d-ecf1-441c-8c48-779a68f6d6dd/ece582e4-f873-4af7-8e2c-fd3f253ebfe1/1_th.jpg?crop=590:360,smart&width=590&height=360&quality=60&fit=crop"
Preview:	RIFF.=..WEBPVP8 .=..P....N.h.>.P.M'$.#..b ..g..Om..&........A.d...m..v.........[.?....W2......./._s.X.h.n.W.....=.Gb..n...c..]...$:..Y....mjT....0.=]..${.-..ad1"..n.5..J.......>U...2...pq...<.VO6"H.eS.^.....a.........)...l]....a.E..7.B...>?.$....W...i/..R.r..WA.V....].......{p..\|.}=3..?u~y...N..].B.i....c.-..m~..\|.g..S.=u.J~.]A....W..yZ...0.....6......Y.]....%16.".5]...geL...J\.l.....T..Qq....#l.u.S.A{.........#.m5X.'#a.\|]k.4>4..`....S..b.y.m...%.oQ,.$.g1]2...Xi..O..~...."n.Jm.\|.Y...e.Ic...k?-........D..s_]....c...$5oF..&..X.../RFL}....)..P.C..V......[L...T.6.'.n.".\|.7W...L-...1....Q..........b..T...7.LwlOB..B.P$...gc.j..P.Q$P....9=.U...I."..A...,.N..,E..=....w....$.i.I..@+g.fH8G...4.E?.J...q.w..v;.oh...!!.....b.&o/v2=J.H}...1.....J6h2.Z.G.I@G.M....5IN.:{.mR...i....\b....\|..b...M..a..a..yk...r9..)..e."...X+..\5..!.~..U>.+.R._.2...l.....q...j.NC..A...Qo..s....vF.....H3:..\|.Z.Y.8kSr.,t...yF.!.A.^.].q3.sh..C..*z...Y.......5.......i...zr...

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2713
Entropy (8bit):	4.413120629485809
Encrypted:	false
SSDEEP:	48:vVrxWCHczjSZ1MxfijGW3OBr8bKCfZf2OCHf2WSiDkZ0CNUfeT:trUC8nE1MxfiyW5mCRfwHf2WSiDkfNUg
MD5:	F8622E2FBCECEC9693BDAFF8DF069F3C
SHA1:	6D915E2D7D6F5F8F2DA85E7F2964F6878888FBC3
SHA-256:	7E0A38A7A1E7555C627DC78606AAD27755B20E896B7F4E4E22612CFACAB1978A
SHA-512:	DE5D7AECD8C81CCF7163E658C3D48191B840C39E8B45A08488126B373B0FC4794984827A178AD7B479379F2BFA15AD0CCC4FA29E72ABD9EF5A88A5893759E67E
Malicious:	false
Reputation:	low
URL:	https://s2.paa-reporting-advertising.amazon/paa/rf_module_registration.html?srcName=CS&adId=593399596890441530&is3p=true&campaignId=582347282419143467&ep=paa%2Cara&creativeId=590904568646777949&bidId=uKZ9OkqnBPcLvCMjgR46yA&advertiserId=577874589498151894&clickDestnUrl=https%3A%2F%2Fdrinkag1.com%2Fen
Preview:	<!DOCTYPE html>.<html lang="en">.<body>.<script>. const doNothing = () => {. };.. async function registerAndExecuteRF() {. if (!window.sharedStorage) {. return;. }. const input = parseInputParameters();. const is3P = input.is3P;. if (is3P !== false && is3P !== 'false') {. await window.sharedStorage.worklet.addModule('rf_module.js');. await window.sharedStorage.run('rf-module', {. data: input,. privateAggregationConfig: {contextId: input.debugKey}. });. registerEntityId(input);. }. }.. function parseInputParameters() {. const params = new URLSearchParams(location.search);. return {. creativeId: params.get('c') \|\| params.get('creative_id') \|\| params.get('creativeId'),. adId: params.get('a') \|\| params.get('ad_id') \|\| params.get('adId'),. campaignId: params.get('ca') \|\| params.get('campaign_id') \|\| param

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18528), with no line terminators
Category:	downloaded
Size (bytes):	18528
Entropy (8bit):	5.178030901198306
Encrypted:	false
SSDEEP:	192:WFhroKnCJRcX3UO7OAJo7qJHiGi5onEIEbb4l:WFVR7u7qJV5l
MD5:	BBB560505947564876B2E83AD10A33D6
SHA1:	60AD546F83FB9463ADEDA8EE9EDFBC7AFC4FC194
SHA-256:	540833D3477DBDD8BB1D2DC87E55788106F77A3B076139FAE4AFA792E1383592
SHA-512:	6C8CBEE62ED5AD693738B1177B3CC7C3450EB39A740A35D93055BA2F615466FA235BDF49D5B76D26D336456E6831EFE85D0A6BB138CA6D9599771E9962A659A9
Malicious:	false
Reputation:	low
URL:	https://aacdn.nagich.com/style/style.css
Preview:	#INDmenu-btn,#INDquickAccess button{position:fixed;height:auto;width:auto;cursor:pointer}#INDmenu-btn svg *,#INDmenu-btn-moveArrow :first-child{stroke:none!important}#INDpopup,.INDhasDragTooltip #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,.INDhasDragTooltip #INDWrap #INDmenu-btn:hover #INDmenu-btn-moveArrow,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:after,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:before,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:after,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:before,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:hover #INDmenu-btn-moveArrow,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:after,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:before,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 20
Category:	downloaded
Size (bytes):	3935
Entropy (8bit):	7.740187872619955
Encrypted:	false
SSDEEP:	48:9pf+vv73/Z02XevitNn2VgJ3nL8KnuhwtFf0jgsYi7xlnTY0tUwBdnurjfiOgc64:9pf+X10Meg2oT1kRYi7DTLndnu6OB64
MD5:	248479FE91CF38A2467171D8716A68E5
SHA1:	213903399D305E0033E84740F019DDF07757E612
SHA-256:	5950CFB78B93934DF012CDE7BD4FD79A53DE997713D302FF6928A8BFA0F63213
SHA-512:	FD108DF9193A8DB940731870326152C68B2A7F17574BA534ADB56BB12A6A8D234A0D0F096AB5904EBD9329F70E6DCCFA0C3750B68670142E29CFF4E8716C6A0C
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/themes/default/images/featured/justjaredjr.gif
Preview:	GIF89aq..............m.......S......I'.................w....l......g......................\|........h..............W..9.........%.......u7.........w..;..W...4..H....F........"..................W.....,..l.....................J...............................F.......................J..........n.....J...[....).....#..A.................3+........................<..%...............................?.....................I....j................(g.....................:........!..5..2..4......4.............#.......................+..'..y..................Z.............%.........1..................*...........).........=.........L..^.....(.....................................D...........`..`......N.....R....2...................#...~....(.....z.....f..7......!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3350)
Category:	downloaded
Size (bytes):	6394
Entropy (8bit):	5.257053491940037
Encrypted:	false
SSDEEP:	96:kKewzBfybUWrCtBbRX/AHOrdzV58FDBVYvQN4Do9tlG7usl:k4ByItBJ/btc14Db
MD5:	BD58EDF6BB04140924BCE2C1A5A184D9
SHA1:	B90F71C1E300EF391977E1FF6E523A3449DD6547
SHA-256:	363412CBE13776C9211D4D139831EE991AAC8C9CD921143E5DF5AD0E9F981AA5
SHA-512:	CD6DE5A58FCE90B864C73755159E599BE654FAE07E89709D7CD8DF603BE953E094C33021BFCD95DD01948B2D787AF09D89A948F97C857A278C58105C38083761
Malicious:	false
Reputation:	low
URL:	https://tag.bounceexchange.com/3479/i.js
Preview:	(function() { function bxBootstrap() {..var re = /bot\|crawl\|slurp\|spider\|mediapartners\|headlesschrome\|snap-prefetch\|remotasks\|woorank\|uptime\.com\|facebookexternalhit\|facebookcatalog/i;..if (re.test(navigator.userAgent) \|\| navigator.userAgent == '') {...return;..}...if (!(window.bouncex&&bouncex.website)) {...var pushedData = [];...if(window.bouncex && bouncex.push && bouncex.length){....pushedData = bouncex;...}...window.bouncex = {};...bouncex.pushedData = pushedData;...bouncex.website = {"id":3479,"name":"Media Tradecraft - Just Jared ","cookie_name":"bounceClientVisit3479","domain":"justjared.com","ct":"fp_local_storage","ally":0,"ei":0,"tcjs":"","cjs":"","force_https":false,"waypoints":false,"content_width":900,"gai":"","swids":"","sd":0,"ljq":"auto","campaign_id":0,"is_preview":false,"aco":{"first_party_limit":"3500","local_storage":"1"},"cmp":{"gdpr":1,"gmp":0,"whitelist_check":0},"burls":[],"ple":false,"fbe":true,"mas":2,"map":1,"gar":true,"ete":2,"ettm":true,"etjs":"","dge":tru

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	4.087855532412712
Encrypted:	false
SSDEEP:	6:viNvXqoX0XB79i8eJOezXXhKvNsTX0XB79ghJOezbovN8K2GTagGT4Swqn:+XNgBU8eJh0NIgBihFqN8YTaDTxhn
MD5:	44FE19B82676CC49550804EF880E2E3E
SHA1:	81080CF8D708E2EAF4D3FD868331C2AEAD1EED6D
SHA-256:	6F0F2424553B90C57AF3B114FB382D57C7DEC7E10B49F8F81DA63E6F23B6446F
SHA-512:	BDFBAFD347C1BB8C392F96ADA793C9D7B3BC9C6659B15A740F68A6A47718AAE2F6550F6F43E892BE6A744ECBC4D9F46335DD9ED0B68C376C57649289D7B324EF
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/site.webmanifest
Preview:	{. "name": "",. "short_name": "",. "icons": [. {. "src": "/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/android-chrome-256x256.png",. "sizes": "256x256",. "type": "image/png". }. ],. "theme_color": "#ffffff",. "background_color": "#ffffff",. "display": "standalone".}.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:50,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{%22Country%22:%22US%22,%22CountryRegion%22:%22GA%22,%22City%22:%22Atlanta%22,%22PostalCode%22:%2230301%22,%22MetroCode%22:%22524%22},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22clicks%22:0,%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532414127"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	4.1345195377278445
Encrypted:	false
SSDEEP:	3:YWQRAA2nvX0LKRFSABHY:YWQmvv/dxY
MD5:	C466BD434DB29CF02793F8522FDE5F3A
SHA1:	F39A01BB0264479DBE9A4BFB0B80AE0B3B0E8154
SHA-256:	D0D2E098CD489EF7BC528C86DE8AB5C51B5D6CDF9B76A8B08766036992F0D2F4
SHA-512:	81EEC1FC87BBC2A95B34AFF28CBBC6D13EC6C9E78BF76DD6C586ADB48D4E01533D97F1A56BBCC60BC386DF78F6A85252BECD71A945B6AA014A7717EA61CB8087
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0010b00001rrPUnAAM&src=aps&ver=1.9.0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Country not allowed"}

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56077), with no line terminators
Category:	downloaded
Size (bytes):	56077
Entropy (8bit):	5.3966037959270485
Encrypted:	false
SSDEEP:	768:tvB5S9KiI5Lb/4bGMxAdLJxtUweHmwVM2y7KddgZmHyhSVBt0R5tdpbr+1ccuM4O:7O
MD5:	4F8D7ECCB8B77BFF110A91871EBADCC0
SHA1:	74E5D00ECB54BFCFC2CF0D8D95441CD9236C048F
SHA-256:	2DDD96839C08E8CBDD3B1F56569B6D4770021731534B98DD17DEC8526BB0D151
SHA-512:	FAF100313010634C21A7EFA0B0E8D38D532EF52497B268AADF1AAC03DA9B5D14A45CBC1CCECC508A989B28D1DEC8BAF97270C433BE5AE85CE454267B19430DF4
Malicious:	false
Reputation:	low
URL:	https://cdn.hadronid.net/hadron.js?url=about%3Asrcdoc&ref=&_it=amazon&partner_id=450
Preview:	!function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=function(I){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(I,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(I,"__esModule",{value:!0})},n.t=function(I,i){if(1&i&&(I=n(I)),8&i)return I;if(4&i&&"object"==typeof I&&I&&I.__esModule)return I;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:I}),2&i&&"string"!=typeof I)for(var J in I)n.d(e,J,function(i){return I[i]}.bind(null,J));return e},n.n=function(I){var i=I&&I.__esModule?function(){return I.default}:function(){return I};return n.d(i,"a",i),i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219526
Entropy (8bit):	5.418571249895602
Encrypted:	false
SSDEEP:	6144:adRzmcBHahZ0XqyiAD+HbDTEXeqUgcxeVJinW:qCsJAkcx+J
MD5:	06CADD0914E06CC0A76D18BABBBEE383
SHA1:	85CC67A186D6A5A278F6B96995130FDF50EC3A98
SHA-256:	102372B5C55B13196105178B8C401C69D4BA3B780A24217BB09727364D446879
SHA-512:	20B189C0CA9C7A03504F54D84836B96E80E85C48C8AA73507DA185C3B3818FFBEF49FABE61EEFD057AC6B160EBC3253D47524588BDEF443E381F3323433A09CB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240417/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=5189612051
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46384), with NEL line terminators
Category:	downloaded
Size (bytes):	100549
Entropy (8bit):	5.397364935838252
Encrypted:	false
SSDEEP:	1536:ipeg22HisliUTny3tjq6C+VLJ+xssNCMABN5J92E:a22CnUbutjztONCB2E
MD5:	D3931F95DA933F2F9B6DA3C6A4AE7C3D
SHA1:	64A0001C58492CFBBE5FD7DFA560AF23D551B90D
SHA-256:	EC516DC31A72EC6F2D2E01D6A4E5E38D0AA7E6D4E687DEAEC53E772089A022CF
SHA-512:	DDF5E4E27A2995DA753EDDC31C0AF305C4DC838E2D1AE81251E1936DB2BCA02F28CEF5A688650B3E1C740B48DA4A7D0F7E245BF48C5739DB1DF2AA23AF000D71
Malicious:	false
Reputation:	low
URL:	https://d-code.liadm.com/did-004d.min.js
Preview:	!function(){window.liQd=window.liQd\|\|[];window.liQd.push({"globalVarName":"liQd_did_004d","distributorId":"did-004d","defaultEventDelay":1000,"identityResolutionConfig":{"source":"did-004d"},"identifiersToResolve":"_sharedid,s_vi,trc_cookie_storage,gup_anonid,_li_uuid,hid,_parrable_id,tmguid,ajs_user_id,globalTI_SID,muuid,dtm_token,_shopify_y,_pubcid,IXWRAPPERLiveIntentIp,_aalyticsuid,s_ecid","contextSelectors":"title,meta[name='description'],h1,link[rel='canonical']","contextElementsLength":5000,"resolutionSync":{"enabled":true,"strategy":"ls","targetKey":"__infoLinksLIResolveResult","resolutionOptions":{"resolve":["nonId","uid2","index","openx","pubmatic","magnite","bidswitch","medianet","sovrn","connatix","thetradedesk"]}}})}();!function(){"use strict";var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function e(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjss2tYAfwa6T88hKtAHul8bI1clzp0l6PwXMw33oB-9eUt1WfZWvHGgocnnti2DP9wAe9THYa9cFrECSiATite1urpmOqZqc0u2o5Tz1vyWsKQB11eJPMNGrK3JZPIwipZbKHK82sEAujQXXaXlT4kMxF7w4WCHxc8k&sig=Cg0ArKJSzIUIUdHusF3LEAE&id=lidar2&mcvt=1597&p=365,276,455,1004&mtos=1597,1597,1597,1597,1597&tos=1597,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=1&vu=1&app=0&itpl=3&adk=629776701&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946515600&rst=1713532356470&rpt=4582&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4629023818
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/rub_match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&rub=LV6OX7LS-1U-G1TB&gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 218 x 35
Category:	downloaded
Size (bytes):	5311
Entropy (8bit):	7.752916715564999
Encrypted:	false
SSDEEP:	96:1yc3k/GCCEyDAPrrTgnGHleMLyHSL+Z8UNPFid/tuJIj1gFAum3:c0giD0rrT7Fese+UNPnKj1gVg
MD5:	CB890FB2CE924D666A24B8A44C04A1B9
SHA1:	96579D727A0F5EAFC1D12B02B648D19ABB0F729C
SHA-256:	058EDF53F777D5EE4E6E2003B6B095430E234C6CBF6984CF3EA6CDE06D949353
SHA-512:	683D92F82DCD9326B3F1452CF91B4F9880DF42FCA9F623930B2BFB4182918923D475F51799B4CB56E0139B45100E75D298078F2548440A3BF85296A6AD89CA36
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/sidebar/jjjr_logo_featured.gif
Preview:	GIF89a..#................U................/.......2.................&.....J..............4...E...d................3.........v...(..u...y.........Y..n.......:..8........m...........g...K..........................C....fr...Q........f.........r............2z..;..................t...........O..$E...........Y...$....-........F........M.....U.....6...M....%.. ..<..S..G..E..:..IU...........0....`......j......2........................Z....[..$.............w..R........R....................]........(.........5.. ....E..]....................qf......................{..............}~..~..............N..j..............................................................W..0........3n..........f..i..p...........>.....:...................m..{..T......B...........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1728
Entropy (8bit):	5.9839378385519355
Encrypted:	false
SSDEEP:	24:tCfLir1n2j1EoFtdy6iRXCJ/OPUHxoF8J7ifJNqJOGkDv8MlWBYn/Pfu0UXYsxME:EC21rrdy3UdSF8JWNu48/CnGtz
MD5:	2466A7A5A60D0AF7D084A67CFECCE341
SHA1:	637F6945B48BFA87AC1F4C8DAD43FB239734E8A0
SHA-256:	0DE0323DECF6695D61B0281C25815EA009C2D9E333B972A8F9BD3F2F78BA36F9
SHA-512:	A7F9C4B4494CD80144FF78C589D99B254E4F76423385CD4A8940F6EF3788DA99C3F2B8324B3F60431DE30ACA54DBCCBF891809782EC582E517D72A5177AB045F
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/images/des_btn.2466a7a5.svg
Preview:	<svg width="8" height="16" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="-8" y="-4" width="24" height="24" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGAAAABgCAYAAADimHc4AAAABGdBTUEAALGPC/xhBQAABB1JREFUeAHtnM2rTVEYxq+P66vkKwmpG/IHmEihkIEkdYkRZaAkDMTAnIkYyNRIl5KBIgaYyPeIga8rOj66pIwQA8Lz5O5anfbe613rWO5Zdz9vPe119nrftfb+vWuvs/Y++96eHpkIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAI5ENgIg51P3Qf+joslvdBrJMlJDAfbT+CflfoIfbTR5aAAEd3HfwiKUyCroQECeC0U0D2bfcm6L/xTT4ISMC9xtNKAOBLQALo21U2tquOJv3B/ErfRVgPoyEBTwNOOcQ3oNl419GQgIGA0z8b4CtXIwEuLbnE9K2A6DPB2KbcAgnwJqsuCazTjVgg1FB3jm6u87nU5GqHugtxn0Y+IMhEQAREQAREQAREQAREYJQR4Dp/O3QZegcNQsehSZAsIYHJaJs3Wm+gskcRRxL23fim+0GgVQG+SMarxlNKAGAJ2rzuAV8k4GeC/hvb5Dic+UHoG1QA9m2ZgDGQrEMCHPV8yOYD3l7/scN+FQ4COyA+2WyHa/l8SwTjCUxH6PlI8EVyTsd33+zIZTh9rmAKkLHbnc3GGH72/MI8DP2AXOjP8Xk3tBxi2a2rKy+Ar8xIgFPOJcgFypdsD0HuL1rH2nxcf7fMRMkCCJyCrwvwCj73lcSfaPNzY9wy25MFEOBS8zv0AdpWE3cVdS7oqvKmmjZUVUFgLfZzKqqzt6isgl7s53fItLpGVBdHY

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58771/fed?1p=0&gdpr=0&gdpr_consent=&us_privacy=&pixelId=58771&puid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0
Preview:	{}

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	4.911222264380303
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4D/YVvTMqfLpFGH+Nh:8WiIUemo/H1fCYKbY4DAv4qfnGH+X
MD5:	AA325B8864F451E7B70D86C8EAEBBD15
SHA1:	1F78E39749E3D9203AD453E401210B8F088B1E65
SHA-256:	5ED59EDB1C14B052520EA78C9DE1234D8481D8C13AEFBAF7EAF29B09E6F91B95
SHA-512:	85A38BAE4A061B67CD2BC4E6889DD40D756D1ACD192CD7C25D73828BF48E8313DFF9F314C0474A668CDC52EF54EC6E73257908395A3F50DE02A0FA642F418705
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hb2PxCzr4qEBR&cb=0&ws=0x0&v=24.305.1002&t=2000&slots=%5B%7B%22id%22%3A%22JustJared_OutStream%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*ppMjNvxbaB9j5a0i6EIly1r7ia8nxtHkNzxf9xT00G-WdzupAFO9A9RQg0JMowDA%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_n-Ogury_ppt_snb_cnv_n-nativo","cb":"0"})

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (760)
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	5.373212894212012
Encrypted:	false
SSDEEP:	24:WDlf8vVbT87t8f/nKO+kFlSnKbEeEsVdFq:WDqvV02dtFMnCEeFq
MD5:	6695871CB3283BFB8D29A00DC2328523
SHA1:	38D22726BA1F864A2322FCA50FDF5AB45DDDE8EF
SHA-256:	B244286C1A0FC9D6A3AE800CDA2F469AA8A81320D7396E6B369909E7D06934BA
SHA-512:	51BDFDFCC0A94FB956B9DBF3774AA5D6111E9EF93AD89EFDAEA35AB0266132D94C03295121F58ED80304E6E0141CC796B1DF2481B001B65947117BFF29BDB12B
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=0&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_Mid_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F2%22%7D%2C%7B%22sd%22%3A%22home_Top_Right_300x250_InnerRail%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F1%22%7D%2C%7B%22sd%22%3A%22home_Bot_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22160x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F3%22%7D%2C%7B%22sd%22%3A%22home_Top_728x90%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Ftop%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ","size":"728x90","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"home_Top_728x90","amznp":"ra43cw","mediaType":"d","amznbid":"150jzsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain"})

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49778)
Category:	downloaded
Size (bytes):	49839
Entropy (8bit):	5.434198353666075
Encrypted:	false
SSDEEP:	768:9iDdrqLZLqtHlPqBsEzQffbJjUofwCJIKz4oFAWxNKltMQonAfBGe3ze:BLqtHlCBsYUf9fdIKrLxNc9Ue3ze
MD5:	A9290C6B5F8C75EBC321B414A16A5C2A
SHA1:	34B6D99F35677717BB6018000B8557F15A34C7C3
SHA-256:	4CD9D7FE6BEF9E82616B20D2C4A7A9842652ED469B704922E4C682F209754768
SHA-512:	33139232646244C96DFDB354CE6D98D651EA3B8ACC6DD0442F6CEF99FBF8BA32A0142D3CF82229ED2ADE69BB243555C1BE60C3175602F83F3FD660CEF3CEF5C6
Malicious:	false
Reputation:	low
URL:	https://vid.vidoomy.com/sync?gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&redirect=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D380%26type%3Diframe%26id%3D%7B%7BVID%7D%7D%26auxuid%3D
Preview:	<html>.<body>. <script>. !function(){"use strict";var t,n,r=function(){return(r=Object.assign\|\|function(t){for(var n,r=1,o=arguments.length;r<o;r++)for(var a in n=arguments[r])Object.prototype.hasOwnProperty.call(n,a)&&(t[a]=n[a]);return t}).apply(this,arguments)};function o(t,n,r,o){return new(r\|\|(r=Promise))(function(a,i){function u(t){try{c(o.next(t))}catch(n){i(n)}}function $(t){try{c(o.throw(t))}catch(n){i(n)}}function c(t){var n;t.done?a(t.value):((n=t.value)instanceof r?n:new r(function(t){t(n)})).then(u,$)}c((o=o.apply(t,n\|\|[])).next())})}function a(t,n){var r,o,a,i,u={label:0,sent:function(){if(1&a[0])throw a[1];return a[1]},trys:[],ops:[]};return i={next:$(0),throw:$(1),return:$(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function $(i){return function($){return function(i){if(r)throw TypeError("Generator is already executing.");for(;u;)try{if(r=1,o&&(a=2&i[0]?o.return:i[0]?o.throw\|\|((a=o.return)&&a.call(o),0):o.next)&&!(a=a.call(o,i

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14527), with no line terminators
Category:	downloaded
Size (bytes):	14528
Entropy (8bit):	5.1640009813418954
Encrypted:	false
SSDEEP:	384:95IqKTmlzypjOjS8X2YGWH0kxp68kGE2/L:9MTmVzP88kPgL
MD5:	78FE4BB890F5080AB806E3C04E34F63D
SHA1:	E6CD4566ADFA0D8AD8F8B48233A8154BF61D5103
SHA-256:	D3C286558922CA8C2C69167698CD61A8280CB03B81BB41D9BD633F80F18C274F
SHA-512:	EF1B77B4568AF6273F9486B0B89A79D0DDCD09D9CCDF495B983C0C4CE56092A4006B1712A1079684F51E125016FC9AD294E311A443D7F6E89968EDFD3DACB72F
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher-stub.min.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var o=n[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)r.d(e,o,function(n){return t[n]}.bind(null,o));return e},r.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=128)}([function(t,n,r){(function(n){var r=function(t){return t&&t.Math==Math&&t};t.exports=r(

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2888)
Category:	downloaded
Size (bytes):	20370
Entropy (8bit):	5.522634512019388
Encrypted:	false
SSDEEP:	384:8OYtIHE3Q5+gVH9xFsPKD/O8I6g+iWCUs1pFBLxncqwOjaQX6wymb6aHNmXPJlIH:jYtIHUQ0gBjFhDW81g+iWzIp9ncqwOW0
MD5:	308A5F23E118C0CF9F688A5D70F90C6F
SHA1:	3E1C92A62743FE1A8B42C7498D792CD47C235281
SHA-256:	9709CAAEB47935E01F79E18B93611C0CACD448454BE40C3A3D99D7B041A59C3C
SHA-512:	D275C6E21B6DA33312B645B4816A1B741B944B82BA48BFEE2369CC6ACEAE8C9EBCDF23E99C32B731B7376FD57260269197BA00B645D43B577CADB27B12D1401B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240417/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function da(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://8183519846118c3ad02c79d383614f63.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=1
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://d.adroll.com/cm/index/tp_out?advertisable=3GMDZMBFQREVBC75SYYKWH&gdpr=0
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	75
Entropy (8bit):	4.193241483823902
Encrypted:	false
SSDEEP:	3:YWR4b6aWzH+pD//RKjFbByY:YWybRt//RKBbBL
MD5:	04E6FE0436DFF7C710B816A87B8EA6B8
SHA1:	9D278808AAE9904F861A59AECB30B8AB61A144C4
SHA-256:	0CB395B517A2F4A8D360DA8805C91A249EE410D02D6578E5F7943287E0749158
SHA-512:	DEFF476D22925E97D962777B379756B8D7DCE2F9A2362F6FAEB8F709081D8B37B4983F04E516A48101FCA92FBB180FD39BEB3008B4A8F3B988D4D7B1AE0FEF21
Malicious:	false
Reputation:	low
Preview:	{"status":"error","message":[{"error":"Not found, Not Found"}],"data":null}

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1845939505169848484&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999657265651089
Encrypted:	true
SSDEEP:	24576:FYmdCqqR2lWUjjp0NqAqImDSh6NRxnt7CdD5qbi7VdPZO6:F5CFR2N6pm2eRV5tbQPxO6
MD5:	C33FFEB705AE85F94B32C5AD449D8473
SHA1:	FC04E386C77F21C84AD9638627F85F71E7052CA4
SHA-256:	4CF031E3ACBD3F1DB481F2C7CE8AA65CAD30457E5962247F72C48859D1C5A3A4
SHA-512:	00B37E18BCADDF4177A7972D4B2CC48A7D007712363B6DD82D3BB01F596385039488C43CED6A7FAE1EC4217E9D726DB8B344B1AFAAFD359440DD41347518328F
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/dt/91644/5409671/6e29e5204e824421ba7a64a4b6e77dad_untitled_design_(8).mp4?ibv=1:2f75092362f61f:1
Preview:	..;........1.!&Z[...X+.h..... .(.......@..I..#.Z9...<o.Xn.PU...p..,..<.,}.`G1[mA2.\|...H..nA....o..^.O..M.....U1..o....}9o`..zN........_J..Ev.,....<D.A.q.nm1..2V.s....Y..X.<....s.Jc.g.!{.R.V.QB%{..d./>._.."."....%.,...A.:Nh.2..=q.=.q...+..Ej.T>...iG.K.J[....D.c={..z..<C....3.....Z..L... .)+o.vM./......F....h.j..8:.....J...hm.~.cI..{..\|.w;.....H.h.V..4G..p.].yi..CM..aV'..k-*H..,.,ds....XEQ.$y...".T..^-...8.<.4...T.g.v94.4..i.c.........<.Q?1..q..FY.1....O.n4J..<.......}.Dn..\|.....A.WI..Re0R......<.....9..?.).@..%.bw.7..W...Mt.R.>......D.....0<..ZxRy.h....\`.j...M,z,W....-[.....sI...WT....m..].N.m\|D..1b;#..~6S.U.?nQ..Q.n#b..;..I...a.\|3.`.k...N......x.....1...:7c..._.~..'P.)k\.S.K..3W..E..F\...A..... Ar`>.h.IV......`.dP."....YM.]e.bO=...A...~.~.$..=.....A..[....Y...<P-.........2sC..._>.5.%x9.Y`$..S...1k.J.V:...[:.&.^.cv...m..1......._."3....mi.\.z!..V...=w..2.9....`Rx..55..5.U.>.......I......#\.ugs.O....6..k.....D.^..{.n4. .!V...C."X.RdYN

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=15927&puuid=Vz%2FbJWYibdPMu3ZvZk8k2Q%3D%3D&us_privacy=&_rand=1713532413673.3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3444)
Category:	downloaded
Size (bytes):	3460
Entropy (8bit):	5.200911819695184
Encrypted:	false
SSDEEP:	96:yrnxPAf80g4+h3nAYdqHsfQLsftFWGm+H9BELCHErQYi+Jry:m6HB+h3zsHVsfJr3ELCHErFi+5y
MD5:	771A6A92588A8FB45E42A04FA3FE9DDD
SHA1:	A31526CE79259DD6E386BC9731F5FC764B7C68A5
SHA-256:	D8C49BC14E5B5041853D619FE2DC1B01B28BFD4974B8E732F13FA4943EFAADA3
SHA-512:	8CF2D680F8BCFA30F796FFD8268D7763DB2F58E694AF467CEEFB39ECD0EF39A162C440AD7969BE2E3CA19C034B4D60E5CC8B5F6478E0FDB395DC1E35949659FD
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idl.js?ga=0&gc=&do=www.justjared.com&e=27&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0
Preview:	void(0);/* */;.!function(){function t(t,e){const n={brand:t,version:[]};return s(e)&&!a(e)&&(n.version=e.split(".")),n}function e(t,e){return null==e\|\|0===Object.keys(e).length?t:function(t,e){const n=-1===t.indexOf("?")&&-1!==t.indexOf("&");return t+(n?"&":"?")+e}(t,function(t){if("undefined"!=typeof URLSearchParams){const e=new URLSearchParams;for(const[n,r]of Object.entries(t))e.append(n,r);return e.toString()}const e=[];for(const[n,r]of Object.entries(t))e.push(`${encodeURIComponent(n)}=${encodeURIComponent(r)}`);return e.join("&")}(e))}function n(t,n,r,o={}){const s=o.method??(null!=r?"POST":"GET"),a=new XMLHttpRequest,i=t=>"function"==typeof n?n(null,null,t):n.error(t);a.onreadystatechange=()=>{if(a.readyState>=4){const t=a.status;if(t>=200&&t<300)return void((t,e)=>{("function"==typeof n?n:n.success)(t,e,null)})(a.responseText,a);i(a.status)}},a.onerror=i;const c="GET"===s?e(t,r):t;if(a.open(s,c,0),null!=o.timeout&&(a.timeout=o.timeout),null!=o.customHeaders)for(const[t,e]of Obj

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4370
Entropy (8bit):	4.6212759524062434
Encrypted:	false
SSDEEP:	96:JvfFCAUXIPzE+etLXSx7fu0jXTPzX6T+5n9kqfqnS3Lq7Swjly4SH4APWTI:5FCAU6w+b9fu0jXrb6T+59lCSGeuytu8
MD5:	B5CC396E5C34D298F274E1434684F296
SHA1:	C39445395D21FD65A53CF151C69F46729CB13967
SHA-256:	01E4018A685FFB6A9FA6E5A9F2A331EE8C53DB76210B83FE5F588EF5523F155C
SHA-512:	D569A4DFF6A0D3564A326381295BB2D43672B3C868E561E88C0024695A12C08D5A63D026CD6E0CA934439B53D4BE89CEC9CACE06248EEC93081970E0432E45F8
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyTwo_line1.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M192.17,18.91h1.67c0.04,1.66,0.67,2.79,2.34,2.79c1.66,0,2.41-0.99,2.41-2.79V10.2h1.66V19...c0,2.52-1.62,4.07-4.12,4.07C193.52,23.07,192.2,21.38,192.17,18.91z"/>..<path class="st0" d="M201.82,19.65v-5.53h1.55v5.2c0,1.66,0.56,2.54,1.98,2.54c1.42,0,2.21-1.08,2.21-2.95v-4.79h1.53v8.68h-1.51...v-0.52v-0.68c-0.41,0.94-1.48,1.48-2.63,1.48C202.91,23.07,201.82,21.85,201.82,19.65z"/>..<path class="st0" d="M210.09,19.94h1.51c0.05,1.17,0.85,1.93,2.23,1.93c1.19,0,2-0.54,2-1.42c0-0.68-0.47-1.13-1.51-1.33...l-1.31-0.25c-1.62-0.31-2.65-1.13-2.65-2.47c0-1.

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39769)
Category:	downloaded
Size (bytes):	40821
Entropy (8bit):	5.660460101153473
Encrypted:	false
SSDEEP:	768:j/s1XRsV11EYout1SmoBBl1owmcCpaeSOpiUV8nBO6Zn:j/meFEJutDuBHHnOpT2dZ
MD5:	059E5B5148820182E80EC2850F06EE03
SHA1:	91DC5AE373E3C6FE06E01B1D856EBF948BC7021D
SHA-256:	B57851E56C4A3247F184F47721E89CBBCE3F1837850CD507CA26CAF10873A02B
SHA-512:	6FF24191AA96426E5A96F15354BF662BAB2845B3F5E4CB7DDAC16EE56127EFBCCC5863C84444A719B184DDD8815BEBAF1A2444B94A75EDDC2AF3B14C43AD7165
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function k(t){return t}var v=function(t,D,n,x,I){if(!(I=(x=Z.trustedTypes,n),x)\|\|!x.createPolicy)return I;try{I=x.createPolicy(D,{createHTML:f,createScript:f,createScriptURL:f})}catch(N){if(Z.console)Z.console[t](N.message)}return I},Z=this\|\|self,f=function(t){return k.call(this,t)};(0,eval)(function(t,D){return(D=v("error","bg",null))&&1===t.eval(D.createScript("1"))?function(n){return D.createScript(n)}:function(n){return""+n}}(Z)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/'

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:n:n
MD5:	9D5ED678FE57BCCA610140957AFAB571
SHA1:	AE4F281DF5A5D0FF3CAD6371F76D5C29B6D953EC
SHA-256:	DF7E70E5021544F4834BBEE64A9E3789FEBC4BE81470DF629CAD6DDB03320A5C
SHA-512:	848B0779FF415F0AF4EA14DF9DD1D3C29AC41D836C7808896C4EBA19C51AC40A439CAF5E61EC88C307C7D619195229412EAA73FB2A5EA20D23CC86A9D8F86A0F
Malicious:	false
Reputation:	low
URL:	https://c7.eu-4-id5-sync.com/
Preview:	B

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	90894
Entropy (8bit):	7.973971294474728
Encrypted:	false
SSDEEP:	1536:J/4rdLqEIjwtHKVHccUo332407sxWPhY7/3pWdQphv:J+eEI0te8cUD404WPgqQpt
MD5:	CA37731E84A4EC169F64F6EFE475D874
SHA1:	D6A6348932952D987184D14FD1B0FFEAD32F1A8B
SHA-256:	3B28842D809256EA305A37024CF472FF8B9004256FDFE32B5738490276D52F77
SHA-512:	E05952A6F04274D96D344CA8AA894AC40E65372CABF1930A76052DE6490BD6C1DA014B769B30ED16D07E2F009FF71069B8EE4F82AFF897FA9329C8000215A71F
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjaredjr.com/wp-content/uploads/headlines/2024/04/rachel-zegler-kit-connor-romeo-juliet.jpg
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0D6D3385FBF311EE9CB99A6D4C90CA73" xmpMM:DocumentID="xmp.did:0D6D3386FBF311EE9CB99A6D4C90CA73"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D6D3383FBF311EE9CB99A6D4C90CA73" stRef:documentID="xmp.did:0D6D3384FBF311EE9CB99A6D4C90CA73"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ........................................

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64131)
Category:	downloaded
Size (bytes):	757041
Entropy (8bit):	5.3975506354792895
Encrypted:	false
SSDEEP:	6144:/YoxyYvAuxcy979nHiR+xxmJdW9JLXZ5EPLMo55n/5Mu5y36v4nVb2TikL/vXz:hrVXdxb9uBJ5ywb/vD
MD5:	4C400103595939BC797D4C481B47FBAD
SHA1:	327B10C33847B3EEFD2AD13C582866E2C8B0B110
SHA-256:	18CB8BA47C7CFCFA0266D80A278D977118137D8EA2B334A2BBCC2BAC79620D86
SHA-512:	AEC95DBF2D7E4CBCDB5B3AAF356E19B917D2658BFC010F0032C9096BBD6D2A904F6045C74AD52E3F59F2B04833DB5E167FC6037528923D842B4E61568AA14D7F
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/plugins/prebid8.38.0-2.js
Preview:	/* prebid.js v8.38.0.Updated: 2024-03-14.Modules: appnexusBidAdapter, ixBidAdapter, openxBidAdapter, pubmaticBidAdapter, rhythmoneBidAdapter, rubiconBidAdapter, spotxBidAdapter, telariaBidAdapter, medianetBidAdapter, admanBidAdapter, imdsBidAdapter, undertoneBidAdapter, amxBidAdapter, smaatoBidAdapter, smartadserverBidAdapter, gridBidAdapter, riseBidAdapter, yahoosspBidAdapter, unrulyBidAdapter, kargoBidAdapter, smilewantedBidAdapter, krushmediaBidAdapter, cadentApertureMXBidAdapter, conversantBidAdapter, criteoBidAdapter, tripleliftBidAdapter, pulsepointBidAdapter, adtelligentBidAdapter, yieldmoBidAdapter, aniviewBidAdapter, nextMillenniumBidAdapter, colossussspBidAdapter, resetdigitalBidAdapter, mediafuseBidAdapter, freewheel-sspBidAdapter, adyoulikeBidAdapter, minutemediaBidAdapter, sharethroughBidAdapter, insticatorBidAdapter, sonobiBidAdapter, pgamsspBidAdapter, ozoneBidAdapter, showheroes-bsBidAdapter, seedtagBidAdapter, sovrnBidAdapter, adpod, consentManagement, consentManagemen

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	30906
Entropy (8bit):	7.989714659756737
Encrypted:	false
SSDEEP:	768:KIbRYeWjHqZlpuDKBpTUhyu0vswaxHdoS79g7zwW9M3g7aNotog:mazTcYoSShgXwwTtog
MD5:	D879BEEDDAB08BE6B3534C93EE33F52F
SHA1:	8191F9B083AEBE5C047AFBAC7BF965D6C04EA603
SHA-256:	F6AD211F6ACC5A30BB2B9E9C7016171232BBA079E3DC6C8F38D7549A3968A04F
SHA-512:	768C9033E409CC1C784BAEDF0C5F3D4A6D64B003DA7C2C491CB14CFBA5BE109E28A8107D53B30A1E900F4D67159C24656AD2764F19E99FF0C0E924D05CC58BEF
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?h=1200&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fstatic.us5.us.criteo.net%2Fdesign%2Fdt%2F100366%2F5344326%2F7995175e253e44348e918195e4e19394_nomatic_luma_collection_sage_1080x1920.jpg&v=3&w=1200&rid=4&s=xdrSACCyL2f4ldxL3AhxaghG
Preview:	RIFF.x..WEBPVP8 .x..0....* ...>m4.H."..".9....in..;....G.{8.......z,.....K.%:........P...w]...mt..?.............s...o...>....g.?.?...f.....S..................s.q..._.?.....\|.a~.......\.......?.?....%........_.?.........._....}..dz.zV/..tu....R..\....l.b.2.VR../L....n..............Gu.8..kB..7.v-O.d~g....J._4...L.sa..D..r ...c.......k..l-..2.....K.k{`..."yG..O2.c...?....&...E...........FV.r........IIg.T]l.d s=/>".g.j..R..c._)M...Bx!..8B1q,.l=..ee...D.I.o.. T...F.;...q........M..C.kT.Z...A9.-..,.p..Z...VC.r..w...........1......h.^.?}.D..<?...\|.+.......O.]I%..^.K.xXH...6...D5..y]v....H..zgd^k+\.@...6.\2.&....o.%3...9....2.Tns....}..._./..I.........M[...n.`......\|..["...._)..Ve.......ab..2...]}.......I:..c.h.]...W.M.m.UI..`..zr.v..\|=o..8.B.\.4.:.8._..j..?...N.R../O\|..OM~.;.= 5..U.. w;\$..............[..K#.....{..`R.....I..e8@J.....?,.f..:._pV1...N.&"..........k..v...\1+.\|v<..u>C..}"}..{...Fd...d..(......&.]........t.#....>..s!~.]K....fr.#

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2455)
Category:	downloaded
Size (bytes):	2456
Entropy (8bit):	5.521707839640253
Encrypted:	false
SSDEEP:	48:2/ZSjmQCGJrwFPSjmy/foxCG2SjmgDldl+SjmqmGNlredL3KSjmeALtsHhd:oZSjmQCY8NSjmy/AxCG2SjmgDnoSjmq4
MD5:	5CF4E3BEBDABEFAA55631B158D89A66B
SHA1:	44E74175AC6801EDDF54F236FA0E8E3F026626D8
SHA-256:	AC2FF8BD7E8D0DDDD19A28D881246A7CCFE900713E41E1A72652EAB04C422F58
SHA-512:	16B694B02E19683273364281960A37877BD8918F5C571CD02012EA28567DB574E4DBB9513A6FC03DADC1B392D3B1F5C2C592A35A4EF20A1EC8EF83C91D9CA346
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	<html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN&gdpr=0&gdpr_consent=" width="1px" height="1px" style="display: none" />','<iframe src="https://cdn.undertone.com/js/usersync.html?partnerid=59&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dundertonenew%26userId%3D%24%7BUIDENC%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D%26us_privacy%3D%24%7Bus_privacy%7D" scrolling="no" marginheight="0" marginwidth="0" frameborder="0" width="1px" height="1px" style="display: none" ></iframe>','<img src="https://u.openx.net/w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=1YNN&

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=fba3d144-1026-4d31-a758-943b9545e305&r=https://usr.undertone.com/userPixel/sync?partnerId=39&uid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13491), with no line terminators
Category:	downloaded
Size (bytes):	13491
Entropy (8bit):	5.16076982462813
Encrypted:	false
SSDEEP:	384:cDnBn2nClnwpnidGyzl3KdoPnPP5DpsN8nZnuaulUtf:cDnBn2nInCny3zl3s2nPsN8nZn4if
MD5:	2DD9D84654491413DF6FDCDC68C243CE
SHA1:	7AD010C85E57F68712118271DF3D8B186F15ACA1
SHA-256:	3153C6713D84A4C830ED97057B94BB0EF45207A2ECC92566EBE70EB1B822494B
SHA-512:	F9097F96C3B3F4DB322DB88A8D12975838E1C8A3F33A140E436013BC000D543F242725F50B929B29EE14D2D3C2CA46F08B8FB90FA9DB6E6EDB0861929942FD48
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1928.005-3.034/in_cube.js
Preview:	!function(){var e=window.$ice.products.$create("incube",{instances:[],addApiHandlers:function(){var s=this,a=this.$root;this.settings;window.addEventListener("message",function(e){try{var t,n=JSON.parse(e.data);switch(n.name){case"inCubeClick":var i=JSON.parse(e.data).side;s.inCubeClick(s.getCurrentInstance(n.slotId),i);break;case"incubeSideView":s.sendSideView(s.getCurrentInstance(n.slot.id),n);break;case"incubeMrcSideView":s.sendMrcView(n);break;case"incubeAdView":(n.midxs\|\|[]).forEach(function(e){s.setAdview(s.getCurrentInstance(n.slot.id),e)});break;case"sendClientLog":a.event.fire(n.name,{params:n.params});break;case"setVpfcIncube":case"sendAdViewIncube":a.event.fire("sendAdView",n.params);break;case"setVideoIntersectionObserverIncube":(currentInstance=s.instances.find(function(e){return-1!=n.params.slotId.indexOf(e.slot.id)}))&&(t=currentInstance.settings.instance.hook).adContainer&&(t.mrcVideoAdMode=!0,t.currentAdIndex=n.params.midx,a.settings.observer.unobserve(t.adContainer),a

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=57&external_user_id=1992631732046530304
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	"https://aax.amazon-adsystem.com/x/px/JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ/%7B%22adCsm%22:[%7B%22tld%22:%22www.justjared.com%22%7D,%7B%22ns%22:1713532397423,%22st%22:%2269.00%22,%22re%22:%2210193.40%22,%22ldTot%22:%2210124.40%22%7D,%7B%22lteu%22:%220.10%22,%22ltut%22:%220.00%22,%22ltpq%22:%220.10%22,%22lths%22:%220.20%22,%22ltpm%22:%220.10%22,%22ltdm%22:%220.50%22,%22ltdb%22:%220.00%22,%22csmTot%22:%2219.00%22%7D],%22pixelId%22:%220aixcdfvpey%22,%22ts%22:1713532414420,%22ver%22:%22d-1.21%22%7D?cb=9824434"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	dropped
Size (bytes):	2047
Entropy (8bit):	7.449963037801384
Encrypted:	false
SSDEEP:	48:fNIaPUVGOpu1eitNn2VOV/J3gq1L8bdY8aJzuCXtQ6:FUVi320Vmq1f8aJSyQ6
MD5:	094FCE2409D7178B7322028D66A78D1B
SHA1:	264479E65AB0094FB46E22C96FB0D63E3EE8AF60
SHA-256:	CE228FE909A2D596D995EF8C95991D201DCB87527814D7037B1D07355FA2C257
SHA-512:	FC7BDC4D414935564FF10E786941DCEBC77FE827C0339108A64800D8BEA3C06F35AC3ED7DE7458BA9B3CE8FC62D88A07AE0F21786CBEA4532CEB934E519A516B
Malicious:	false
Reputation:	low
Preview:	GIF89a............................Z]%...QS'.....................LS.z..ms................98-...FFAA+............Zb..........75.......V^..........kq ]`$==,20/!.3......&#2...v\|.sy....)&1y..hm!.................................fk"}..-0NO(KM)0//..4VY&43.............................../-/IP....@@+...cg"w........HI)..........................................<;,??+CC*}...................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:AD2E8617F79C11EA821BF98BFCA31E5F" xmpMM:DocumentID="xmp.did:AD2E8618F79C11EA821BF98BFCA31E5F"> <xmpMM:Derived

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	810
Entropy (8bit):	4.785286521682457
Encrypted:	false
SSDEEP:	12:qC5SFQK41jVJE220s6BIXWWSHEwqxyuopjItNjGavB80+HJldjy/k:b5ZVSEsqQSHrqgXsJfp80sy/k
MD5:	47FD1631D6FE2E2BF391AF27FE2E0565
SHA1:	8E3B265DB517A67346B516B25CF9B5FD2BE8F0D1
SHA-256:	8A59881AAE83948C79AAD351B6C2B206F08360449C9A47E725F4523B57C5D5E4
SHA-512:	D2F0C450369454D1B112E7D72C351F4033754805A276A0CAD2FBA7DAAAB65ED93D68C37958C2A3D70C96400AA7633138A81190E347C079BD9CCE9D9521A89726
Malicious:	false
Reputation:	low
Preview:	{..."closeBtn" : "Close<< Dialog>>",..."a11yBtn" : { ...."txt" : "Accessibility",...."tip" : "Open accessibility options menu",...."drag" : "Explore your accessibility options"...},..."blindNotif" : { ...."note" : "Please note: This website includes an accessibility system.",...."keys" : "Press Control-F11 to adjust the website to the visually impaired who are using a screen reader; Press Control-F10 to open an accessibility menu."...},..."shortcuts" : {...."a11yMenu" : "Press enter for Accessibility menu",...."a11yMenuMobile" : "Press for Accessibility menu",...."blind" : { ....."txt" :"Press enter for Accessibility for blind people",....."mobileTxt" : "Press for Accessibility for blind people",....."sup" : " who use screen readers"....},...."keyboard" : "Press enter for Keyboard Navigation"...}..}

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2024 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	63435
Entropy (8bit):	7.97568172150735
Encrypted:	false
SSDEEP:	1536:g6lxrf0JQLzb5MI0jjHWoMjNbiYu8OvwcSBGevsmg:Nxrf0JQnnoMjNbO4TkeQ
MD5:	2FDDA1FACB0769061BBEF090F1CBC76F
SHA1:	124F1CBE26563D0A13530057206BF566736FFA2D
SHA-256:	218BC8FB6462186D990E047FCCF1F36BB0AB60EEA536019A8FAF241582FD7EFB
SHA-512:	D087E0B9109BCCD7D6C2C817123E0FA211FCE701158B313A06CF53A25C58D9A36B4AFD9F88E190D4E719086FE4E0A6065105EDA98AC6ECD35FAD2A241E620869
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjaredjr.com/wp-content/uploads/headlines/2024/04/ariana-greenblatt-joins-cast-of-now-you-see-me-3.jpg
Preview:	.....6Exif..II*.......................2024 Getty Images.......Ducky.......d.....shttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.7 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:6437A669FC4611EEA4B0F7E43DCBFA92" xmpMM:DocumentID="xmp.did:6437A66AFC4611EEA4B0F7E43DCBFA92"> <

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (41957)
Category:	downloaded
Size (bytes):	41973
Entropy (8bit):	5.299710677376654
Encrypted:	false
SSDEEP:	768:fgQ82a2qbJ/A2T1PkIagOUlDgJUmnz8QDX/0JVro1lwmXaEKDStrU2GRdOfZCV/a:0lX1UnnzBUVfS5xi+
MD5:	9FEAFB1E202E0BEC5FE57D365ADF2E05
SHA1:	020F652BC788B9B11A0B86FC1FA5B9D4F9C80CD8
SHA-256:	95FBABEDB3CDCE723A6D587747D3D7456F488F755CF4500FF01863F714D45BBF
SHA-512:	B2E69EC2733F1BC7ED78FFC439E33D443A46D2786E4702DCAAEA33ACFEAAA33612D19651D3E3AA1DA04B8257EDDF3FC5FA63CFEEF8FF5973A7E69F0B9066949D
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idw.js?ga=0&gc=&do=www.justjared.com&e=27&uid=a662aef0-1110-44c8-b99d-2acba4a5db18&k=am%2Fid9558080.00000000000000000000000000000000
Preview:	void(0);/* */;.!function(){function e(e){return Object.keys(e).map((t=>{const s=e[t];return Array.isArray(s)?s.map((e=>`${v(e+"[]")}=${v(e)}`)).join("&"):`${v(t)}=${v(void 0===s?"":s)}`})).join("&")}function t(e){return new Promise(((t,s)=>{e.oncomplete=e.onsuccess=()=>t(e.result),e.onabort=e.onerror=()=>s(e.error)}))}function s(e,s){const n=indexedDB.open(e);n.onupgradeneeded=()=>n.result.createObjectStore(s);const r=t(n);return(e,t)=>r.then((n=>t(n.transaction(s,e).objectStore(s))))}function n(){return O\|\|(O=s("keyval-store","keyval")),O}function r(e){return e}function i(e){let t=null;if(z.cookiesAreEnabled()&&(t=z.getCookie(e,void 0)),z.hasLocalStorage()&&null===t){const s=z.getDataFromLocalStorage(`${e}_exp`,void 0);(""===s\|\|null===s\|\|s&&new Date(parseInt(s,10)).getTime()-Date.now()>0)&&(t=z.getDataFromLocalStorage(e,void 0))}return t}function o(e,t,s=S()+6048e5){if(e&&t){let n=new Date(s).toUTCString();z.cookiesAreEnabled()&&z.setCookie(e,t,n,"Lax",W,void 0),z.hasLocalStorage()&&(

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIkqG41q3OhQMVsKfLAR0HZwa4EAAYACCKuoNl;dc_eps=AHas8cCI5_ATp1h3TxWlTdjKw7SGy7yHNAopUKrj6s8j4j_tD6isP2u3aumub2pf1ARCUCRp9o8wQZ4df0EbV87UIFU;met=1;&timestamp=1713532431872;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=vidazoo&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	81530
Entropy (8bit):	7.972774596138239
Encrypted:	false
SSDEEP:	1536:h7SFGzXq2NLEyTc9ljlOjtWH9HV5ypP5MWC/i6C6TInQoIbl:h2FUqZWjBWXQCbUnQx
MD5:	D4B9CE9080BEA98AB104F387CA85807D
SHA1:	56A5E8B81EECE075B1C694C16F2FBCF2BB4BD27F
SHA-256:	44438AC5D4E6F2B6286810575B7A3B470779AFFD428B218DE4E1EE8013BD9CFE
SHA-512:	586B16813C4EF9FFABE00F57C10D404226C2D8D4A5671990EEADA2DFC217D55E5082F44607C9EFD28E1081B5186FDD21F37F6C49252453C11E2332964A287BB0
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/11295561179102014046
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2235)
Category:	downloaded
Size (bytes):	2324
Entropy (8bit):	5.720146697607136
Encrypted:	false
SSDEEP:	24:f1bv6S28R4P/MKQPigF8FwnthFLuTeUzkHe8yafnJkLIE9RHy89JyL:tz6SL4PEKOAgFejzkHTj/6kMRhS
MD5:	8BD0EB26BC989059A8D3D5E1448F001E
SHA1:	22895109BB36FCE05C9AFB123D9D5A4FABE1AC5D
SHA-256:	7FDB5EAD2D4FE90D4AA066B9BDFC3E95842DA739704583A3B0F5513BBF259207
SHA-512:	15AE2B1DEFD182EF1550C45070A3EF90A04BD488393CF18748260F7F966A0B7852C6093DCC4827920C696E545CEB4EE5CFDD8BDABED27697A79FBE728BE8D277
Malicious:	false
Reputation:	low
URL:	https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1YNN&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzcuMOgCAYgDw9uJsQaoA0fqAyRlZmRiYjc3Yy00MjRhLTQxNWUtYjA3ZS03ODAxNzdiMGNmMWGqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://id.a-mx.com/u?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Damx_com%26uid%3D","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dopenx%26uid%3D%24%7BUID%7D",

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://static.agkn.com/spacer.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 600, 8-bit grayscale, non-interlaced
Category:	downloaded
Size (bytes):	4646
Entropy (8bit):	7.581685797888666
Encrypted:	false
SSDEEP:	96:EXJs++t+IyCgleB4KA7OkEk+j4G82jABAnheSTY6footdgvKKbSqKHxD9f/ClTAY:kJs++t+lCqPKiNEk8u4AB4hXYgoozgSK
MD5:	DF9D8C116AC9C2AF941E74F26514DB88
SHA1:	9FB0C9A3E917C3814F64CDF37F664D9215F257F3
SHA-256:	5C6980AE311238B6C58CF3462A6D668E8CFD6ED2C6DE4BDCFAC431B02BBBD7FC
SHA-512:	89BD3BFDDE215FD32E655F6488142611485DCDD1108E3D12324A01380F48D099CBBC9805D5E9FC5ED0742C58619B3D1CD6FC5E471B4C58ADA2B02717DAA82954
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/app/castbox/static/images/episodeDefault.png
Preview:	.PNG........IHDR...X...X.............IDATx........q..!.v.bK.QJ-Z/.=...H.-U9.x.0..o$..`HHB .!../..R@....H2.M6....^.y....6/......3...cBdC..+ `...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E.,.....X.,.....X.,"`...XD."`....E."`....E.".....E..Vl.........o.X.7..2)..O.+."..SeG...t.Z.\.$....L..>.....+..U].X........)...n.X....w..J_3>./......a.P'..5.....V...Q..<....B..+M..(..............;.Eb...p.....q...5......D.X...B.......X...\|+7.V..,R.k...._..."...]........agx.X..V.....O?..7a.o...I`.rXq[;:.E.a.oc...H=,.X..!`.zX..MM.X...a.b.(.H=..7.o.....e..w.....e.+........{.X...a...E.a..S-.".`.........X..8.....a.o...l.e.....X6.2....X6.2.."......ua`...X..3.,`...^`......X...$..eGO...Xv.x...eG...X....Q`..^....l..:.,`..#.....l.....X..EV...eGE....-...X.....l..X...>..X........X..,`..n`.......l..0.,`...c

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28600, version 1.0
Category:	downloaded
Size (bytes):	28600
Entropy (8bit):	7.9924738417279935
Encrypted:	true
SSDEEP:	768:ghn4BbkaiWnFKO3QFUB1ECEDGtqOGVA9wk1auZ:O4rcOAUL7UOGW2r2
MD5:	DE104AB8ACB1088AEBEA1AAE24724A91
SHA1:	B613F95C303C539EF3FE4FE65DB0FBC5E5A55FE1
SHA-256:	C94F080A550A1F2D4FE07D371969B7A40C01606BD5624E8C03C976CBF5E06058
SHA-512:	344C715EB0C1B94E5B21C42FB5F985780A82B46CF060176FAC3FDD0044BBF692C304C41DFE2BA87603C0B9E5877FD91DCBF14D070FB2689235EF5F1549FF5EA0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2
Preview:	wOF2......o........H..oE..........................m..@...?HVAR.+.`?STAT..'.../j....d.c..n.0..P.6.$..X. ..Z..\|.....%.^w...M@.^.M..<.7...^O...6.P..%..=A.1\|..#..6.....8j.n.9U.\|...4...0h.._F.Zh.Y.o..+..Z....T.^.8..Y.!.....L'UNJ.F.TB.bE....`[....EB...H.9.z..WX...U.>c....b..!...8TH.tH@...........:....0..G.5jXI.~>.B"ED.....(.....,.h.?.g..T.%...(....{.. .....O..g.w .R..wG...6..:kUNW....Gm..V.f,..l.U]U..8,...>xF.u.=B..G.}x@l{e.E3.C...NodN53.&`......F]N?o......>..l.v..d.q.@.K...;.Kp.u..a0..3;.....K.....vQ,T.4.-.......t.3!..@.c..D.g.. .....5\|n./H.v"&'U>..v."..a..B.........\.s...MnD..I...Q*N..UO...{.KD;kj....ZZ.40..(.......^}......d..$<...W....~./..P.nQ....p.,..^7....c...0.T."b..........7....4.%(...Y.3....#...!..(.ti.t.\|.<.......#.....>...wC.U..K...I..IQ6...t....u'[.O...GM\|.._..u..@B.....2u....=..J=..wwDa...D.K.z\...n..d....n..Ki..eD..!1.....j..../.S.~9........~..^.. .xC<.l.X.R.....s...M..(.....&.HbhEs.d..R.Dd..... ..v..{}..jrw..c.~..a}......

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10411), with no line terminators
Category:	downloaded
Size (bytes):	10411
Entropy (8bit):	5.229787772490109
Encrypted:	false
SSDEEP:	192:v2CyAKh4fRcXi9+7JE34xQryOQUqKhfq4UL0meFUQDBc7+v7yObiyOmEWy3/lXrc:OCy74JKJIm9Khf4LGVcclyWytXjy9
MD5:	A9A33AA44DE7F99C25CEB57458B7B496
SHA1:	227125B8F92E5F48A72764C5ED3D9087814C5C97
SHA-256:	5A816D7C530E4D44BA93EB1A5A283ECDE3E24342A0CE16B304A588AF84F55A21
SHA-512:	1BF9A07C613E20A9441323342F1E7AF5626CD0318840B7F11AEE29381F0D6FD5E0214C99D5CA7E709B2AA6C697307DAAA61069B9F4A6670C436C6F652BA3AD2E
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/243.js
Preview:	"use strict";(self.webpackChunkconnatix_cookiesync=self.webpackChunkconnatix_cookiesync\|\|[]).push([[243],{263:function(t,n){n.Z=void 0,function(t){t[t.NotCreated=0]="NotCreated",t[t.MissingSyncData=1]="MissingSyncData",t[t.FailedInit=3]="FailedInit",t[t.CompleteInit=4]="CompleteInit"}(n.Z\|\|(n.Z={}))},165:function(t,n,e){e.d(n,{Fl:function(){return o},V4:function(){return s},u2:function(){return i},zL:function(){return a}});const r=t=>{t.style.width="1px",t.style.height="1px",t.style.display="none",t.style.border="0",t.style.margin="0",t.style.padding="0"};function o(t,n){try{const e=n.document.createElement("script");e.src=t,e.async=!0,e.type="text/javascript",r(e),e.onload=()=>{},e.onerror=()=>{console.error("Syncing cannot be made with ",t),n.document.head.removeChild(e)},n.document.head.appendChild(e)}catch(n){console.error("Syncing cannot be made with ",t)}}function i(t,n){const e=n.document.createElement("iframe");e.setAttribute("scrolling","no"),e.setAttribute("frameborder","0"),

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.181209895832316
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pswn:Gl3QEsJLsw
MD5:	75E9566B8523B76993B790444D697848
SHA1:	46BCF0FE72739CD1BC11B7D525D6FDAF4533A845
SHA-256:	039A8BB6D736466063DDE3C2A80D71D54456A7875CB1654263058BC69C1C042D
SHA-512:	0C0F1C0395E1732BF4C41292A9A41FC121435CC651D7B0D1D51BFB13FB2BC66AD4A627C0B57482E652BF9F10B9BA3B3A283F12FB2A967E9ED2C320E73DE44D01
Malicious:	false
Reputation:	low
URL:	https://metrics.getrockerbox.com/track/v4?uid=187107314970053313&source=basics-wallet&tier_one=criteo&tier_two=343905&tier_three=11239559&tier_four=300x250&auction_id=66226dd912a240cc09dd14c999926558&uid_ts=1713532379
Preview:	GIF89a.............!.......,...........L..;.

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4134)
Category:	downloaded
Size (bytes):	4186
Entropy (8bit):	5.2401493200008975
Encrypted:	false
SSDEEP:	96:DsICG4Xf+ICcK//b6q1e0AroGhaXlP7KMmoznqGTNMposaCJxT4JUJgZGX4VsMc4:5wKXB1yrGlP7KebvTNMOkxTUIvoVX
MD5:	BDBAA00495F4E3B2A0402D9879990BC5
SHA1:	681BB7945D1B3EF06CEE9826CAE359F46D094926
SHA-256:	E543BB99022E5A05348A6C91B371EA5E51167E5BF194A1FBE6FC01F91D45A196
SHA-512:	3694953552483425CB787562773292E50137B6679B5AE28E739BE140905B4D3EDC3830FE73D0F0D786D8E0EF3951E27B9DE5589C61FAC9CF2FF56CCCE90E60F9
Malicious:	false
Reputation:	low
URL:	https://01.cdn.mediatradecraft.com/justjared/main/95.590f6028e7dfe1219d0d.js
Preview:	"use strict";(self.webpackChunkMediaTradecraft_Template=self.webpackChunkMediaTradecraft_Template\|\|[]).push([[95],{95:function(e,t,n){n.r(t),n.d(t,{default:function(){return l}});var o=n(534);function d(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:null,t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"",n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"",o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:"";const d=document.createElement("div");return d.id=null!=t?t:null,d.className=null!=o?o:null,d.style=n,null!=e&&d.appendChild(e),d}async function l(){(0,o.isMob)()?(o.log.info("home: mobile configuration"),await async function(){!function(){const e=document.getElementById("page"),t=document.getElementsByClassName("top-section"),n=document.getElementsByClassName("entry-content"),o=d(null,"mhome_BelowContentCarousel","display:inline-block;",""),l=d(o,"wrapper_mhome_BelowContentCarousel","text-align:center;min-width:320px;min-height:50px;",""),i=d

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmt9r_1tz", last modified: Thu May 27 18:30:51 2021, max compression, original size modulo 2^32 24615
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	7.971132676007268
Encrypted:	false
SSDEEP:	192:9Kc5LTj0P5wffE5IkNpgSuBytYo5x17NS4UkRDS8hO86A8PE:9H+RwfpkNPV/T17NcwDSVFA8PE
MD5:	DF5542B88BC0E368C6999754A5B9E2BA
SHA1:	54F17142FAEB7C882FEE3BF67D537733E75E43AE
SHA-256:	B82DA9703A35C5436F9E47711F5B95D5357F02D590CB39DBA99355B9B073561F
SHA-512:	3BF0A63824E0D30C5A71CAE83DCEEE6E2A587FC5B9B7E81943E42DC448F9654998DA35A0BDC309B40D7D3BCFC3C95AC3D3322D1394B21542578FB2BA69EADC28
Malicious:	false
Reputation:	low
URL:	https://oa.openxcdn.net/esp.js
Preview:	....[.`..tmpmt9r_1tz..<.{.6..E.ueb..V.GJ....d7....mOQ}..IlhR%!;....73.H...t..].........7Q2Mo.....l.Ld.&.dw.a...]10.;....h.Q2f...,..'>,.L.....(.....~...K..(....N.0.....)..3.7q.=....k.]..g.$..wja....2/.K.^.\."&..Y...,].L.R.;...D.^..1.B.I.....(...{.t.y...sv{u.....dz&.(....^o..m9P7^..y.NW.p..uv.`et3.{.......{..se.......f....~.o...r.3'....^5R...4.4r.L.R........KlA=..<.W.t..W..0.G.PNt..,.,.\.N.X0Xi...r.0......../.2f.,A.%-L..lQA.4...dd.Kp't..\.picItCM.e...'.-...&1.R....2p...u..........F`.....i.+..H..../.%...Ec7d\|....F1..d.$.._...!."..i"..]1....r.e"O.k\|..HpqXQ.e.\...a..<..l.....0.&n:z..-{..T.0.^.\...{..r...i.9_q'....`.e..F.....j..4..V0V....a..\|b..x..U}.p....UJ.:.. ..E.&k.,h....1P.Uje.~@..4H.H...4[......8<.Wa~.L^..kO..B#KIQ....[...m.V.z...`.&.h..o.H.k..$.....r.Vqg.4.l. +j..._...^OTd...0. %.C./.Fu5.V.......M....0.w.%..{../.....+2=.a.K...bk... &+.Z0...._.(.g..B.{..e.Dy'....m'[%.v!e.L.e,$X+.A`...}.AF..C..#E-s%."..)h... .....z....1p..i.q....9......%..W

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	93262
Entropy (8bit):	5.413971458610427
Encrypted:	false
SSDEEP:	1536:0hEHRU+1y4fBxr6nj+kpq9KW+lYIggaqkosV4oJV:0hEHRU+U4fBxr6j+kpAKLJkozI
MD5:	BC2AA6173AB28FE890B16540E63B47BC
SHA1:	1CAF20D4C08151EDB07CEFE33A9B8CEC3AB712FE
SHA-256:	E4013BC5789BA8B19F06AA973F06EBC35B6A2551BCDFB9621EC754D76BC74231
SHA-512:	C5E9AE2B4DC98CCFB77D0321C20AC64D6010A5508B857F37EE285DA90E4E7CEA03FB2B984A5A5868641C151805DA9B0DDEADFCE61D8F755E03B022A80EF88594
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.vendors~audiobooks~audiobooks.genre~castbox.main~categories~ch~channellist~claim~claim.failed~claim.~b62a876c.e28b21f0.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[0],{1035:function(e,t){var r={}.toString;e.exports=Array.isArray\|\|function(e){return"[object Array]"==r.call(e)}},1036:function(e,t,r){"use strict";(function(t,n){var i=r(906);e.exports=b;var o,s=r(1035);b.ReadableState=v;r(924).EventEmitter;var a=function(e,t){return e.listeners(t).length},u=r(1037),f=r(848).Buffer,h=t.Uint8Array\|\|function(){};var c=r(866);c.inherits=r(778);var l=r(394),d=void 0;d=l&&l.debuglog?l.debuglog("stream"):function(){};var p,y=r(1074),g=r(1038);c.inherits(b,u);var m=["error","close","destroy","pause","resume"];function v(e,t){e=e\|\|{};var n=t instanceof(o=o\|\|r(823));this.objectMode=!!e.objectMode,n&&(this.objectMode=this.objectMode\|\|!!e.readableObjectMode);var i=e.highWaterMark,s=e.readableHighWaterMark,a=this.objectMode?16:16384;this.highWaterMark=i\|\|0===i?i:n&&(s\|\|0===s)?s:a,this.highWaterMark=Math.floor(this.highWaterMark),this.buffer=new y,this.length=0,this.pipes=null,this.pi

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1373
Entropy (8bit):	4.813654063412357
Encrypted:	false
SSDEEP:	24:b4+yB+1Xo+V1P6Vg05qPZOTlPPy2ZhIPBSn:bHyspXV1h3hKPXI8
MD5:	7FFF8D84106459FD8A6D7793CAA0D83E
SHA1:	246E9879F29985ECAEA29DA46FCCECE1C6652C8F
SHA-256:	85F2DEBF26AB62202BCA8710E8050B38FF8254BC3CCA4A9DE1318092B8854FD2
SHA-512:	1FB9534F318BA8281A1959F784BE44E4298EFD05BDEA18178B7A83EF55B31A2B63BE009AD0196D767DA4D4412FC752C350A7A01DE6AF2B9465A35A62B98CE7A7
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/plugins/pagenavi/pagenavi-css.css
Preview:	/*.+----------------------------------------------------------------+.\|.......................\|.\|.WordPress 2.1 Plugin: WP-PageNavi 2.20.........\|.\|.Copyright (c) 2007 Lester "GaMerZ" Chan.........\|.\|.......................\|.\|.File Written By:.................\|.\|.- Lester "GaMerZ" Chan...............\|.\|.- http://lesterchan.net...............\|.\|.......................\|.\|.File Information:.................\|.\|.- Page Navigation CSS Style.............\|.\|.- wp-content/plugins/pagenavi/pagenavi-css.css......\|.\|.......................\|.+----------------------------------------------------------------+.....wp-pagenavi a, .wp-pagenavi a:link, .wp-pagenavi a:active {..padding: 2px 4px 2px 4px; ..margin: 2px;..text-decoration: none;..border: 1px solid #0066cc;..color: #0066cc;..background-color: #FFFFFF;..}..wp-pagenavi a:hover {...border: 1px solid #114477;..color: #114477;..background-color: #FFFFFF;.}..wp-pagenavi span.pages {..padding: 2px 4px 2px 4px; ..margin: 2px 2px 2px 2px;..color: #0000

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F107430338%2C22911927924%2FCNX_VIDEO%2F1234-40&description_url=www.justjared.com%2F&tfcd=0&npa=0&sz=400x300%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=2452920970134289&cust_params=domains%3Dwww.justjared.com&ad_type=video&sdkv=h.3.634.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C250x250%2C300x250%2C336x280%2C450x50%2C468x60%2C480x70&is_amp=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=4281635288&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.634.0&sid=342B30E9-444B-4E7B-B6C2-7CF51A0C809A&a3p=EloKDWNyd2RjbnRybC5uZXQSQGQ2NjgzMzQ0ZWIzYzU5ZTY1NzhlODlhNTE1MTAxODVjYTAyY2U0NzRlOTYxMGJiYjk1ZGE4NGNjOTJjYWEyYjQYi9nzs-8xSAASGwoMMzNhY3Jvc3MuY29tGLHa87PvMUgAUgIIbxLYAQoOZXNwLmNyaXRlby5jb20SvAFyMmRFaEY4Mk1HRXdlVmd6V2xsMloxWWxNa0psYzNGdlkzbHpWRGN3VEZOQ05UUWxNa0pOTmt3MVQwOXBja1ZZVWxoV2FVTnlVVWRwZVdKaE5XWXdSRU5xWkVsT1VpVXlSamRUTWpaM2NYUTVXR3hyVEZkV1Z6WjNNRmR2SlRKQ1NFRXpZVzExZWpaT1duQlhjWEJ1WTFaVmRWRmxOa1ZsVDJWR1MxVjBjWHB5ZDNsb2NuZFJUMk5yUVdkVBjh2vOz7zFIABI-CgVvcGVueBIsZXlKcElqb2lWWFpxUTNCWGFIcFJUMWRWVXpnclZYaEJUVTlWVVQwOUluMD0YydHzs-8xSAA.&nel=1&eid=44777649%2C44781409%2C44802173%2C95321947%2C95322027%2C95323893%2C95324128%2C95324210%2C95326337&url=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&loc=about%3Ablank&dlt=1713532353830&idt=68090&dt=1713532430982&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-&scor=1088083995075008&ged=ve4_td77_tt8_pd77_la77000_er2449.306.2605.612_vi0.0.907.1280_vp0_ts8_eb16491
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 285x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6996
Entropy (8bit):	7.970857442603126
Encrypted:	false
SSDEEP:	192:xy8KZFCOhcEsk+7c77EiMPfbl1E+iAGgwjM0hcxvnuHbRCr/W+:HKlhZ+7c/VWfPETJMqsuHbA
MD5:	C6A1DE1A66E02EA41C610EA6F0A4CD65
SHA1:	A8465EA5692E74DCF15D54ADF82B99970E2E7E6A
SHA-256:	8637D45E1B27686A305902A026B3AB371316B1F13B3E349B6331AE32B5826A2A
SHA-512:	B5C19FA0DEDED762D1C191202856568FC717593DF727A2F6E86DFE1104F18EABCDD42499D459D22F46F9C59550F8F181A1E1572212F7EAC80D6AC2A880ABAFA8
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400019280210_BLACK_486x684.jpg&v=3&w=400&rid=6&s=OjPPiSiG3nTQB3mP9Wmh9bi3&b=400
Preview:	RIFFL...WEBPVP8 @...p........>m2.F$#!.-6.....gn...s`b\.}.v........M.....$.....}....Q .R.?..R.5.I...,.....D.ww.v........T......S4... h...i...m.:....Cm.YJ.......qO9F.....%/.D.n./.aM...N........f..< ...P....E.7L.(.....8.U'iOO..h./......qq.%L=>...AN..A9.....L.S...^.?..6V..'T.%.R....R.@o.L%...h..PU..hS...J.F..#.S-.MtD..9.b.H..t1o.....>.h.....zm^.....m.n.W6......E.8rk./.p... a\|..M...W:.8.....+V..N....5>...RM..PH.R.0..>.....G..Xk.E.....}.R.].z.@i..K_]&...j..6...yK.A.E].Awen$.[..0/g ...l...\.1.CC.,s.p...j..=....Su.W.g..Y..M.....z.F.]....^Jl.....Wel.D;....._$o.).E...H.D .$...a......<....I..[...z..h......./'.../^.....i.5.4.X.......x\|..(..........h8.?.f......E7b....]%.g. ......[<.^.$.\..Y......w H.!1.....V....L.R.`..<.oN0....}J..,.....z.u....r..9....wV.nY....sI.h8.o..A....]i...%PN._.(....&*......)n').)5...o.....> PN.&.r....)r........N..P.x..V.\..h.]..a....v...r.T....Y....D.U...L#.....d.`..$....L.......,.Ksm._...+...........\|0A.wX......

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=187107314970053313
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	4.8083108981550495
Encrypted:	false
SSDEEP:	6:qFzLIMQHXLxkGX16DVQ8ouqxdLaYwrtL1wVVIBq4QL:2ebxkC6DVU4dxhwVVI/QL
MD5:	34216F487875F43B5FDD24C077EEC1F2
SHA1:	7BD6074AB3AD7C8D0DD8FA084950795C01E2F49B
SHA-256:	DE259EB7BA7A0E45575DEB33946F1FBC695C97C33145AE4E49AF0069D010868E
SHA-512:	E7232AFDD23E356D93784E59ABE17E32FD968CB3F96D980E4B851186F87CEDDE7BD0E7E90838DFD7D1C156DA57DF25789041E3ECAFC5738DE8A0618384F73FC5
Malicious:	false
Reputation:	low
URL:	https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>....</body>.</html>.

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (52204), with no line terminators
Category:	downloaded
Size (bytes):	52206
Entropy (8bit):	5.359633958829039
Encrypted:	false
SSDEEP:	768:akuj/uQL6yMeDuAu6LELVjwZCCd91vdBC0H9tcNyXuamklrO:dS/4GRLlEkw
MD5:	3D7C71D4E1F08CF555A5D4D820A947A3
SHA1:	0715D0E514972EF85ADAE496506CEA423296B8EF
SHA-256:	EA542C708CEF3115516B7A39A479133BAD3F8722F09B03E3E3A5A2993663472F
SHA-512:	7D25C3B03D1DF31E6595837ACD0F1ED861C8A1EF0CED3B5177417D82DCCF68B2C185E74221590AC3CD23E6395D176F709881607F11191DE1A553A42D0BCF647C
Malicious:	false
Reputation:	low
URL:	https://cs.seedtag.com/cs.html?pt=6173-7821-01&pc=US&cmp=true&us=1YNN
Preview:	<!DOCTYPE html><html><head></head><body> <script type="module">var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},t={},s={},n=e.parcelRequire2284;null==n&&((n=function(e){if(e in t)return t[e].exports;if(e in s){var n=s[e];delete s[e];var r={id:e,exports:{}};return t[e]=r,n.call(r.exports,r,r.exports),r.exports}var i=new Error("Cannot find module '"+e+"'");throw i.code="MODULE_NOT_FOUND",i}).register=function(e,t){s[e]=t},e.parcelRequire2284=n),n.register("f9AGe",(function(t,s){!function(n){var r=s,i=t&&t.exports==r&&t,o="object"==typeof e&&e;o.global!==o&&o.window!==o\|\|(n=o);var a=function(e){this.message=e};(a.prototype=new Error).name="InvalidCharacterError";var d=function(e){throw new a(e)},c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",u=/[\t\n\f\r ]/g,l={encode:function(e){e=String(e),/[^\0-\xFF]/.test(e)&&d("The string to be encoded contains characters outside

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6613
Entropy (8bit):	4.908964435296051
Encrypted:	false
SSDEEP:	192:D4dtgq/ILBYce7nalVMaFnYI2mk7qs/ztrblb1Rrd3M:D41c3fwBxRZ3M
MD5:	44A81D76EFFBECFD8B24313BC9C8F2D4
SHA1:	AAE1D78C45403CE18089C5B2A1FFB206421D21A1
SHA-256:	EDDCBF5CB08B0481795090272E81C38D4F2538D0F01C1A145D771665001311CC
SHA-512:	FE8B3FE2ED9548F8D1DE33B657488CFA7F467D52642310F9A2AC8F38ADA14729A92199290C83CE29783ECD84D3D69D0CECB2813D788870ECAE1763BC927B2C32
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/index.html?ev=01_250
Preview:	<!DOCTYPE html>.<html>..<head>. <title>AG_AMZN_REFRESH_LOW_V2_728x90</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="description" content="bolierplate banner">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="ad.size" content="width=728,height=90">. <link rel="stylesheet" href="css/main.css">.. <script id="adServerTag"></script>. <script>. var clickTag = "https://www.google.com/";. </script>.<script type="text/javascript">. . (function() {. var MAX_URL_PARAM_LENGTH = 34;. var CLICK_X_URL_KEY = 'nx';. var CLICK_Y_URL_KEY = 'ny';. var CREATIVE_DIMENSIONS_KEY = 'dim';. var AD_URL_PARAM = '&adurl=';.. var relegateNavigation = '';. var urlParamMap = {};.. var isNewtonTokenSet = false;. var isTurtleXAdClick = false;. var reportingIds = {};.. urlParamMap[CLICK_X_URL_KEY] = null;. urlParamMap[CLICK_Y_URL_KEY] = null;. urlParamMap[

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:c:c
MD5:	45C48CCE2E2D7FBDEA1AFC51C7C6AD26
SHA1:	0ADE7C2CF97F75D009975F4D720D1FA6C19F4897
SHA-256:	19581E27DE7CED00FF1CE50B2047E7A567C76B1CBAEBABE5EF03F7C3017BB5B7
SHA-512:	0DC526D8C4FA04084F4B2A6433F4CD14664B93DF9FB8A9E00B77BA890B83704D24944C93CAA692B51085BB476F81852C27E793600F137AE3929018CD4C8F1A45
Malicious:	false
Reputation:	low
URL:	https://c4.eu-4-id5-sync.com/
Preview:	9

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-zeta&partner=Kueez_Entertainment&gdpr=0&gdpr_consent=&us_privacy={user.usPrivacy}&userId=ua-946b7901-9053-3207-994f-a18c9e255864
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/casale?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4892327821
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1581)
Category:	downloaded
Size (bytes):	2937
Entropy (8bit):	5.535314395642927
Encrypted:	false
SSDEEP:	48:0EJKl2llvflKz69OGX2B8XJfwLOa9OGs/BSEFomIFXv6b8i28iu/8iC08gMOD:zsl0vfoW9OKXJc9OrLIxni2fyfn
MD5:	3213B0271BFDBDBECF178B245F739E8A
SHA1:	B9A7DA6B9B6110C49B692724D495100D27E647BC
SHA-256:	A9CEF0E53263ED2712BA268F8B6C9A38C5035A864F4D135EB9D0670F323FACDE
SHA-512:	CE4A10AE00E754DA04E72F4C2D8F370264AE3465E9A9C14FD033F5A21A24448AE84805EFAB668294BD5375DA437FC5B24776183D83E148AE70FCC7A2D473C9A8
Malicious:	false
Reputation:	low
URL:	https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&ru=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3D33across%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D33XUSERID33X&id=zzz000000000002zzz
Preview:	<!doctype html><html lang="en"><head><title>HTTP Status 400 . Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 . Bad Request</h1><hr class="line" /><p><b>Type</b> Exception Report</p><p><b>Message</b> Invalid character found in the request target [/ps/?m=xch&rt=html&gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&ru=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3D33across%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D33XUSERID33X&id=zzz000000000002zzz ]. The valid characters are defined in RFC 7230 and RFC 3986</p><p><b>Description</b> The server cannot or will not process the request due to something that is perceive

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	4.8083108981550495
Encrypted:	false
SSDEEP:	6:qFzLIMQHXLxkGX16DVQ8ouqxdLaYwrtL1wVVIBq4QL:2ebxkC6DVU4dxhwVVI/QL
MD5:	34216F487875F43B5FDD24C077EEC1F2
SHA1:	7BD6074AB3AD7C8D0DD8FA084950795C01E2F49B
SHA-256:	DE259EB7BA7A0E45575DEB33946F1FBC695C97C33145AE4E49AF0069D010868E
SHA-512:	E7232AFDD23E356D93784E59ABE17E32FD968CB3F96D980E4B851186F87CEDDE7BD0E7E90838DFD7D1C156DA57DF25789041E3ECAFC5738DE8A0618384F73FC5
Malicious:	false
Reputation:	low
URL:	https://insticator-d.openx.net/w/1.0/pd
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>....</body>.</html>.

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	125663
Entropy (8bit):	7.9919302655672855
Encrypted:	true
SSDEEP:	3072:3nDxx/0C9VqZER6lTJhTMx+26IKcIu6HuYXd:3lkTJ+x+26HOy
MD5:	747BD58FCEF7EDB0FCA517B07C43118F
SHA1:	40FD140FF0F32800C7DA4B1CA0F47AB2CF1B85F5
SHA-256:	7074B942883913A16062C1FDD00169CF2381CC032508B003F107F308793CF6C1
SHA-512:	19F069651C07A654548D5BC438E0FED95BF3535FF787289A451CEA6AD81FA17DAAA18D2ED4E7B52FD48E95F2CC8CDBC8F9AA3CE15276C5F66A7EBE373BBE0CF8
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/4721408896245966102
Preview:	.PNG........IHDR...,..........mz.....pHYs................IDATx...y.d.}.~".{f.U]......X....R\.q.$[.b.#......Z....e.~..m..,Q.)S".......p........U..kD.?nU.......@....................].z.......6.{..i.z4.M...LOViw.G.}......].^.".....\|.....].8a...s.+........aaq.r.'K....~.... .......".cq..HS..C..x.$n..eYt.l.w;w..RJ>d.0...n...z.F...k....'.....S_........>....Zo.d~.,..`.9G....%...\.Lcl..sY.?..~....0L......f8..y../.$6;gG.K.l........6A..]9.0..Z..C...!I.16R#.R.b.l........-..0J..H.4......I.....M..J.E?`L.....S.R.!....u/.......#.\.Q...v.N.X...;...;v.W.$..._..WY.ub.,. 5.n..7.d...tB.A.._X$.{l..........\.kvl........[^z.+.....+_.]...$c...hH..q,..WFc..:\.o1.h...+..E....'Z$.....%p..L..{...%.......c..=...;.#.#.u.O12..o..Y..=.X......Zc./{.;(............U\.?../....]x.a$.-........S.z...UzC.R...2E..h.#...:Hed....33=K..I.0..(.Rd. ...W.l......e.0..A..q......z..HK......V...A.6..W.z.dIB...be.d.b.t....J.k...6.>..w.uh.......dR...l=.. ....f..}.A,.b8............t.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F2507246%2C22973718026%2C22573693114%2Fca-video-pub-2697679518515886-tag%2FJustjared_instream_adx&description_url=https%3A%2F%2Fwww.justjared.com%2F&tfcd=0&npa=0&sz=1x1%7C250x250%7C300x250%7C400x300%7C480x320%7C630x360%7C640x480&min_ad_duration=1000&max_ad_duration=60000&gdfp_req=1&output=xml_vast4&env=vp&unviewed_position_start=1&correlator=788998270255105&plcmt=2&vpos=preroll&sdkv=h.3.634.0&osd=2&frm=1&vis=1&sdr=1&hl=en&afvsz=200x200%2C250x250%2C300x250%2C336x280%2C450x50%2C468x60%2C480x70&is_amp=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&u_so=l&ctv=0&gdpr=0&sdki=445&ptt=20&adk=3361495283&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.634.0&sid=342B30E9-444B-4E7B-B6C2-7CF51A0C809A&a3p=EloKDWNyd2RjbnRybC5uZXQSQGQ2NjgzMzQ0ZWIzYzU5ZTY1NzhlODlhNTE1MTAxODVjYTAyY2U0NzRlOTYxMGJiYjk1ZGE4NGNjOTJjYWEyYjQYi9nzs-8xSAASGwoMMzNhY3Jvc3MuY29tGLHa87PvMUgAUgIIbxLYAQoOZXNwLmNyaXRlby5jb20SvAFyMmRFaEY4Mk1HRXdlVmd6V2xsMloxWWxNa0psYzNGdlkzbHpWRGN3VEZOQ05UUWxNa0pOTmt3MVQwOXBja1ZZVWxoV2FVTnlVVWRwZVdKaE5XWXdSRU5xWkVsT1VpVXlSamRUTWpaM2NYUTVXR3hyVEZkV1Z6WjNNRmR2SlRKQ1NFRXpZVzExZWpaT1duQlhjWEJ1WTFaVmRWRmxOa1ZsVDJWR1MxVjBjWHB5ZDNsb2NuZFJUMk5yUVdkVBjh2vOz7zFIABI-CgVvcGVueBIsZXlKcElqb2lWWFpxUTNCWGFIcFJUMWRWVXpnclZYaEJUVTlWVVQwOUluMD0YydHzs-8xSAA.&nel=1&eid=44777649%2C44781409%2C44802173%2C95321947%2C95322027%2C95323893%2C95324128%2C95324210%2C95326337&url=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&loc=about%3Ablank&dlt=1713532353830&idt=67993&dt=1713532433916&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-&scor=3257912120588739&ged=ve4_td80_tt11_pd80_la80000_er2449.306.2605.612_vi0.0.907.1280_vp0_ts1_eb16491
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	293
Entropy (8bit):	4.896244756572987
Encrypted:	false
SSDEEP:	6:8WiIUemo/H1fCYKbY4DCVeOcANYIshV9RvAWudKd+GJpoenM:8DIGoNfCYKbEeOcHIseIdrJieM
MD5:	A751A8E5E91A339C0F22CBD817972280
SHA1:	6F86D1D26EE7688A6421A57294679FE9E11495CF
SHA-256:	56B31E715B17FEB70775E4B087D4B3D8A2E5028FCC5B581BD54CC2EF05A933F6
SHA-512:	8911A001D5EEEE96C286490EAEE13628EBF068B5222F2D2AC14535093F49B9F3552A88018051EA655FFD562ADE9C49ABD20F4B03A0D89D438CB0F3F4B753CC19
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain","cb":"1"})

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/cookie?partnerId=appnexus&userId=187107314970053313&gdpr=0&gdpr_consent=&us_privacy=1YNN&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25967), with no line terminators
Category:	downloaded
Size (bytes):	25967
Entropy (8bit):	5.228399164156296
Encrypted:	false
SSDEEP:	384:M6Zf9qPOI0Zpz57X8+k6YbIN/4HJCWpwC3pUP9L3fG82GAU71CXJLZp5N:LZf9qPOrz54+wIiHUIlZ5GNCXN
MD5:	9EBEE6DAD30BAD81D480F56B98E2A44C
SHA1:	36757284EDEE25D3212B3C5828CFC44D729DC805
SHA-256:	A15BE33BFE9605A108F939EA774EA286CB5BCBC17FE823A186FF2912BC55AB9E
SHA-512:	FF04ABBD1F4C092DCC5F6D667B16FB4BC8755028782E0028677D1EFCB516EF9F811F8E1F74452983763BF2BBD933962DFEB3E8A864F199CF193DBA634B7473F7
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.vendors~audiobooks~audiobooks.genre~categories~ch~channellist~claim~claim.failed~claim.link_claimed~~48565954.976d7da0.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[1],{1032:function(e,t,n){"use strict";n.d(t,"b",(function(){return d})),n.d(t,"a",(function(){return f}));var o=n(4),r=n(7),a=(n(3),n(0)),i=n.n(a),s=n(38),c=n.n(s),l=!1,u=n(850),d="entering",f="entered",p=function(e){function t(t,n){var o;o=e.call(this,t,n)\|\|this;var r,a=n&&!n.isMounting?t.enter:t.appear;return o.appearStatus=null,t.in?a?(r="exited",o.appearStatus=d):r=f:r=t.unmountOnExit\|\|t.mountOnEnter?"unmounted":"exited",o.state={status:r},o.nextCallback=null,o}Object(r.a)(t,e),t.getDerivedStateFromProps=function(e,t){return e.in&&"unmounted"===t.status?{status:"exited"}:null};var n=t.prototype;return n.componentDidMount=function(){this.updateStatus(!0,this.appearStatus)},n.componentDidUpdate=function(e){var t=null;if(e!==this.props){var n=this.state.status;this.props.in?n!==d&&n!==f&&(t=d):n!==d&&n!==f\|\|(t="exiting")}this.updateStatus(!1,t)},n.componentWillUnmount=function(){this.cancelNextCallback()}

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (37027), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	117064
Entropy (8bit):	5.465187049591103
Encrypted:	false
SSDEEP:	1536:lY7fhD3WXTHf8wz8/8yOwopNAKjPvd1X+mtUbrmsLvxVhSKJuWjnzMm4wEWNDlX2:JD/523olTXavxb7YbW3SvijEjzh5
MD5:	FBFAA1C208391C23F559281C51A81DEC
SHA1:	FB94237D7A7F0C621ADE45D6B2279DA21C8DABFD
SHA-256:	96F1446D38187E861738FD309DCB68CAD7A0061DCF0C6DA11D4414B4309D7C48
SHA-512:	C2FEEF445A9ABB2F90A7F13A1586FA4159517873E0C247E05C526C7E1CAB6A79DB5DBF008A30ACC61158B9BA4AD1A7EC84570A2CD993176F677CE4E63C3083E5
Malicious:	false
Reputation:	low
URL:	https://ads.us.criteo.com/delivery/r/afr.php?z=ZiJt1wADKQUDihYeAAH4gUQ0BldrvpnnQt6NEQ&u=%7C0mn%2BJyOlAeei%2F7LXkfWDtZNRGBAfQjspV%2BxzGLyskh0%3D%7C&c1=jWCgqsKSUoXC60NcOL-y1fMy5lnEQC-emXTZYJoBCoL4aT06iT7RqKm1slCvpf7kti9G_6O_UP5p12Z73twtJHwJHoh6Za-1SWIuyjnMa7oT0qNfGkgZ83AQipjktRKLHt0m-GdgI5nqczNmE8bjWEsTOJ1uOHZorOe-kHaKYwbgiS6-yBNciVOGyqjKQGu0ZeZBbziUEekgFLQcG31jwdyfP--585CwK8tIKOdvtPmJ0kO2jpeBbSbLvZL1_RYpcZmDXXaGlu810VaDj4xzpJXLqyankCZ5FwX7lVs39_1EXY48JFdR_ztWm00U1cqhS3UyH2o_UINSoz7UmB_Nm3fyXAg0cJXA-XNNDRvRQTJHIKbQ1jKZK0cRu4ydgyZFcICtKAxdebqufv4SmGoTwvcZqNFyllPUj5xCxSbS8Tc-DdUcIU-bH_UA7H5Ddz5ztoMw644F9FxEhFTl8Tz773ZbBX1lgWRgCaOsMo7LP-6E9e3r1wMyPI_pGyb_I1pWUGJMzYswCmxY2Iok7MATu0Yscd6DbKYDdf6Pgm1QZkd7QLWtXciZJ0kLZLanKiGWccgrOEkDk3gYGUf7QhKotABBWn8LCTX2mk6yesMjrYlAAm_P02L25mPXUgmlLbcyNQgPlytJEDB2sE-uyrZSOw&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCw6l9120iZoXSDJ6sqMwPgfGHwAycge-wXKLKp6p0wI23ARABIABgyQaCARdjYS1wdWItMjY5NzY3OTUxODUxNTg4NsgBCeACAKgDAcgDAqoEqwJP0BoA-WBtNwrPzv1WiWmeslfatVFSCscS5LcFTzK3qiHSqIfu4NZqI_s7Pw9H7gzm65Lx5rXwMqYcCZb4s0Jph7HhESxHiRocuxxzxmMgiTeljz12qVX5WlwK_rnJQX-5NPkJpvjtLRQ5W_jaQGns0qK9za0_TRt_2SsmIL0lgKaKQlxSyfDiJCNEzpoU-jwibJUtr1GJ85LSV4FngqpGzcjA-PyJFjgEfSMe8ArzN9Sd6F_a9lGmJg0REOAvIW2FkrjG2xJx2Qb_OIFlDIBHY7uAJCz_bbS4FpVdNt-rncUixzFxnGRbUrKfAJrFNDN3GsaQLqDCzie5Gn7mZBqrwVZvV22atZerkfBoBx-fJt7CZGZnYtR9Vu2Rl0i0O_qOapxkjAh5BSKdFuAEAYAG4vDtld3JgpIFoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiA4YBgEAEyAssCOgmAQIDAgICAoChIvf3BOlilhKPErc6FA_oLAggBgAwB4g0TCOqqo8StzoUDFR4WigMdgfgByNAVAYAXAQ%26num%3D1%26sig%3DAOD64_2BP31eMlfO2EW0KcOKvKAoQseqxw%26client%3Dca-pub-2697679518515886%26adurl%3D
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Advertisement</title>.<meta charset="utf-8">.<meta name="format-detection" content="telephone=no">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<meta name="viewport" content="width=device-width, initial-scale=1" />.<style type="text/css">body{text-size-adjust:none}</style>.</head>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>. BannerId 11239559, ZoneId 436248, AdId 1784039 -->.<div id="main" style="position:relative; padding:0; width:300px ; height:250px ; background-color:#ddd; cursor:pointer; overflow:hidden; display:inline-block;"> <style> .privacy_element, .privacy_element a, .privacy_element img { text-decoration:none; margin:0; padding:0; border:none; } #privacy_icon, #privacy_icon a, #privacy_icon img { cursor:pointer; } #privacy_icon { position:absolute; z-index:100; top:0px;bottom:auto;vertical-align:top;margin-top:1px;

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	41150
Entropy (8bit):	5.32836800322513
Encrypted:	false
SSDEEP:	768:jh1KbpBz/i38NOlPM6V3tqUFIru9FITGH4ARR3iLjZJj1wjOfbXhbNvRfuKLBzd2:jh1KbP3B03t7GZG3iLjZJj1wjOfbXhbk
MD5:	03DD89B74FB02695DAFAD8B06F080B69
SHA1:	9405160A8CEAC347E575DBD0C508321AB5AB37CB
SHA-256:	5B9CFA0283D9A9F6A909DF2B61C9933C11130343F08AEC96CDD8F49C29972526
SHA-512:	F865528394AD972A618ECBD6CDC3555B81F65DDE612EEEFE27EE18761CA1A11B2CA3A52FF090CE0D9B200FB73734AD2CD3D8996CB0D284D2D2C017282461A108
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	112204
Entropy (8bit):	5.490709919344628
Encrypted:	false
SSDEEP:	1536:kB6Wl2DCcDDV6BYr+imdunekzizMiwi0Gbn9s360rAfGGDZEfI0bSVXgpDi2hUk3:ATcbr+i8zMiK8DRhS8Pe
MD5:	B248CC9D0FDEB36BDEB7EFABAD1132EE
SHA1:	1DD76E251409388C3708453ABEB7FED717D5A72B
SHA-256:	A2AA2577C105DAB138246B4E0A1F575B3C92C30D5ACED108D3F73897BD46823F
SHA-512:	95DF8427C66E9F84B01659CAB471278EE86F6FF7A2ACD7491007E43AE4EB3ECB2ABC395AC501FE7F005A0033933A5BA4998A1202C92B039097D6FD480B260E0A
Malicious:	false
Reputation:	low
URL:	https://ats.rlcdn.com/ats.js
Preview:	window.ats=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=106)}([function(e,t,n){"use strict";(function(t){var n=function(e){return e&

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	5.403898309731848
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GT447kL2bvbUZcY5Y2PqVCAREnxTht1DtfCYKO+kFl+o60OBFVfv:WDlf8vT4E+2bTYOCVDnKO+kFlrTOXKbQ
MD5:	52F3DF8848ED64F7E152EC171739B1D3
SHA1:	A11163271B10BEFFF1ED249A912904EE087DA40B
SHA-256:	3E304B4617150D5EC58C2F766594B97CFC83E2400B33434C6273507F226DFAA0
SHA-512:	67C8DEDB6D52E80B686D25810CC5382FA8A34F3BF28759A48678FE7CEB4A13A67A7A699F117E6E3398482A63D7CF079FBF5D7D72F3D68CD62FAF3DF998D6AFF8
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=bUAiigz35TDj7&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-4%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_4%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_4%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JBwkJ7FiZPEfK81JSox-uBUAAAGO9nzxgAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAvBiED","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-4","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain"})

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	170777
Entropy (8bit):	5.065025287283974
Encrypted:	false
SSDEEP:	1536:MZkRHcjqujrIkJLQtS3LPRmup1SsYCGqgLfNJV451/Tn+1Zzfbm/DFR9m+60I8//:CLQtS3tmup1xOSzUsSHsSGH/m9x+Ww
MD5:	68E1C465703B8015C0EC416EAEC7FB08
SHA1:	05B7372FC66325CF2BA76A5105035A970618CF07
SHA-256:	E76B92D662F3A63C81537CBD4B185AF944944F5126695A338A30D032D3478D3C
SHA-512:	EBD953515B18E662ECD871291D6E2425957CE3514E7DF82130400C3ED6CDB48DA1A280C03A9D18978DCB4CE2307F2E56EA331FED9DB10DCC0F9D22A5B166B54A
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-05b7372fc66325cf2ba76a5105035a970618cf07.secure.min._V1_.css
Preview:	{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}body{min-height:100%}article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block}audio,canvas,video{display:inline-block;display:inline;zoom:1}audio:not([controls]){display:none}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}pre{margin:0}a:focus{outline:thin dotted #333;outline:a_px(5) auto -webkit-focus-ring-color;outline-offset:a_px(-2)}a:hover,a:active{outline:0}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}abbr{border-bottom:0 none}img{max-width:100%;border:0;-ms-interpolation-mode:bicubic}button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle}button,input{overflow:visible;line-height:normal}button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0}button,input[type="button"],input[type="reset"],input[type="submit"]{cursor:pointer;-webkit-appearance:

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42138
Entropy (8bit):	5.916367470216814
Encrypted:	false
SSDEEP:	768:dQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtMTDoVVCzu9Wf7qYo/SomRzzII+dmS:KR3cnmCqMf2v/SXS
MD5:	D31CDAF2CC8400F651EF352143ECA67A
SHA1:	9ED60405F3B68417A2039495EB9FC7C9BABF9A77
SHA-256:	C5FAC0AB6CF4B97C1E4478A31128B61E015D3B7C02A67CC876BC270CAB75BA2A
SHA-512:	9BBD1ACE1C9ED62620D909563C4D9E70E628CA4B2A73F406EB2FCFFF1441B78387E4C369D36928690CCC3EB805E7385D50540A1B69080DAA7A4BAEA225B9D893
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1961765009388584&correlator=373946354429396&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cinsticator%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=320x50%7C300x250%7C1x1&fluid=height&ifi=1&didk=2376894448&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1713532353032&lmt=1713532038&adxs=301&adys=2469&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x50&msz=300x50&fws=0&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dconnatix_video%26pos%3Dconnatix_video%26refresh_count%3D0&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=826837274&frm=20&eoidce=1
Preview:	{"/21854935662/justjared/desktop/insticator/home":["html",1,null,null,1,250,300,0,0,null,null,null,1,[["ID=a0851a657bc4653b:T=1713532354:RT=1713532354:S=ALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg",1747228354,"/","justjared.com",1],["UID=00000de1029e4627:T=1713532354:RT=1713532354:S=ALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww",1747228354,"/","justjared.com",2]],[138448668888],[6375283128],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA","CO3dvLqtzoUDFaDNKAUd1UwEVw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOQl_4KwsPJ9J2l_OYNyp_Btln4J_edG1enON0BFzuQR8pfvKcKd5apnGneQ2UTJDwQNDC_TVqb-bil",null,null,null,null,null,null,[["ID=587298d337b0834e:T=1713532354:RT=1713532354:S=AA-AfjYdCb6DRON6I7oXbGE3RbZ-",1729084354,"/","justjared.com"]],[]]}.<!doctype html><html><hea

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (41544), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	116932
Entropy (8bit):	5.3888563241796605
Encrypted:	false
SSDEEP:	1536:JY7fhD3WDdjRLYkjA6jQPbl1XvIELUxVhSKJUWjLzHgTulsm5GRj94VrEwE9NhC5:VrYlPX3Ux93MulVQbniSviNpzh5
MD5:	6934BDF1663226711EFA9E2023C7BF8B
SHA1:	8A8ECC2DD7DFBF8AD4A67ECA186174E998954362
SHA-256:	2238EED939F3478742D595090CDC51156C7EDF03AC5735F03E99735B3693AF14
SHA-512:	AF71BB83BE9FC921339BE1A2FAD7C37E54731BD362F24CA79D1B25D67F65A93643CC21DC3557B8B234BF28DDCC4EC93BD7298774AC60457499782B39C2EE77BC
Malicious:	false
Reputation:	low
URL:	https://ads.us.criteo.com/delivery/r/afr.php?u=%7Cr6N6e7BDQxuDfpUB67Bsh2FSbuxx6EMSSfLzZHwuMFA%3D%7C&c1=m7oIQCLYgBviNiUzyYOc2kjMnk6vmALkFqVtTGkXC3yyQMccv7J0JEqO9lg8q9Dulj9qmJ30sGFDCE3nLTh5pPYWUDYr2yDsb7Arv7h6f0SuYtsA_-vEoVgPDRHEHGt7mYIfwdGm7vO4oYuSVWnHDz0pqr6ruU5YW9IzEjakgA4ZoJnL2h5zddBTdIq0hbAVvruExperAGDtp_PsmGrCv6UDcW9urDnUc7iHIStNQ2sQl-ZcYWUfLImo9Tx16UMRikVvbnEAh94tZ9wZHzlFHP6DBUCcFHyZB4r4UtHiXJ0gOld8t5xgo7mCWSQ74zj4qhGDmrhKErjCGPPX4Pg8_hihZObcTTSAnOPXIJMDV3sIIFDW4ezJWoYF_jHd0Zz5clumlOW6hiMTv4j04oJov3KOY5nfm-lng2dGcpdm6Td7efC4m6nANkSu2NbrAgXQVbuTuHkFHuGHI7d54fj9McOTOhN8sMSTRriu2xj03zf0fj737Jd8Md4-dBDFgt4LytLILwDQz1Zj4ypnvuUf98uSPQfsmY2rha016Vzq5DL8jj9Cj7rydOBsg9hOq6hVaMebyrlaysL1bl6HAA4LiObdixcADausqI7tAd0Ur67NS5_ci5tEB4M5sdchKlOqwT_t_uDgT02SXn8sPc9IYw
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Advertisement</title>.<meta charset="utf-8">.<meta name="format-detection" content="telephone=no">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<meta name="viewport" content="width=device-width, initial-scale=1" />.<style type="text/css">body{text-size-adjust:none}</style>.</head>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>. BannerId 11508842, ZoneId 1707442, AdId 1811900 -->.<div id="main" style="position:relative; padding:0; width:300px ; height:250px ; background-color:#ddd; cursor:pointer; overflow:hidden; display:inline-block;"> <style> .privacy_element, .privacy_element a, .privacy_element img { text-decoration:none; margin:0; padding:0; border:none; } #privacy_icon, #privacy_icon a, #privacy_icon img { cursor:pointer; } #privacy_icon { position:absolute; z-index:100; top:0px;bottom:auto;vertical-align:top;margin-top:1px;

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuSuBpDe_ZdO6rqsjycLwrSeKqxeCASsjukjPbM0yiBBLDlYnud0tuMqBe3mJZLwf1WYc8g_RtkVVfF2GpfKqNoCVZcidPtcNangGptDJKyetz_qAIaKn8F-mkaNKLUxfEQyMA6yllESsYMTg&sig=Cg0ArKJSzFnSvGYTcNu-EAE&id=lidar2&mcvt=1458&p=0,0,90,728&mtos=1458,1458,1458,1458,1458&tos=1458,0,0,0,0&v=20240417&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=34&adk=1355889453&rs=6&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946522500&rst=1713532397490&rpt=27911&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 364x180, components 3
Category:	downloaded
Size (bytes):	20776
Entropy (8bit):	7.948658456386121
Encrypted:	false
SSDEEP:	384:cDL2Tj0wbt2h3Mqbyr4dWC6MdTuje1DXtCiL3YbLe:cvwjHYVXK4dWC6sT51DXtCizaLe
MD5:	2E152D71EF27E3E93C2F06B91E52B631
SHA1:	F90FB1FAF2F4E6E055C80254E61534AEE56639E7
SHA-256:	17DA455B14F51124CFE1C9787823535F9C9E1655338D22D26CACC0F08289B2FD
SHA-512:	58B3EEB8F366F3EC38172433FC803F82FA70804164B9F92A388D5C9E446593CFD20D3DCD6848426C73D175528BCF6CC4436D45ACDF09656FDE37BBF4AA678009
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/img1.jpg
Preview:	......Exif..II*.................Ducky.......d.....2http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:FCB5FEBCB3B011EEB93B8921D7C19B7E" xmpMM:DocumentID="xmp.did:FCB5FEBDB3B011EEB93B8921D7C19B7E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FCB5FEBAB3B011EEB93B8921D7C19B7E" stRef:documentID="xmp.did:FCB5FEBBB3B011EEB93B8921D7C19B7E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................................................................................................

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-hzO_O-m8TG6iSewK5gxT49SGTn5Bf6fBKuAdLA
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	75
Entropy (8bit):	4.612040277613463
Encrypted:	false
SSDEEP:	3:zXMyWDq+EENPVihI9kBbZ6iFq:zXJWDq7ktHuB96N
MD5:	2E3D17CE9023BE2C1313C02113F5C568
SHA1:	57C203DAB8D62D2D09EE8B5304F9C109FDE799CA
SHA-256:	32DCB7B5D0E79583353A56225E4D8097E004103102D584E245D1B96547F9948D
SHA-512:	053AC338B25E86F8DDCCF1B915C35F8FFC6A1268D30AE28D1E8800360114B7983C254BFE07D781A1B46F79F4C9E4543AB8EFE876E70BFD8CCFF8650A4016DC9B
Malicious:	false
Reputation:	low
URL:	https://auth.instiengage.com/auth/index.html
Preview:	<head><script async src="./authIframe.js?v=1"></script></head><body></body>

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563), with no line terminators
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	5.105230226025429
Encrypted:	false
SSDEEP:	12:2JqxHuSm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2Jifm8uVCxwgxkHEZ1VZflok
MD5:	DCF801A108C2C3DD9E72254C90C809E0
SHA1:	993AD9BAEFC2623385EE43CBA00C866296A962BD
SHA-256:	C799D072BEB1DF7364ADB1DF56B00EF90515068C7872C8BB5A08D97D93A41245
SHA-512:	A0B4581DC53E1055D51A334F68AEA154C1B6D46C6CC29F3E38D838A23A6F8E9D205C86C74DC74EA8726362FC68989F2DBCF1D0DCDA071550F873329AB6169B39
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/70fb13d1-ab65-42ac-a7ca-0b4e680d5c92
Preview:	(function () {try {const accountId = "70fb13d1-ab65-42ac-a7ca-0b4e680d5c92";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=index&gpdr=0&gdpr_consent=&us_privacy=&user_id=ZiJtysAoIp0AACTzAsBeOAAA%262584
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:T:T
MD5:	1679091C5A880FAF6FB5E6087EB1B2DC
SHA1:	C1DFD96EEA8CC2B62785275BCA38AC261256E278
SHA-256:	E7F6C011776E8DB7CD330B54174FD76F7D0216B612387A5FFCFB81E6F0919683
SHA-512:	3C9AD55147A7144F6067327C3B82EA70E7C5426ADD9CEEA4D07DC2902239BF9E049B88625EB65D014A7718F79354608CAB0921782C643F0208983FFFA3582E40
Malicious:	false
Reputation:	low
URL:	https://c2.eu-4-id5-sync.com/
Preview:	6

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33941), with no line terminators
Category:	downloaded
Size (bytes):	33941
Entropy (8bit):	5.292817700808588
Encrypted:	false
SSDEEP:	384:E44Q/X+6ozy3rPqtIIf/PEWIVd6UQ4CQLoK5EfvLv93qa7gKMbIap7BmS2lWfkGe:SyrIs7eQE/ZhXllWfiZSK
MD5:	062AF624516CD65261ECF703DBE36AD8
SHA1:	34AEA18A5467645A6DEAED4AE0B62650BABCE688
SHA-256:	AA2D19211E1274B966D08B5FAD74FD1376F3789AD0D782EB5BD97F01CBC3097E
SHA-512:	35AA86A5AECE6B3A2A239BDEBC96CE588D0A185B295BF1BC51B81264C79DB8FE2485156C756D57204158D22AEC90A682D719BE30563AAD405D18C16CD8FD3B8A
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.vendors~audiobooks~castbox.main~ch~creator.analytics~creator.ch~creator.ch.des~creator.comments~crea~60d4e606.5fba21ae.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[3],{1041:function(t,n,e){t.exports=!e(816)&&!e(780)((function(){return 7!=Object.defineProperty(e(1042)("div"),"a",{get:function(){return 7}}).a}))},1042:function(t,n,e){var r=e(852),o=e(815).document,i=r(o)&&r(o.createElement);t.exports=function(t){return i?o.createElement(t):{}}},1043:function(t,n,e){var r=e(824),o=e(781),i=e(1147)(!1),a=e(940)("IE_PROTO");t.exports=function(t,n){var e,u=o(t),s=0,c=[];for(e in u)e!=a&&r(u,e)&&c.push(e);for(;n.length>s;)r(u,e=n[s++])&&(~i(c,e)\|\|c.push(e));return c}},1044:function(t,n,e){var r=e(746);t.exports=Object("z").propertyIsEnumerable(0)?Object:function(t){return"String"==r(t)?t.split(""):Object(t)}},1045:function(t,n,e){t.exports={default:e(1149),__esModule:!0}},1046:function(t,n,e){"use strict";var r=e(909),o=e(637),i=e(1047),a=e(851),u=e(609),s=e(1154),c=e(945),f=e(874),l=e(347)("iterator"),p=!([].keys&&"next"in[].keys()),d=function(){return this};t.exports=func

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=159320&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEMb0jRzCLadNKj4MBxK3qsk&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	4.1345195377278445
Encrypted:	false
SSDEEP:	3:YWQRAA2nvX0LKRFSABHY:YWQmvv/dxY
MD5:	C466BD434DB29CF02793F8522FDE5F3A
SHA1:	F39A01BB0264479DBE9A4BFB0B80AE0B3B0E8154
SHA-256:	D0D2E098CD489EF7BC528C86DE8AB5C51B5D6CDF9B76A8B08766036992F0D2F4
SHA-512:	81EEC1FC87BBC2A95B34AFF28CBBC6D13EC6C9E78BF76DD6C586ADB48D4E01533D97F1A56BBCC60BC386DF78F6A85252BECD71A945B6AA014A7717EA61CB8087
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0010b00002cG8kQAAS&src=aps&ver=1.9.0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Country not allowed"}

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36134)
Category:	downloaded
Size (bytes):	94413
Entropy (8bit):	5.593715778487336
Encrypted:	false
SSDEEP:	1536:bqnOp1Uu8rygB7n3jYu9naB1TCC13rLZyml62oPI:Jp19uK+8eI
MD5:	4AD5435A15C0EBDA3E8485B8F17B3FBE
SHA1:	6572B1576F249D2CBDFFBB00B336D2E0E51E91E7
SHA-256:	00862A0E774CDFA5460FE313227EAA2473C7F8AF6610067E14543A416CF06DF4
SHA-512:	CA64EDFBE7A0D6D7A2541943C3FE4FD709CB634F5F0AED8478AB2F079F2145337EA4D010E4BA85A3953B816DAF3A8F92B0F15A0FFBF3803C0B098DB86232DD36
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15438)
Category:	downloaded
Size (bytes):	15678
Entropy (8bit):	5.291511704394912
Encrypted:	false
SSDEEP:	384:Hon3lnRDR+BXVgcgAAhClrXUISIH/aG12cFo6P:yNRDwBF/nO+rXUIpaG20
MD5:	8C01CAB23AF3AEE9E033F43DE7CABA28
SHA1:	57FEC76A5CCB680467A7A4F7294D3622E4CDAAB6
SHA-256:	EDBFEB17F71B9689F35B27C335DE9ADC05C32DC871F4BBE952E9CAD0CC03D194
SHA-512:	021F7CA4343F0801CAC9B2DEF82504FA76B616EE8F12FEA4D36E41F690AB7F3AB031BD8C41A13848783C7F4C90B6F7A699E1A6C764CDBB96FDE28F70D36900E0
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38-dmp.js
Preview:	var InsticatorApp;!function(){"use strict";var e={d:function(t,i){for(var o in i)e.o(i,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:i[o]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};!function(){e.r(t),e.d(t,{COOKIE_NAME:function(){return n},REFRESH_RATE:function(){return r},cookieInstance:function(){return g},getSession:function(){return s},getTLD:function(){return l},isSecure:function(){return c},reassembleHostname:function(){return d},sendPageview:function(){return u}});class i{constructor(){}static getReferrer(){return document.referrer}static getUrlQuery(){return document.location.search}static extractHostname(e){let t;return t=e.indexOf("//")>-1?e.split("/")[2]:e.split("/")[0],t=t.split(":")[0],t=t.split("?")[0],t}static UUID(){let e=[];for(let t=0;t<=15;t++)e[t]=t.t

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.5982092635441285
Encrypted:	false
SSDEEP:	3:PouVWJhquHbx98Ba:h4hqIFSI
MD5:	5CE66340590B52052D03AE4A277D60A7
SHA1:	F3651F18598B86CE249A2F41D16E541546913F99
SHA-256:	0391042E0E111437F4A2DEC7560098DBCC04B68DF753281B207B3C956430C89C
SHA-512:	84A6E5078F6A316FE041E9C729DEBBE5778E87CE99EA493EC383F33A74CAE16AE0C6E1F92F1BD1A6DD000924FCFD88375B9313715D4F452FBD87D0982738297C
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1713532373292&pubconsent=&euconsent=&hasConsent=1
Preview:	<!DOCTYPE html><html lang="en"><body> 101--></body></html>

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2024 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	63956
Entropy (8bit):	7.977531269061113
Encrypted:	false
SSDEEP:	1536:EutUwdltWLwu5m+uZwaTJk98gQkwuHuxzP1jcP96heOk:hOwpWLvbuZwaW3QiHCzPCOk
MD5:	F6339B4618E85DB25D60DB30D0F056E7
SHA1:	FE88B2CA6D62B11E353A985A8756D2F80C1C2FC3
SHA-256:	F462C34B2F3D0419A4D9131C91AA8F27AE6AE5EC65612BE0E3462D463D6C2A38
SHA-512:	BC35534C34E1AE942FD040EE88E202F16CB3B4D5BB635FAB1C1B201D955E9463A0E8191C753ABDA696C00BDA20EE30375E145647DCF1A0680336FBA1493725CF
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjaredjr.com/wp-content/uploads/headlines/2024/04/iain-armitage-looks-back-on-young-sheldon-after-wrapping-series.jpg
Preview:	.....6Exif..II*.......................2024 Getty Images.......Ducky.......d.....whttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" photoshop:AuthorsPosition="Stringer" xmpMM:InstanceID="xmp.iid:FE89AD8EFD0C11EEB8A4AE9FEB29CC75" xmpMM:DocumentID="xmp.did:FE89AD8FFD0C11EEB8A4AE9FEB29CC75"

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://ids.ad.gt/api/v1/ppnt_match?uid=part_d3pYBt4hoB3q&ev=1&pid=562316&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID&gdpr=0
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12628), with no line terminators
Category:	downloaded
Size (bytes):	12628
Entropy (8bit):	5.458683802754955
Encrypted:	false
SSDEEP:	192:t2MTJLggg1CYe4jn5wkIE9Zg05wkIE9xHkfAPdSqyQ49Vcxuv+:EkSggUYe4Cw9yw9qfAFkQa1+
MD5:	208C2C49B2B280376E2405B61587027B
SHA1:	F334134BA3F971490723A397FE7A025E633611CF
SHA-256:	556ACC8D50BFAF27E06B182DACFFAAF2A7E0DCE6A92022454DDFEA05696C2292
SHA-512:	45C8C8D06A3BC9350859CF3F5D9196D2C219463398E6FA2D12185EB38A475B509C0768456E3E5E7C55DA07B27698DFA454F2761C0F0B069EE11CF87834A6D5FA
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.vendors~castbox.main~creator.analytics~creator.ch~creator.ch.des~creator.comments~creator.ep~creator~546696e9.f3d7572b.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[6],{313:function(e,t,n){"use strict";var o={MAC_ENTER:3,BACKSPACE:8,TAB:9,NUM_CENTER:12,ENTER:13,SHIFT:16,CTRL:17,ALT:18,PAUSE:19,CAPS_LOCK:20,ESC:27,SPACE:32,PAGE_UP:33,PAGE_DOWN:34,END:35,HOME:36,LEFT:37,UP:38,RIGHT:39,DOWN:40,PRINT_SCREEN:44,INSERT:45,DELETE:46,ZERO:48,ONE:49,TWO:50,THREE:51,FOUR:52,FIVE:53,SIX:54,SEVEN:55,EIGHT:56,NINE:57,QUESTION_MARK:63,A:65,B:66,C:67,D:68,E:69,F:70,G:71,H:72,I:73,J:74,K:75,L:76,M:77,N:78,O:79,P:80,Q:81,R:82,S:83,T:84,U:85,V:86,W:87,X:88,Y:89,Z:90,META:91,WIN_KEY_RIGHT:92,CONTEXT_MENU:93,NUM_ZERO:96,NUM_ONE:97,NUM_TWO:98,NUM_THREE:99,NUM_FOUR:100,NUM_FIVE:101,NUM_SIX:102,NUM_SEVEN:103,NUM_EIGHT:104,NUM_NINE:105,NUM_MULTIPLY:106,NUM_PLUS:107,NUM_MINUS:109,NUM_PERIOD:110,NUM_DIVISION:111,F1:112,F2:113,F3:114,F4:115,F5:116,F6:117,F7:118,F8:119,F9:120,F10:121,F11:122,F12:123,NUMLOCK:144,SEMICOLON:186,DASH:189,EQUALS:187,COMMA:188,PERIOD:190,SLASH:191,APOSTROPHE:192,SINGL

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	147378
Entropy (8bit):	5.478564726334709
Encrypted:	false
SSDEEP:	3072:QRjgy8lM0CRRKKDRntCQ/3nlTSZDqSQYzxqIi2QEvL:Wjz8lM0CRRrRntCs3nlTSZWSQN2QAL
MD5:	5018C5828675BD01CF8750C9B355D659
SHA1:	3834C216EDD44682E6BB2C82B1C9E537398D6359
SHA-256:	8138153DBF293964ABE6C60C3AAC3D75EB854EAB6556121B2817A773E981CFB7
SHA-512:	92B9D2C34CC4BE4DFDD6D788F744EE62C88F643AC278B683D1489F4702557F73F616CCAAE8D9800F5C7E5FBF0FFE62F48030F5D14D3176C9784083BD96195832
Malicious:	false
Reputation:	low
URL:	https://s.update.rubiconproject.com/2/2.123.0/main.js
Preview:	!function(){var t,e,n,o,r=(t="function"==typeof Uint16Array?function(t){return new Uint16Array(t)}:function(t){return new Array(t)},e=function(t){return t.replace(/[wxyz'"\\\%]/g,(function(t){return{w:"'",x:'"',y:"%",z:"\\","'":"w",'"':"x","%":"y","\\":"z"}[t]}))},n=function(t,e,n){var o,r,i,a=[0,0,0,0,0];for(o=0;o<e;o+=2){for(i=(t[o]<<16>>>0)+t[o+1]>>>0,r=0;r<5;++r)a[r]=i%85+33,i=i/85>>>0;n.push(String.fromCharCode(a[4],a[3],a[2],a[1],a[0]))}},{encode:function(t){var o=[],r=t.length%2,i=t.length-r;if(n(t,i,o),r){n([t[i],0],2,o);var a=o.pop();o.push(a.substr(0,r+2))}return e(o.join(""))},decode:function(n){var o,r,i,a,s,c=(n=e(n)).length,u=[0,0,0,0,0],f=t(2Math.ceil(c/5));for(s=o=0;o<c;o+=5){for(r=0;r<5;++r)u[r]=n.charCodeAt(o+r)-33;if((a=c-o)<5){for(r=a;r<5;++r)u[r]=0;u[a]=85}i=85(85(85(85*u[0]+u[1])+u[2])+u[3])+u[4],f[s++]=i>>>16,f[s++]=65535&i}return c%5&&(f instanceof Array?f.pop():f=f.subarray(0,f.length-1)),f}}),i=function(){function t(){}return t.pF=function(){},t.fc=functio

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	4.191050513183573
Encrypted:	false
SSDEEP:	12:5lS5GIHHGKoBKOGPYr6GXcVXGhQ084RswfkRVNyv:5A5iKoB1GAr6GsVbFwfj
MD5:	624DFE3760066DE15BFD7ADA08771E45
SHA1:	E3ED99E1467D8260FAC9AD4FBB94084F43758F5F
SHA-256:	D3BE59542DCD21B943B82E605C37D4667B23BA0D3E6295CEA9481E0A93E0604C
SHA-512:	1603AD8B5D053B5BEFA41C4AC557F2E55800DA4C7847F96DCE5CC92420FF52A388B9CA2C0DADAFCC562FF1DE42A7306CF1B626F977147503FA3DB5A53EAAAC37
Malicious:	false
Reputation:	low
URL:	https://ins.connatix.com/17fbf58b2978e65fea51fb90a9bf76aa/insights.bin
Preview:	.". bc676c8b2f9bf9c46b8c3d3dd0bf8405.". a4500e24fe0840898f6424383cc390e2.". d521261bb1cba81ae96a40f4c0fd7bdb.". 658c88557a9dd8a08b7107b883c206fa.". 67e817c4695457b6b8609529875eda63.". ac4aca3a5539bd59ec0c8a909d1822d2.". 0ec2eae5fa0220032a0bf9a39e2a90ff.". 32ac77f1a76acf61853d5d493580d7e3.". bcb53cab827ccc66ef6c4dc088cff36b.". 79b8d63a93a3398e40e79b53c3685f7e.". fa0975e684c93c74710084ceeb485cb7.". 9ef16074811574e0cc88decb8ebeb9a0

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	868
Entropy (8bit):	5.086762580507019
Encrypted:	false
SSDEEP:	12:YfCGkf0Oyc5qgJfL45dh3NKIT/CI83YCI836wm6QbjAMR80//zZI6kcxJ/1PCgK8:YfCGw0OyCdJj4511bQus8b/zkE1L
MD5:	142C5DCC26807D73F52380F6C91C613B
SHA1:	0D13E6BD77596FB3BF8976DE851372D3C5AE5466
SHA-256:	9B073E9D7975229FE07656284DDBDB82E6299B744AFFC2E54919341F590CA8B4
SHA-512:	1AF56209D921B75913121276C917D70C40E0B4E6FDCCF614DDCB3877865229D4E0E3DAD6829467F1163502F6A344797FC537DD4BEC2FE3DE51CE78061E110327
Malicious:	false
Reputation:	low
URL:	https://contextual-analytics.wunderkind.co/api/contextual?url=https%3A%2F%2Fwww.justjared.com%2F&website_id=3479
Preview:	{"dataAvailable":true,"status":"PROCESSED","pageUrl":"https://www.justjared.com/","uuid":"0b903257-17ed-437e-861f-d866922d187c","verityData":{"processedAt":"2024-04-18T15:18:31.905Z","expiresAt":"2024-04-18T15:48:31.905Z","languageCode":"en","iab":{"v1":[{"id":"IAB1","category":"Arts & Entertainment","score":0.92871094}],"v2":[{"id":"432","category":"Pop Culture","score":0.92871094}],"v3":[{"id":"432","category":"Pop Culture","score":0.92871094}]},"keywords":["celebrity news","gossip","entertainment","jared","princess catherine","clubbing","manifestation","power","illusion","family tradition","royal engagement","wife","new cover story","break","music career"],"threats":[{"id":"GGT9","category":"Medical","confidence":"VERY_HIGH","risk":"HIGH"}],"sentiments":[{"sentiment":"neutral","score":0.6},{"sentiment":"positive","score":0.4},{"sentiment":"negative"}]}}

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1104), with no line terminators
Category:	downloaded
Size (bytes):	1104
Entropy (8bit):	5.332203906892627
Encrypted:	false
SSDEEP:	24:kRUM1GXpuYt7/jJcgGnBtdLyjVrG83NRjLGKK+uYOFpQ:ke7XyvLdLGTJvuo
MD5:	0DE79CCD5EDCCC2BD7DBE6E60392A6AA
SHA1:	F774658FE06E19DD63ECB82BC06C04D29D1298FF
SHA-256:	60ADF7592AB29BCCE7BE0E12667764D267592576FCC0A7C19BE456610A1C0B2E
SHA-512:	CBB9D0C2C6ACEE570E9B069111FCE4C012382B8C513487C1B95CB373613577C62002057A0593366D8B98784BB2DB75EB2C1062A2B0775B99957F3A47E61F19D1
Malicious:	false
Reputation:	low
URL:	https://cs-tam.yellowblue.io/sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drise.com%26id%3D%7BpartnerId%7D&gdpr=0
Preview:	<html><head><title></title></head><body><img src="https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E" style="display:none;"/><iframe src="https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID" style="display:none;"></iframe><img src="https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent=" style="display:none;"/><iframe src="https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=" style="display:none;"></iframe><img src="https://sync.1rx.io/usersync2/rmpssp?sub=typeaholdings" style="display:none;"/><img src="https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID" style="display:none;"/><img

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
URL:	https://match.justpremium.com/match/gg?ex_uid=u_bd73a985-3ef7-4416-a679-3a9309181613
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.386842188131012
Encrypted:	false
SSDEEP:	3:AVhcRYD:AVhcRm
MD5:	09F71EFBED1212B64851B5A8032EC26F
SHA1:	EC10DB2BD5556DFC406F32AD9DF9944D11B14233
SHA-256:	89F2D4E6C7A6C41C13C2E7A75E526AA60B9D5274FE28B2D82801C6BEB6BEB879
SHA-512:	48B0B3A340EE2DC39A346E8CE4C67697F166362CEFC60247848858A011C23C0E14C8914B90BC431CC063EE96FAB113064EA2DBC36988B2CBFB5F54183AA67E1E
Malicious:	false
Reputation:	low
URL:	https://csync.loopme.me/?pubid=11712&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Floopme%3Fchanneluid%3D%7Bviewer_token%7D
Preview:	upstream request timeout

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	dropped
Size (bytes):	1526
Entropy (8bit):	7.468388899138082
Encrypted:	false
SSDEEP:	24:3HJPDX1B1AM/I/9k9lLGalkOweE00jl9W7knBJnEqFiOyxc4hRKlSbA66pgFLtym:5PDXtdQ/mu6kHe8zxcqAVKlUA9utybK
MD5:	F90F22F880DF4AE94EDA7CD8C107ACB5
SHA1:	E6C43C70B14D5591D893A53BA74C44CE4D84C09D
SHA-256:	8EAA3BE9055370C233D3DF6B3BF088768915C503748CAF2CFF104298AFEE9934
SHA-512:	EC785D0DACFC50CFE6015BBF76D4521BF0D57FCCEB3F5B68CAB0AC21305939815A28C346464229190DFD341F46B4B5BBED4D9B84A4E6EAC0DE74392690F725CA
Malicious:	false
Reputation:	low
Preview:	GIF89a........v.............................X.....8\[..V...........-..........&.V..+E..J.~.....z.....Ht.Ai..-....4U.#8.;`.....3.........................................................................................................8......................1.....................................................................x.................Ak@..............z...S.b....U....d.o....-.........x....\|....p.....v.Q...z....)..N......S.........u..t;...:.6X..1.)A..?P..S............_....s...S..H.....i........l.....>..:T..g...R.2O.....v.g........./..-.. ..(..%...J..9..:.....M....0.....0..1............y..\|.h..l....e..e... j.m.p.D..q....!.."....%...P.y....\.......g........^3...j..4..6..p.........4..R.....q.p.I...>d.l..z.X.........n.X....&..{.N......V.............!.......,...............H....!X.......iy.....,4<...D...a....I.+.<.............7........D...i....8...b.....j.la..4..Z.\.....lBI...b...;...]#..A2.&.k_...W...Y`..X....6....,P7#......@z,..l...+K7.E.K4...(..@l...o{

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1&gdpr=0
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	173
Entropy (8bit):	4.968039503201119
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBYNEX5N6LIILmd6E+1dTMqfLpFGlMHMfO:8WiIUemo/H1fCYKbY4DCVeYNEcRv4qfX
MD5:	63974FB87796814D56BAB70A451EE009
SHA1:	9DDA5BD303A0C6D20FD9EFC1CA2EE35901C20248
SHA-256:	AA58565A7119BD5151CFFA964D945C53E46E02F2EA0E49DA28FF729072B40A65
SHA-512:	16987CE05EA7B0DCDD28A4B9E664EC8E4D4D7CF5BBEADF4244BC06684BC5AED63D01FB5E33FD34CC811A8032F93DF2A85F31F1EBD8337FE11DF9343AF8F431E7
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=3&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22photo_Top_Left_160x600_OuterRail%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fadhesion%2Fphoto%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%2C%22vendors%22%3A%7B%22arcspan%22%3A%7B%22data%22%3A%7B%22default%22%3A%7B%22site%22%3A%7B%22name%22%3A%22arcspan%22%2C%22cat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22sectioncat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22pagecat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22keywords%22%3A%22Outlander%20(TV%20series)%2CTony%20DiNozzo%20and%20Ziva%20David%2CJamie%20Fraser%20(character)%2CClaire%20Fraser%20(character)%2CEntertainment%2CTelevision%2CDiana%20Gabaldon%2CRichard%20Lewis%20(comedian)%2CavM7hHWe%2C8FWC3Bns%22%2C%22content%22%3A%7B%22data%22%3A%5B%7B%22name%22%3A%22arcspan%22%2C%22segment%22%3A%5B%7B%22id%22%3A%22640%22%7D%2C%7B%22id%22%3A%22432%22%7D%5D%2C%22ext%22%3A%7B%22segtax%22%3A6%7D%7D%5D%7D%2C%22domain%22%3A%22www.justjared.com%22%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22ref%22%3A%22%22%7D%7D%7D%7D%7D%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-sharethrough_n-minuteMedia_pm-db5_n-Ogury_ppt_snb_cnv_n-nativo_n-Rise","cb":"3"})

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	75
Entropy (8bit):	5.405159523684984
Encrypted:	false
SSDEEP:	3:YQ4DBaBHfnVA8iQxI5wLlCSKQn:YQ4Dcx/VA8igtLcSP
MD5:	C32096F89B8E2B97536A6C9F9BF55509
SHA1:	25B92D9442AF571347442CC638BE05CBEBB4DEB1
SHA-256:	7B4F95747CA128478E4BF67459266CCDA766953F32F45625B1B1EF95A49C42FD
SHA-512:	1252F88204EF7DBEE31A78F1A7FB9D0EBECAEC936A378309E0BF45DF68CC8B86E92307637BBE8F4CF75F25B2F7FB72241E892E1A0C5119BBE4C5D787249AC612
Malicious:	false
Reputation:	low
URL:	https://idx.liadm.com/idex/ie/any
Preview:	{"unifiedId":"5fe0TfrSxK7wTOnPJAGbUcu4D4Mv1UTEej83pG2QP1h7ZHwvzl7DmpJSd2g"}

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 276x323, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5860
Entropy (8bit):	7.968785725646378
Encrypted:	false
SSDEEP:	96:sRRm0PJfxv9nx42hsgEn8TeIRCT7tK80ZdsWYwwS17XCoSfH/VVHTQxhP+HM/1zv:sHmMpvNxTEnlJ1MYk1FAf3HTQxh+e3
MD5:	DA05B0F72EE1A0B576188D09E9976290
SHA1:	2E5726A81F8A6AB381AD80F155136C3D98D6C2BC
SHA-256:	AE16507970BA7DFD528254834439541145237AF7DC678FD4A1114A12B64D3C76
SHA-512:	848C15238B91B2C6CC1EB1C17A7190300724C95CC36362941A2178566D8DB780ADDBCD2DD55039A13004A12666DC5EBE1709B695568DC1AA624D651192861C5A
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400013326001_BLACK_486x684.jpg&v=3&w=400&rid=6&s=9hYvP-wlIwvqwzpIBjBk90eg&b=400
Preview:	RIFF....WEBPVP8 ....p......C.>m0.F.#"!..9...in.o.....b.....?.........N>...R?....9.........=..L\|L...%1.va..~...d..[..NE.....B..../x.>h...-...(.~.".5.C'.....61......7....d...I.y..o...t&c...D.`P..'....=.....g..d.......T).....<!P..(".Qo...1.^.IrA....#......O.P..l2.:..T.93Y+..._..>... ......t.a.T)....`O....{.9jx....X.=.....Zf.......O";I...4.....e0.&Y...%P....Wx@l^7..Y<S....#...X.C.<...._A.c]O..R....B..'..%.B./..u\s...x....?..6O<.bJkb....+>.{..u..&.o..u.6+..(w.3B\|...B...Y..a........!......Zn.....~..K...^x&...L...c.<<Vj'.'..p.o..>]._.AJ.d.l. O.x....L?..zo~n...s79.D.j..1c./.5z..8b..`...Z.,.C...N.>.w.{.'....;.....iq.)Q........T..........*...'k?o..~qx......e.-\x%...(...?(...[...g%.....Ij%..v....A.....`)e.>.C.?.I.{../.^..........)4n~7H.......`.F{...AB...a/.....[...}..y#........A.1....D$...D...m.\...zT.Os....CN...F.%..p....Q..:w....@......c.koa.R...U.3.Z$[..}.]..+W..?.....j..3...)J....c0&.w7.4.H..xOR....P.i.).....%.t`E..M.Z....2.#.&.\|..

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18528), with no line terminators
Category:	dropped
Size (bytes):	18528
Entropy (8bit):	5.178030901198306
Encrypted:	false
SSDEEP:	192:WFhroKnCJRcX3UO7OAJo7qJHiGi5onEIEbb4l:WFVR7u7qJV5l
MD5:	BBB560505947564876B2E83AD10A33D6
SHA1:	60AD546F83FB9463ADEDA8EE9EDFBC7AFC4FC194
SHA-256:	540833D3477DBDD8BB1D2DC87E55788106F77A3B076139FAE4AFA792E1383592
SHA-512:	6C8CBEE62ED5AD693738B1177B3CC7C3450EB39A740A35D93055BA2F615466FA235BDF49D5B76D26D336456E6831EFE85D0A6BB138CA6D9599771E9962A659A9
Malicious:	false
Reputation:	low
Preview:	#INDmenu-btn,#INDquickAccess button{position:fixed;height:auto;width:auto;cursor:pointer}#INDmenu-btn svg *,#INDmenu-btn-moveArrow :first-child{stroke:none!important}#INDpopup,.INDhasDragTooltip #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,.INDhasDragTooltip #INDWrap #INDmenu-btn:hover #INDmenu-btn-moveArrow,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:after,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:before,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:after,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:before,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:hover #INDmenu-btn-moveArrow,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:after,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:not(.INDbtn-loading):focus:before,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6111), with no line terminators
Category:	downloaded
Size (bytes):	6111
Entropy (8bit):	5.564140448449155
Encrypted:	false
SSDEEP:	96:K/EkLbbNvCl2xQy4VcqIp88ZmDHYDUAQliyCLFP5+fyJS0huD77Rvra9SA:K/l9vCl2jqcvZmDHYDUAQBTyJRyvud
MD5:	9CCEB325FD4036A89590E2E0A8B519C5
SHA1:	31757218E893562FC7C851BE9182EFF4DAC99EA7
SHA-256:	1E2D39E8D68A0A7F60EE390BC5BD26C9AF28FD4B43F14A84A929B212270FBB77
SHA-512:	628D946855363821D5174A6D1A924EC9F225937CAF7A948EADE2972D49774295CE09E45434F5E43A0815E7DE525FBABB67217FD74BEDB38CF97C78052F47172D
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/scripts/0120/9357.js
Preview:	if(CE_USER_SCRIPT=!0,"object"==typeof CE2&&(CE2.uid\|\|CE2.data))throw Error("CE: multiple userscripts installed");if((CE2="undefined"==typeof CE2?{}:CE2).userDataToJs=function(t){for(var e=[["uid","uid"],["snapshots","snapshots"],["status","status"],["flows","flows"],["sites","sites"],["USER_SCRIPT_VERSION","updated_at"],["__CE_HOST__","ce_app_url"],["COMMON_SCRIPT","common_script_url"],["COMMON_SCRIPT_SECURE","common_script_url"],["TRACKING_SCRIPT","tracking_script_url"],["TRACKING_SCRIPT_SECURE","tracking_script_url"],["AUTH_KEY","hud_auth_key"],["HUD","hud"],["GLOBAL_IP_BLOCK_LIST","global_ip_block_list"],["IS_USING_IP_BLOCKING","is_using_ip_blocking"],["TRACKING_DEST_NEW","v6_tracking_dest"],["TRACKING_DEST_NEW_SECURE","v6_secure_tracking_dest"],["DEST_V11","v11_tracking_dest"],["FT_DEST","flow_tracking_dest"],["PAGE_VIEWS_LIMIT_REACHED","page_views_limit_reached"],["NUMBER_OF_RECORDINGS","recordings_number"],["RECORDINGS_ACTIVATION","recordings_activation"],["ERROR_TRACKING","error

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	4.8083108981550495
Encrypted:	false
SSDEEP:	6:qFzLIMQHXLxkGX16DVQ8ouqxdLaYwrtL1wVVIBq4QL:2ebxkC6DVU4dxhwVVI/QL
MD5:	34216F487875F43B5FDD24C077EEC1F2
SHA1:	7BD6074AB3AD7C8D0DD8FA084950795C01E2F49B
SHA-256:	DE259EB7BA7A0E45575DEB33946F1FBC695C97C33145AE4E49AF0069D010868E
SHA-512:	E7232AFDD23E356D93784E59ABE17E32FD968CB3F96D980E4B851186F87CEDDE7BD0E7E90838DFD7D1C156DA57DF25789041E3ECAFC5738DE8A0618384F73FC5
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/pd?us_privacy=1YNN&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>....</body>.</html>.

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	27611
Entropy (8bit):	7.979026238781106
Encrypted:	false
SSDEEP:	768:6K9JZaTTZzBYKrsg3xMSVsPBEuz8oY6EiISHrxQls/:7daTTIK1xVyPBEvwTHrCs/
MD5:	3E975BC445E20D2C72FFF0E6C74D8299
SHA1:	240F023C4E885B536E5A197FA4E20B5ABF8EAA23
SHA-256:	193D7B6077B1CD19AD252430D2286BD7250B324E5B0B503CBFDA12146DAAC73B
SHA-512:	4D0963A23B2BAE312B38FF3FB0B8186419243BFF23F2712832BEBCB90DDBB46B2CD5E818FD0AC51F7BB201296A9D627C71DD36DC5DB7C6A5D5A1EE029529070D
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/brands/IFL_300x250_A.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}........,.."..........6...................................................................I .H...$.I .H...$.I .H...}.....j..J.6).1..=.<...f...=..{........>[9-&?........=....:u.1......b...Q.....a...Uju..$.It..s...g k....:....3.....a:.B.k..../@.@...)Z.kT.......s.........(r..Qr..(....J,....G....(.~;.(....$..-..E.V...L..\..3....VA...-f}BSA..'...N...cDXp...M...3.W.>@YY.TH?2.....^gL.L5F2..Q).....D'.K2.T'l.Y.6...3.&..Z..@z..:I..2..Loo....5....Q......t'.h;.k..S..........f}.=..-..(..lRmd..:....p..].....G......[./p...F..f...&6...{S..e...P.U..=.\|t...._}.^+5....jm..ic../{s]...8X......G..P=g...6:.5..%.n....lXI.b...H......L!....rq.KvbK..4.W~2K.X5+..5....ve..........Y...E5!....X_#....bR:2.f..b+6...].)..Q........c..X..3.2...r...D....!Md.....r....(.BRk7y....0#.US_.kH..y.b.[@..e..t..f...I...y.2.:.:

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20144
Entropy (8bit):	5.262863002441103
Encrypted:	false
SSDEEP:	384:JQWjHvtG+XtUGbBrmj6VpDjC/1X+XtQI8dR8H/jiyIwNG0sFjRmIpaP16Ihj0Zxy:jkY1r4XqFw5FjRbaP16uYxy
MD5:	AB52FEAC105B77E4866FF3A1B52552E7
SHA1:	9A775C0C8F94D0CF1176B39ABDC8B0B885B049CB
SHA-256:	2144A917ADE30445CED0950DEAA6311394AB4D25114FA1D661A517A238917C1B
SHA-512:	56AC9FFE7D4FFE2474AFC00BCE41B7701AD239C179B0F388F01623C441B3D1C772B7FCE69ACA4EC241F480ED5166DCDF3E35289BA724722FC44A62EEC4E701EE
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1247%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22ccpa%22%3A%7B%22alwaysDisplayDNS%22%3Afalse%2C%22hasLocalData%22%3Afalse%2C%22targetingParams%22%3A%7B%7D%7D%2C%22custom%22%3A%7B%22targetingParams%22%3A%7B%7D%7D%2C%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D&localState=null&metadata=%7B%22ccpa%22%3A%7B%22applies%22%3Atrue%7D%2C%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=4414543004414543003154&scriptVersion=4.21.0&scriptType=unified
Preview:	{"propertyId":7443,"propertyPriorityData":{"stage_message_limit":1,"site_id":7443,"public_campaign_type_priority":[1,5],"multi_campaign_enabled":true,"stage_campaign_type_priority":[],"public_message_limit":2},"campaigns":[{"type":"GDPR","message":{"message_json":{"message_json_string":"{\"type\":\"Notice\",\"name\":\"Desktop Interstitial\",\"settings\":{\"showClose\":false,\"useBrowserDefault\":true,\"width\":{\"type\":\"px\",\"value\":600},\"border\":{\"borderWidth\":1,\"borderColor\":\"#ffffff\",\"borderTopLeftRadius\":0,\"borderTopRightRadius\":0,\"borderBottomLeftRadius\":0,\"borderBottomRightRadius\":0,\"borderStyle\":\"solid\"},\"defaultLanguage\":\"EN\",\"selectedLanguage\":\"EN\",\"padding\":{\"paddingLeft\":10,\"paddingRight\":10,\"paddingTop\":10,\"paddingBottom\":10},\"languages\":{\"EN\":{\"iframeTitle\":\"<p>SP Consent Message</p>\"}},\"iframeTitle\":\"<p>SP Consent Message</p>\",\"selected_privacy_manager\":{\"type\":12,\"data\":{\"button_text\":\"1626118152154\",\"priva

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2709)
Category:	downloaded
Size (bytes):	96160
Entropy (8bit):	5.518629584665947
Encrypted:	false
SSDEEP:	1536:NGutnTqYCDzPzJeUAU3zSy8PFu+3sgUD1LL6WfQg:nnTq7zkUAwzS9L3sgWLLLfN
MD5:	E5DB9525F3D7EFD966AE63ABA86669E0
SHA1:	EF9DADB1023BAC903273F17E8DDE163D0FD7CF1E
SHA-256:	CDB7911DD984DC9B0840A0A94E711600B05DD72D612465FDB18ECFB67EA9E66C
SHA-512:	988E944410D6700C1265A5F2BF315F5B4A9051DE79ADEB38D43B38F0B0E43326D2CB3F87C750C9C5F0C8175BEE4625BA4F3FF6234A8D05CEB83AB4471ECF76FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Mb=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Mb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2067)
Category:	downloaded
Size (bytes):	31423
Entropy (8bit):	5.4609683477027
Encrypted:	false
SSDEEP:	768:+lo/z1S5bKFQ3sdrZNQuiKpHUmplWNYtfQd:+lo/zg5b+drZNxTlWNYtfU
MD5:	665205483CC3F8BFB401F8ABC2568AAB
SHA1:	F85725BC930479BBFA9699783E04756BB7CBBA6A
SHA-256:	31E0E4D27F82A2A44476100291DFB745D5E02A9D04EB68B6161FA7DE436FD44F
SHA-512:	2D06F902016FE9452EC8AE1532EDE6A888C80B9665B48A838A610895BEE17E5254FE39F812F6AEA46E62F6962C6CDF7A43A9FEC0AE1E67E983FF92D73D3A48EF
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240417/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ca(this);function r(a,b){if(b)a:{var c=n;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3423), with no line terminators
Category:	downloaded
Size (bytes):	3423
Entropy (8bit):	5.187931548433023
Encrypted:	false
SSDEEP:	96:hZHa/wM3VLs0VymWCzhi8BA6n1d41opPazut:hJ7mrgmBT81opj
MD5:	2DB6EDC11F3E3AF6ADB20013457BA1F8
SHA1:	6F67A93EB98BAC8CF0638413CC358A75CB6F8858
SHA-256:	9592320780B39AB8510ADE745533BF21F6F91E8B7B9CBDA9FA99D9878F3A1615
SHA-512:	BE1991D090F7AD8C58B39E21580689F70AA6FFEA5DC2083B09E2E26BE01702AEC70B07151208DA1C04354AC3BBD824413102FBB1AE9B898413DF2A198D7F4E4C
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/cSyncRemoteEntry.js
Preview:	var CookieSync;!function(){"use strict";var e,t,n={},r={};function o(e){var t=r[e];if(void 0!==t)return t.exports;var i=r[e]={exports:{}};return n[e](i,i.exports,o),i.exports}o.m=n,o.d=function(e,t){for(var n in t)o.o(t,n)&&!o.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},o.f={},o.e=function(e){return Promise.all(Object.keys(o.f).reduce((function(t,n){return o.f[n](e,t),t}),[]))},o.u=function(e){return e+".js"},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="connatix-cookiesync:",o.l=function(n,r,i,u){if(e[n])e[n].push(r);else{var a,c;if(void 0!==i)for(var f=document.getElementsByTagName("script"),s=0;s<f.length;s++){var l=f[s];if(l.getAttribute("src")==n\|\|l.getAttribute("data-webpack")==t+i){a=l;break}}a\|\|(c=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,o.n

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14896, version 1.0
Category:	downloaded
Size (bytes):	14896
Entropy (8bit):	7.986085240347334
Encrypted:	false
SSDEEP:	384:9n2f55fdy5GnT7PNtV4s7LfGwlNLuG88WvfAnFHD6dK4jy:Rv5kPNtVF7LOGOrfAZmS
MD5:	3F586C48705FF89AFB70A3835C2EC8B6
SHA1:	13481D7D5E36E2E257191F14AD794791C3E2E032
SHA-256:	50C07C577A7C527C2D471089CF3473BB90C7F010F8DFA343A45CF9E81FB4C5E8
SHA-512:	F06B9B68B28DA6B318C56C6C4F4B00D00A388A190EAA83AEC617CFF658DC5E64F5AF04132350AF33D9C9316F6FC268C8D2C88D4B4A61CD402E38E7929B62931A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/hindsiliguri/v12/ijwOs5juQtsyLLR5jN4cxBEoRG_50uYVKw.woff2
Preview:	wOF2......:0..........9................................`..<.b..m.....0.....2..6.$..`. ..R..o......5c...6....F..d...R:.K..?'.......H.t'x....I...XH.m..g..A.[.Q.LC.W..y.MEQ.T..Y.@?E_.\R..Q...v..R~_0..;.<?..`,.x.Q........`...o...........'I.<......t.ox.C#R..y..M.,.,.}.hn..`T...E.Xd..........!b.b'.+~.b$...l..Z...../E8..n\.H&...../..M}_\|....q....JR&M.mh3.a.4...T..~....4)V-IL.....A.'$..8...)...Q-q..$n.M..x..].?x/..g...L.....Dleb...D.[QoQ.U.YW..@u.#+.=....uF..h.A..m}VR..eX77....j.....3.@..........%r.o7F....\..Zw6W...Eo....H....'-...QL2..........6X........L.....o... .:..X.t..s..M......Z....H.......].i............T .Q.J.H.8X.^...".H....LQ.c....X_ym{W..3.?.O............6.fP.oj.2...1...^..J.,.`...\|K}........F<...B./...O\|...I].i!P.....@xd.riQf.%B........D.f._...2.t.....+"c..{*.}.0j..%.].y]a...........U[@dZH%.cI..9l.. ....dF^...e....q;i......b2)']l#...\|.n.m...8.}..K........z9.Q..........s..]....f........@.'!..5.....dV..z...\|l...4r..[.z`....M.._.{;\z.

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 2, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	5.17641075510327
Encrypted:	false
SSDEEP:	3:yionv//thPlH9tBu7cl0tRthwkBDsTBZtzdDG5hMtVp:6v/lhPOcl0znDspzQ/MtVp
MD5:	E09DA9F88AE0E969AE632DC8B701CE33
SHA1:	C181E2EE068FC43CFF977166BEF5204AB59159BC
SHA-256:	C7CFCDE04F4D67F9A622885D416A95614E789602CC0F9007A4CE38E836F1078F
SHA-512:	CC95E1FCC60237462DBB6C7689D47C0C428E89243E017B68A481D3E9C201424E414E9432A9C748F8FCF980B26E1F918BE109A6AFED710D3885AC23B0B73729BC
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/themes/default/images/50p_black.png
Preview:	.PNG........IHDR.............aaM.....gAMA....7.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.bd``h` .01......'..........IEND.B`.

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34767), with no line terminators
Category:	downloaded
Size (bytes):	34767
Entropy (8bit):	4.987044322440416
Encrypted:	false
SSDEEP:	384:kYww8UwabI0cRQyr86Okk8ohcz23SQJRu9:HwwfUNFtLk8RXQnm
MD5:	449822FCE3259C38744CE3ADB53A8D44
SHA1:	BE5210901B0D14427E6CC4A451F5DCF370878564
SHA-256:	78B435CD47263DA5359608172FE71C285CC5E11E012148EB6126CE32AB36137C
SHA-512:	0A860A1103EC2C890ADF75244FC3B30FE090897304E566DFE1FA6E3CDE20802EAF7F4299A39F2B2092CA32E431158F17ED6314211740C59905CEE5CE8DD2D91A
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/Notice.c6498.css
Preview:	body,html{font:14px/1.21 Helvetica Neue,arial,sans-serif;font-weight:400;margin:0;padding:0;height:100%;min-height:100%;text-size-adjust:none;-webkit-text-size-adjust:none;-moz-text-size-adjust:none;-ms-text-size-adjust:none}h1{text-align:center}button{outline:none}button:focus{box-shadow:0 0 0 2px rgba(24,144,255,.5)}a{cursor:pointer}body:not(.user-is-tabbing) :focus{outline:none}.focus-visible{outline-color:#90ee90}.on-dev{outline:1px dashed #aaa!important;z-index:2147483640;position:relative}#on-hover{outline:2px dashed #4caf50!important}#on-hover,.on-active{cursor:pointer;position:relative}#on-hover.on-active,.on-active{outline:2px dashed #108ee9!important}.bullet-point{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-align:start;-ms-flex-align:start;align-items:flex-start;padding-left:10px}.bullet-point>span{width:10px}.bullet-point>div{-webkit-box-flex:1;-ms-flex:1

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920)
Category:	downloaded
Size (bytes):	148375
Entropy (8bit):	5.590273572274435
Encrypted:	false
SSDEEP:	3072:RnsTXi62wLzkCXIdxpDoS/1kK5KT92MulU+fwHiVtAZ7lNb85nUnvxyRfHobWHyW:RsTXWwLzkCXIdxpDoS/uKgT92Mulvfwy
MD5:	2B0405567804E23A792A9EB47A11413F
SHA1:	5E4EC5597995DB617BACB8BE23E750B1E64BE830
SHA-256:	E192120AD2486B1EF977A28EDFBD2B8E3CF7A4AEEDA8484D16E44691976D946B
SHA-512:	99A6A5475C82339421240430595EB3271E15F3291E33EC75E73420B5B5B9F88ED3EC0E90BC21C9719175BDE1397B8414F1C5B9F1CE736858649B9942A3D8AC53
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=da("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function da(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function ea(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function fa(a){return Object.prototype.hasOwnProperty.call(a,ha)&&a[ha]\|\|(a[ha]=++ia)}var ha="closure_uid_"+(1E9Math.random()>>>0),ia=0;function ja(a,b,c){return a.call.apply(a.bind,arguments)} .function ka(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function la(a,b,c){la=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ja:ka;return la.apply(null,argu

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (628)
Category:	downloaded
Size (bytes):	647
Entropy (8bit):	5.349227782085779
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7G6Q2bvbUhaeRcY5Y2PqVCLEnxTht1DtfCYKO+kFl+MHfVfCYKbEc:WDlf8vR2bTc3tOCYDnKO+kFltHnKbEeB
MD5:	0B1E294F082A820C7FBA2720C3DFE355
SHA1:	071F130E14231400BB9FF7797B3E189FB3328FCC
SHA-256:	592BAD4B167586327E1FFBF53ECAEA1F611ED1E6F47A4230BDC2D84B94336F12
SHA-512:	34749CFD716F917451AE160FA8DD16D83DADCBC881252430AB03125ED38127B09AAA23068F5061C50B9D290142C8564AD5BD4747BDC0299AF563FF7FBB591258
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=NC48x6hCLCCbC&cb=1&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-5%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_5%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_5%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JOwaWnV1KH9ZAWAUyacUv1EAAAGO9n1qIAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAF6sWV","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-5","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"1","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-adMediaV1_n-onetag_pm-db5_ym_ppt_rx_n-acuityads_cnv"})

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESELL55Lb_r68ETm1PZvTsUw8&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Fopenx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	18324
Entropy (8bit):	7.93151312655171
Encrypted:	false
SSDEEP:	384:V9kuUu4wjO0JTO6EsXtREzH74YI4WPjX/v+k9pC7+Gf4Wf3aNTAy:V9NUCjOoTjEsXLEzs4WL/2k9pC7rfaNt
MD5:	CA347976BCA22877B5770E7DA47A4755
SHA1:	F9835B1BBED0DA84288CA6079E11E51772650748
SHA-256:	078738F1237F00F60A883C4C94AA2E290F9936B9705DEDB12965F0A9341A47DB
SHA-512:	FA167A15A376085C2F4DE483D10C7D231E47476C06934FAAD84CD79EDF4BB4428D3231EF560DA02465C037AB92FF9EF21547E3CFD5CD96B6C2322CDB8AA9F1B5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E63117EAFE1311EE8D408056A947617F" xmpMM:InstanceID="xmp.iid:E63117E9FE1311EE8D408056A947617F" xmp:CreatorTool="Adobe Photoshop 25.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:550C7BEA779111EEB3C49EB2AFF40702" stRef:documentID="xmp.did:550C7BEB779111EEB3C49EB2AFF40702"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251 2024 Disney. All rights reserved.], baseline, precision 8, 120x225, components 3
Category:	downloaded
Size (bytes):	31705
Entropy (8bit):	7.9685459323651155
Encrypted:	false
SSDEEP:	768:7v5qZpcw20FyBz6qZReUOOvRr4wLKADJPUThRt3dOcE695ijH:7F0FQz6b8OwLzDJPchROo5eH
MD5:	9D4A419F21FC326A689B267A2A6311F3
SHA1:	B8B8F6A0EA02978F5552DCB2F81A0B8F70E0E294
SHA-256:	3AA024C5ECB8DF64AB181E2510036B79E608FB9D0033AD33FE014AFB123454A2
SHA-512:	34AFF8D0C0464564B37AF1FACDCDF886F4FB48A9B76056FA80681D90CD48C0FE743215D281BCFCF16FC2151C843F30857103C7D1965E4A61EF8964D07FA496CE
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/walker-linkout.jpg
Preview:	.....JExif..II*...........%............ 2024 Disney. All rights reserved.........Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpRights:Marked="True" xmpMM:OriginalDocumentID="7311CF3CE498DF9B7D2B09954C17C6EF" xmpMM:DocumentID="xmp.did:3DB6401BF88E11EEAD9CD2D3B4A64DED" xmpMM:InstanceID="xmp.iid:3DB6401AF88E11EEAD9CD2D3B4A64DED" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" photoshop:AuthorsPosition="Disney"> <xmpMM:DerivedFrom s

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	107
Entropy (8bit):	4.749032029783589
Encrypted:	false
SSDEEP:	3:Ui+obJKXAozCSYANBIEbIOoysINBWj5Dmef:Ui+o4QozTEEbjoypaj5Dmk
MD5:	2C5FFDDE029C68A567494A3BEC937845
SHA1:	B689A5D079C898711C4A4B5588F93B916E08D98A
SHA-256:	6B074FBF6834F2D4B30C89FEEEBFAE88F9723B6E3D722F8B88CE4BDBE61B933A
SHA-512:	C97376E2E54F7201F5983B206CF0EF72641435249E255CA50FD2FB782D6919A7E7B74C8FEFC418D9C9408DF95F87874E96D415A2727287D9276CE68CA632F344
Malicious:	false
Reputation:	low
Preview:	/* Nagich.com color */..#INDmenu-btn {...--indmaincolor: #067d8d;...--indsecondcolor: White;..}....

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/cookie?partnerId=undertonenew&userId=6qnymkyv6p1rqrpd3isnsmcle&gdpr=&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1829
Entropy (8bit):	5.458487211567977
Encrypted:	false
SSDEEP:	48:Yj6k2mZx1GO5XjGO+mByFrOGOtNdNbHGOW2bZhb/jjSDBdz6GOB/bGOao:xIxkfbCKkDbm8jPUBHHZo
MD5:	D8B599CDEE2DC0CF2AC7CD020FFC0CD7
SHA1:	93BBDD1F17A1F8DFDD4A1C0F15F251F519370D81
SHA-256:	389EF6927AEEEEEC2BEE41896A7F9C8F1D108BFDF361F99A3B3D3321AC725D28
SHA-512:	73DDD53C2AF4513A8E97176EF60E15F0577B1A7D6C73717E1AB61F9821E7857C2C5C2C2EDBA1B82D61DA5DA155E61E6020E30E0441C0C4687174B019C8973CC2
Malicious:	false
Reputation:	low
Preview:	{"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=","t":"f"},{"u":"https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D","t":"i"},{"u":"https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=","t":"i"},{"u":"https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersy

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	5.360486712738048
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7Gu30Yk2bvbUyaVcY5Y2PqVCLEnxTht1DtfCYKO+kFl+o60OBFVfv:WDlf8vuvk2bTZa5OCYDnKO+kFlrTOXK0
MD5:	BCB73670113EBA05C0A6B11EB70E1A5D
SHA1:	27A8F51ED5079BEBFF739FB58F6E8FB5DE6BE7BC
SHA-256:	492CC40374AF0172C325C0DC8B0575F85F7DE6907D750D75DC60C59811F64079
SHA-512:	5CC77CD1EF05FBCCF72A5E35BD31A1CD91E3D794D8A585969EAB1EFF4F21933141B43ACF1A9C9AEEF1FE0089DA4BA92439B906568B782E5868431038633C25EB
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=NC48x6hCLCCbC&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-5%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_5%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_5%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JBb0FHudk0G6Sovbe-5D-ggAAAGO9nzyfAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICA5dPsd","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-5","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain"})

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3758)
Category:	downloaded
Size (bytes):	3981
Entropy (8bit):	5.222278381111871
Encrypted:	false
SSDEEP:	96:4fh4bdRzSNpMQ0o5PRkAzVUSXLcP0GikqrM:FxRGNpMgNL7cPvibrM
MD5:	0D8275F5134C453E9CF1B025D8C44355
SHA1:	B450F91CEA5692DA87B857AC2A8EFFF98A705CBE
SHA-256:	5F1EC274F1B010A1CC89E658BD4A0204E09AF4AE9935AE111692708E1BED9D1F
SHA-512:	4AF05D40FB1185F20337B063446755990CE098EE76DF41F958E4F8471086C7B38E3CA65E01404CF865DBD0671E3840E65653A83826FC96A504C90E8CFDA5B2CC
Malicious:	false
Reputation:	low
URL:	https://silo40.p7cloud.net/if.html?gdpr=false&gdprConsent=false&tpd=false&md=false
Preview:	<!DOCTYPE html>. <!DOCTYPE html>. <html>. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. </head>. <body>. <script>. silo={arcobj:{},gdpr:!1,gdpr_consent:!1,debug:!1,dlog:t=>{silo.debug&&console.log(t)},syncEvent:(t,s)=>{var e=(new Date).getTime();new Image(0,0).src=silo.syncloc+"/p.png?visit="+s+"&arcid="+silo.arcobj.arcid+"&ed="+t+"&cb="+e},setPrebid:t=>{silo.syncEvent(t,"prebid")},setPage:t=>{silo.syncEvent(t,"page")},setCohort:t=>{silo.syncEvent(t,"cohort")},setCustid:t=>{silo.syncEvent(t,"custid")},setCustData:t=>{silo.syncEvent(t,"custdata")},setPageData:t=>{silo.syncEvent(t,"pagedata")},setEngaged:t=>{silo.syncEvent(t,"engaged")},setCustom:t=>{silo.syncEvent(t,"custom")},sendMessage:(t,s)=>{parent.postMessage(t,s)},messageHandler:t=>{var s=t.origin;if("string"==typeof t.data)if(t.data.startsWith("setobj")){silo.arcobj=JSON.parse(t.data.substr(7));try{silo.storeLocal(silo.arcobj)}catch(t){silo.dlog(t)}}else t.data

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	94098
Entropy (8bit):	5.280310617037023
Encrypted:	false
SSDEEP:	1536:Pp2V/B6AagK0ldPnc73SQaZx/dOGLN6nnXvlWO7qdIZc/YImpi:h25agK0lNnc7laZl4XdWOLcAI5
MD5:	F162F0B97C89DA6502A32C3C1206D74E
SHA1:	A44D682E6C439F72BA35F34EF1432EDEC2A6EE52
SHA-256:	80E66296A0E785E3CC19809ED93B74703D7E768C03D2EADA3BADCA52DD27EF64
SHA-512:	3F014610D3CFABA3A74DB0806A0821A59765AD096B5AF124B6B39BB3F51698BECDA21ED4DBD59F69956F074248A02A691BE2D2E3083589DDA434F61802954E90
Malicious:	false
Reputation:	low
URL:	https://cdn.id5-sync.com/api/1.0/id5-api.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.63. * @link https://id5.io/. * @license Apache-2.0. */.!function(){"use strict";function i(t,e){var r,i=Object.keys(t);return Object.getOwnPropertySymbols&&(r=Object.getOwnPropertySymbols(t),e&&(r=r.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),i.push.apply(i,r)),i}function d(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?i(Object(r),!0).forEach(function(e){l(t,e,r[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))})}return t}function c(e,t,r,i,s,n,o){try{var a=e[n](o),c=a.value}catch(e){return void r(e)}a.done?t(c):Promise.resolve(c).then(i,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,r){var i=a.apply(e,o);function s(e){c(i,t,r,s,n,"next",e)}function n(e){c(i,t,r,s,n,"throw",e)}s(void 0)})

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	4.1345195377278445
Encrypted:	false
SSDEEP:	3:YWQRAA2nvX0LKRFSABHY:YWQmvv/dxY
MD5:	C466BD434DB29CF02793F8522FDE5F3A
SHA1:	F39A01BB0264479DBE9A4BFB0B80AE0B3B0E8154
SHA-256:	D0D2E098CD489EF7BC528C86DE8AB5C51B5D6CDF9B76A8B08766036992F0D2F4
SHA-512:	81EEC1FC87BBC2A95B34AFF28CBBC6D13EC6C9E78BF76DD6C586ADB48D4E01533D97F1A56BBCC60BC386DF78F6A85252BECD71A945B6AA014A7717EA61CB8087
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0010b00002cG8kQAAS&src=esp&ver=1.9.0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Country not allowed"}

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51415)
Category:	downloaded
Size (bytes):	52697
Entropy (8bit):	5.720248017015121
Encrypted:	false
SSDEEP:	1536:jOd9l2dEOpfhq28vRz7soEobkhw+wYRPLM:WT2CafhqfvRzxkO8JM
MD5:	3C681CC46D3207647DA1222CE0D89FAF
SHA1:	87E62ADC14E617D0AD5BEF2CEEE8EAC34DB3B02C
SHA-256:	F64ACBA517986FD3DF896D0E6953DCA4FA27EC95D001422FE573589C8F884D3C
SHA-512:	F3C4047AEC782EE39C3822940D556CB67813090CD6A8E78D55FFB9BD35705ACB30295D7D581645BDB56AA654F95CE0DFC104427D4C2EB6031855247091AE65ED
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/9krLpReYb9PfiW0OaVPcpPon7JXQAUIv5XNYnI-ITTw.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function B(Y){return Y}var A=this\|\|self,G=function(Y,R,n,b,m,v,T,W,l,h,C,P){for(C=(P=n,R);;)try{if(17==P)break;else if(77==P)P=W&&W.createPolicy?18:38;else if(47==P)A.console[m](h.message),P=14;else if(P==b)C=R,P=16;else{if(38==P)return l;if(P==n)l=T,W=A.trustedTypes,P=77;else if(18==P)C=Y,l=W.createPolicy(v,{createHTML:L,createScript:L,createScriptURL:L}),P=14;else if(16==P)P=A.console?47:14;else if(14==P)return C=R,l}}catch(Z){if(C==R)throw Z;C==Y&&(h=Z,P=b)}},L=function(Y){return B.call(this,Y)};(0,eval)(function(Y,R){return(R=G(48,97,36,57,"error","bg",null))&&1===Y.eval(R.createScript("1"))?function(n){return R.createScript(n)}:function(n){return""+n}}(A)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applica

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3217
Entropy (8bit):	5.259469839410531
Encrypted:	false
SSDEEP:	96:beBcg80OmZkiCa/Dwo2oNKfE24zzyDaTpXpDidL7cDZ0PfU6P/fdGdoxj:beeh0OtKco2iOE24FfidZfDj
MD5:	AE744D28CD7F343484C98F098D42393E
SHA1:	54F137D8F7CD20F3A0E3135212E50666A44B2792
SHA-256:	919A2D44210B9AF2098FC8D3B7948BDDEFCDE25AD6B6991E62DE4FFDDA341778
SHA-512:	070B232B6405BDCF081E5E3048FA1FA7AA758CFBF61161287B053CEFD319334E36BF84C3D8F13DDE5E1A9040F97705F2C750B77767278BF351B3ACDA22EC865B
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag);\n};;

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 2, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	132
Entropy (8bit):	5.17641075510327
Encrypted:	false
SSDEEP:	3:yionv//thPlH9tBu7cl0tRthwkBDsTBZtzdDG5hMtVp:6v/lhPOcl0znDspzQ/MtVp
MD5:	E09DA9F88AE0E969AE632DC8B701CE33
SHA1:	C181E2EE068FC43CFF977166BEF5204AB59159BC
SHA-256:	C7CFCDE04F4D67F9A622885D416A95614E789602CC0F9007A4CE38E836F1078F
SHA-512:	CC95E1FCC60237462DBB6C7689D47C0C428E89243E017B68A481D3E9C201424E414E9432A9C748F8FCF980B26E1F918BE109A6AFED710D3885AC23B0B73729BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............aaM.....gAMA....7.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.bd``h` .01......'..........IEND.B`.

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2235)
Category:	downloaded
Size (bytes):	2324
Entropy (8bit):	5.672165282857357
Encrypted:	false
SSDEEP:	24:f1bvTS2tR4P/MK00PigT08FwnthFx0uTeUzkHe8yaynJkLI409R90yQ09x9L:tzTSA4PEKlrgFJjzkHTj46kLRP
MD5:	F81D4FFB84795690F8AEFDBF339885E8
SHA1:	E61BABDC2D57B7FE72D74A60A50FBE16B84DF5C1
SHA-256:	F3098ACAE85B8714DD164D3F6832CA1435DC76E7386845131BD2136BF173B203
SHA-512:	6779BDD091DEF68122A3FE19FD7157BBC592706992B9B9A6C088A83E3B797C1329F79866AE1CA8C5E9D4E2D71BA4D84D1998544C1AB230BDDFC19D6E41C436C3
Malicious:	false
Reputation:	low
URL:	https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyQ1MDcyNWQ4My0xYWU5LTRkYTktYjg1Yi03YmI0NzA3YjliYjKqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=a662aef0-1110-44c8-b99d-2acba4a5db18","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://id.a-mx.com/u?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Damx_com%26uid%3D","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dopenx%26uid%3D%24%7BUID%7D",

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=kueez&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	34315
Entropy (8bit):	7.976620477304767
Encrypted:	false
SSDEEP:	768:0Fvc+vIzfkufBp/vkcRHKx5+fAVKFVqRGk7exHoAlR:0Nc+ATkAP4x5+fAVKH+qVR
MD5:	8C675DD2837F38182D7507BEB9A382B6
SHA1:	434659C79DC96B6614FE35503E450725BD5F2EEA
SHA-256:	D8770DCAF5FE9D445CED16ED28F33503C968E4FCF9AAE928845AF0F18E86ECF7
SHA-512:	8AAFC52FB00B6F65D31A319F6EC40BEA005883655B18341FE7059BB4D4154F3685A1A9E606207A733B195F88258923F6A4351C0AF187B91ECEA3929D112CC87C
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-matty-healy-relationship-timeline.jpg
Preview:	......Exif..II*.................Ducky.......F.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:754FDEC3FDE411EE8B50864215DF537B" xmpMM:DocumentID="xmp.did:754FDEC4FDE411EE8B50864215DF537B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:754FDEC1FDE411EE8B50864215DF537B" stRef:documentID="xmp.did:754FDEC2FDE411EE8B50864215DF537B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:60,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{%22Country%22:%22US%22,%22CountryRegion%22:%22GA%22,%22City%22:%22Atlanta%22,%22PostalCode%22:%2230301%22,%22MetroCode%22:%22524%22},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22clicks%22:0,%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532422571"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159110&predirect=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dpubmatic%26uid%3D(PM_UID)
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:/VLtdeHLKR6bxmYf:dLtderKuxmI
MD5:	DC416D269E079D1FAF1FFB413CD11BE6
SHA1:	9DDA228E726A2E54AEABCBD95FA6B7DF8D555A61
SHA-256:	2BCCFB366956EE29DE43FA743B6DEA028338B3A2E0104FC0AA9DD6EADFFBF318
SHA-512:	9902A9BE489FA6999D34E77290C267246CB108A5A88DDE42D6DA5FD7E693CB245DEC31705DFE9BFB913C34EE436AABE0EE46DA396AC9E889C7DB25596AA205CA
Malicious:	false
Reputation:	low
URL:	https://d2tbszkvx1p56e.cloudfront.net/13333?uri=9bbbe62e-7780-49ac-a0a8-6829acbc35e6
Preview:	aspan.setUser({"not_found": 1});

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://0852e26011ea1f4dce115866eb6807a0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (41544), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	116932
Entropy (8bit):	5.389057736931376
Encrypted:	false
SSDEEP:	1536:JY7fhD3W1dQRLYkjA6jQPbl1XvIELUxVhSKJUWjLzHgTulsm5GRj94VrEwEQArC5:VcYlPX3Ux93MulVQb0SviNpzh5
MD5:	002EFB60958EDF3C913E16F009053E86
SHA1:	4FDE497DF8C3E055401F6FCA52E7B5BF3FC302E1
SHA-256:	8EC93CFB316B06F1D7C8100017317F1F0A878BFFED73F2BB99C1F3B9839ADAEC
SHA-512:	6BD22C8139DBBF1E920E8FC3AC6B784CE4D4B4D714D673651BA82371E03F10020936D6814F5C2DED32968F3364D3D84E1A62808F28BE751D10ACB7AB2DFF8662
Malicious:	false
Reputation:	low
URL:	https://ads.us.criteo.com/delivery/r/afr.php?u=%7CvABoKC2dP40rvAbV13J56LjWANUahCxRqNott8WIKFk%3D%7C&c1=m7oIQCLYgBviNiUzyYOc2kjMnk6vmALkFqVtTGkXC3yyQMccv7J0JEqO9lg8q9Dulj9qmJ30sGFDCE3nLTh5pPYWUDYr2yDsb7Arv7h6f0SuYtsA_-vEoUo-L4-AGLIi6aG4eVo6BtqraXgobdw-zqdYbmZ7hwCfgm7EVAuJMzO7nmSfXNWhG8Lc9Qvl39J8bGnw1gIHlWEfdCZ8tVrArKDXsEJtZ4rx_OnZTtdri104Z3QY2kWMkFvv_R9tnkQ4csaxcb9g48zmmEBCsIQkyhIGJirKXeHBGx4H2tIwTRc3-3sR3vZmcCaUhcBzYuI4GJwi4yKol8EegfUIqfZaiPEHLn_-0FmBEKSM6BFkL8Xe55A4DO8pl1N3VXtx3VhewTu6U_9UvdTjTXiiriSHGMoKE-EwjrhIwoZ6lXkDqSYKFB3WSfTqfxt8HEjV6tUi67HmFS8dfvQf5-UT37JnFiDCQtMrUXI37AsusgrIYjmwaQ69qNpVUgsgrAImc8LNNlkQXeim9Yq5Guhc8MjB5EHZkBIywxxwfY2u81X1TxvWUsZr8AyxwtUO3VlFj82fBJetfO5p7DR2y4K2w6v_whps9ArgloB1V__8Fk7wAMpNc-EES5T8bR6U4hSoj4xeUdXrk8tCF3Xh57jzoXAptCZ6T9dXkXTz
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Advertisement</title>.<meta charset="utf-8">.<meta name="format-detection" content="telephone=no">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<meta name="viewport" content="width=device-width, initial-scale=1" />.<style type="text/css">body{text-size-adjust:none}</style>.</head>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>. BannerId 11508842, ZoneId 1707442, AdId 1811900 -->.<div id="main" style="position:relative; padding:0; width:300px ; height:250px ; background-color:#ddd; cursor:pointer; overflow:hidden; display:inline-block;"> <style> .privacy_element, .privacy_element a, .privacy_element img { text-decoration:none; margin:0; padding:0; border:none; } #privacy_icon, #privacy_icon a, #privacy_icon img { cursor:pointer; } #privacy_icon { position:absolute; z-index:100; top:0px;bottom:auto;vertical-align:top;margin-top:1px;

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=tappx&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://merequartz.com/aadetect/px.gif?ch=2&rn=82656&adslot=aaegse_728x90_
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-openx&gdpr=0&gdpr_consent=&us_privacy=1YNN&userId=a82aadaa-3664-4808-8897-8353fb191c1e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=15927&puuid=Vz%2FbJWYibdPMu3ZvZk8k2Q%3D%3D&us_privacy=1YNN&_rand=1713532413663.3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974)
Category:	downloaded
Size (bytes):	18531
Entropy (8bit):	5.618136256620329
Encrypted:	false
SSDEEP:	384:731V+d9FVR6F8W+Peaeop6AsH9xE7aF9Du:b+GaefV9xTFg
MD5:	F21CD34BB729CC37FD2EDDFA47477306
SHA1:	2E188C43160DE0EA96E448F8F838DADCDD7EBF8F
SHA-256:	47866B8D2915779096BE19131EFECCE0297C2A0C37F581C4E6EE187B13EBB8EA
SHA-512:	A63432649E6B8363596E5C14C4694879A362669C5A14F6B0907C98277FB20DEB0DB6E4D6A30603AAC9CE0EF18FAB42F4B7ED31D37661DD5668181C678FED36FA
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/dcmads.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.h("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=page&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed={%22p%22:%22https://www.justjared.com/%22,%22r%22:%22%22,%22tpc%22:1,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22loc%22:{},%22cbd%22:%2220240419%22,%22ids%22:%22%22,%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22grp%22:23,%22cohorts%22:[%22avM7hHWe%22,%228FWC3Bns%22]}&cb=1713532360462"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64746)
Category:	downloaded
Size (bytes):	461563
Entropy (8bit):	5.510985841919794
Encrypted:	false
SSDEEP:	6144:qA0ENuRIbVM/V+Lpd1CRwMlVfo99AiX2q0ngHSHcyHYSI99RRTD6:NtgZVACe2q0ngScyI99RNm
MD5:	762CD9550AEF701B040B82AC491D0715
SHA1:	FDFF598C4177F0E18942D5DD666CDB87D1D74223
SHA-256:	ABAE2CD5AAAC6E54E1FD77ABA080034858CBD255A78A4F896347A5D93D4DADD0
SHA-512:	B9673BF2BE6D4B8A8DE2D6602A86D003D41A6180BC15FA541906211F026B1EFAA64CAEA9D220025CF4BE75BD489772A70A4CE344AC00A839F1FD7A1785E00E17
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202404150101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. .*/ .var ba,da,ja,ka,la,ma,oa,na,ta,ya,Ha,Ja,Ma,Oa,Qa,Va,Ua,Xa,Ya,Za,ab,bb,db,eb,fb,hb,jb,kb,lb,pb,qb,tb,vb,xb,Ab,Bb,Gb,Ib,Hb,Jb,Kb,Cb,Lb,Mb,Nb,Rb,Tb,Vb,Wb,Xb,bc,cc,hc,jc,kc,oc,pc,rc,sc,uc,wc,xc,Bc,Dc,Ec,Fc,Pc,Qc,Rc

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=95054
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50357), with no line terminators
Category:	downloaded
Size (bytes):	50358
Entropy (8bit):	5.2181356017561
Encrypted:	false
SSDEEP:	768:g7VNmagZTrKaskbeznZ5H8roxxbwxgwrsc:gSagUCGn7ck0xv
MD5:	EDC96E5BF861142792E04BE06B39697C
SHA1:	1715176511209C2917D148CC950BD550F3D33DCE
SHA-256:	938C64115CE60B98EE8151D7EB28208567753F3D4EBBE0AA0F56618C555A18FB
SHA-512:	9E2913865364B5662F48E54E53FA3E515B067E9136180215B3764AEF65FF9C059797983F091A8A982DEAAEECD265E7AA926C19103403CF317311B518D129B243
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/cnvr-launcher/latest/launcher.min.js
Preview:	!function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=127)}([function(t,n,e){(function(n){var e=function(t){return t&&t.Math==Math&&t};t.exports=e(

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42433), with no line terminators
Category:	downloaded
Size (bytes):	42433
Entropy (8bit):	5.259079994020187
Encrypted:	false
SSDEEP:	768:3gk8LizPQrDEYH68mRkR7vObgIxgL8xExChmmGzq+2ARi:IvObgIxgL8xAmmmf+2ARi
MD5:	0AB4E955C478B1FFF4FC8801A94BF4E4
SHA1:	22ABA186710F946D21AE19C617D7EB2651965AC6
SHA-256:	16EEF82325D88BCCB3F09D34D6155A3EE890EDFDB479D44264212B5D5ECA1AF9
SHA-512:	FC8C34DE88F2173B3C388D1713F10F4B0E6BFEBF481AEBB2BE5556AA55E0269D810780797F653CF6BC85F69345B363C64390B9D9F091F94EC80BB2EC4E1C5A7B
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.ids.js
Preview:	!function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o;n.LOGLEVEL<e\|\|(e=r[e].toUpperCase(),o=0<(o=window.navigator.userAgent).indexOf("MSIE ")\|\|0<o.indexOf("Trident/"),window.console&&(o?console.log("[PubTag] ".concat(e,": ").concat(t)):console.log("%cPubTag",L,"".concat(e,": ").concat(t))))},n.Debug=function(e){n.Log(r.Debug,e)},n.Warning=function(e){n.Log(r.Warning,e)},n.Error=function(e){n.Log(r.Error,e)},n.LOGLEVEL=r.Error,n);function n(){}e.getHighestAccessibleWindow=function(e){var t=e,o=!1;try{for(;t.parent.document!==t.document;){if(!t.parent.document){o=!0;break}t=t.parent}}catch(e){o=!0}return{topFrame:t,err:o}},e.getHighestAccessibleUrl=function(e){var t,o=e.topFrame;if(!e.err)return o.location.href;try{var n=null==(t=o.top)?void 0:t.location.href;if(n)return n}catch(e){}try{va

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (532), with no line terminators
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	5.0787783432292954
Encrypted:	false
SSDEEP:	12:RivFqZKjOsKosxdysxmEiCessSODRRHKWMQxILha1fspl:RGFqZCOsTsxMsxmZCe4WRRNxZJql
MD5:	60333BD2AD851FBC9AC8AB37B809FD47
SHA1:	382FE1065BD7547376BF7740EE86DE5A02C9BB58
SHA-256:	E6792EB9FA0D27E8C8AC7EAA0467637D03626DC4DBC7E534F7650DF58905D112
SHA-512:	FB84A6755C9176FA6710EE06B3A37B956378F077D9043C358EFDE55B8AECAE663266CC76C4635BEA3D2FEC74E8F1457258EA291006F524AF0BD4FD43CA147727
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/a/iframe.integration.destroy.1.0.0.js
Preview:	window.cnxIframeDestroyerLoaded=!0,new MutationObserver((function(n,t){try{for(const o of n){const n=o.removedNodes;for(const o of n){if("IFRAME"!==o.nodeName)return;const n=o;if(n.hasAttribute("data-cnx-ids")){const t=n.getAttribute("data-cnx-ids"),o=null==t?void 0:t.split(",");null==o\|\|o.forEach((n=>{var t;return null===(t=document.getElementById(n))\|\|void 0===t?void 0:t.remove()}))}0===document.querySelectorAll("iframe[data-cnx-ids]").length&&t.disconnect()}}}catch(n){}})).observe(window.document,{childList:!0,subtree:!0});

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26088, version 0.0
Category:	downloaded
Size (bytes):	26088
Entropy (8bit):	7.977885630511203
Encrypted:	false
SSDEEP:	768:jHzRxoegWeCjte5vb5ZH88/NE3P/fXWn+Ek:jHzYegNCjtoZsH/G+Ek
MD5:	25B6F772A8EA5340479CE6624D0DF666
SHA1:	0D7AF84582A26844FC8CC0E61F2B1DB6C05E4AFF
SHA-256:	24DB9DB58AFD23DC31E2CB193CB0F7479D64EA8C6F6D63E1709FFCBAA1B70B6E
SHA-512:	265DEE5C852FA8BC530FADC26184C8C29EEEF127B0768E41066EEC7FF973BB566B02F587150947C48067589BC612F5B36182CBBEB2ACD92B19F23D0123C2A1A3
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/dt/95f88fc626f1432fa432382e4bfd47db_tradegothiclt-bold.woff
Preview:	wOFF......e........(........................FFTM..e.........Ev"7GDEF..dL.........'..GPOS..d....3....<.+.GSUB..dl...,...0....OS/2.......G...Va#..cmap.......[....).&cvt ...............Jfpgm...d.......b2Msfgasp..d@............glyf......T.......A.head.......4...6.H>.hhea...........$...Ghmtx...P...........Wloca............Q...maxp....... ... ....name..^....G.....T..post..b....l.....c..prep...d...A...H..[/x.c`d```f`8..+...+.<..............e._0..r9..@...A..x.c`d``>._.H....?....P........[........d........................x.c`d..........20..i#._..L..l. ....A....x..380(.fb......4....F...8..z.x.m..J.Q..gw%.x.p.....A0......EK...B.!.}.[. .. V.6ZXZ...of..D]..sf....s6pbO...D&...Xt%..V..*...0......4.......E...(.....z.....#'hJ).e....BU-.v.e.Kip.A...G%i....V.c...P./..^..?o.B....o........A..."...1.....G...3.`..;)..).h8.-@...I....{d...j0....[.K?.f$..w.T/..%..m./.!..liM.t.g.&.......H..^.?D.2.Z....FZ....9......V.`.N........s].A{....t.......Ag.[.g..}....u.vw._..0/.S...F...0........0....

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	67620
Entropy (8bit):	5.304018805261464
Encrypted:	false
SSDEEP:	1536:eR1+4n4WQ4UWBG9rcrcObpTIfAf1pNGeN2s6tb4v:PWQ3WB5fbpTNv
MD5:	A67E1C66DA733D115B8B1DEA66EF33D4
SHA1:	BF7AB7F926EA6EF45F57B23C7B96B6B693DF84D7
SHA-256:	D986AC10210E65CE35CE408C2C6900DFB4C02EBE7710FA27B0DD09B86EBDCD2B
SHA-512:	DCF44D88D83894C16F48CF33B147B34FA2FC8745FDE8B6C87F572EBCA41974C99B0C5D42BE314847D3D3AFDBCD16447E03244AAF24B924E18CD87A02F763BFE7
Malicious:	false
Reputation:	low
URL:	https://auth.instiengage.com/auth/authIframe.js?v=1
Preview:	!function(){var t={8357:function(t){function e(t,e,n,r,o,i,a){try{var u=t[i](a),c=u.value}catch(t){return void n(t)}u.done?e(c):Promise.resolve(c).then(r,o)}t.exports=function(t){return function(){var n=this,r=arguments;return new Promise((function(o,i){var a=t.apply(n,r);function u(t){e(a,o,i,u,c,"next",t)}function c(t){e(a,o,i,u,c,"throw",t)}u(void 0)}))}},t.exports.default=t.exports,t.exports.__esModule=!0},9489:function(t){t.exports=function(t){return t&&t.__esModule?t:{default:t}},t.exports.default=t.exports,t.exports.__esModule=!0},8129:function(t,e,n){t.exports=n(6760)},8954:function(t,e,n){"use strict";var r=n(9489);e.C=void 0;var o=r(n(7892));e.C=function(){return function(){try{return window.localStorage.setItem("test","value"),window.localStorage.removeItem("test"),!0}catch(t){return!1}}()&&function(){if("undefined"==typeof navigator\|\|!navigator.cookieEnabled)return!1;var t={path:"/",sameSite:"none",secure:!0};return o.default.set("test-enabled","enabled",t),"enabled"===o.de

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58878)
Category:	downloaded
Size (bytes):	58975
Entropy (8bit):	5.278522968639938
Encrypted:	false
SSDEEP:	768:0xNC8LXM6Hz8mDGs8vToQnnS33cR828/t42nbbCIGz2/IQGTKvBrZwW9:YLX0mXQnnS33cR828/tjM2AQvFZj
MD5:	7586740695219E27C1483AC351F18884
SHA1:	2078C128D66168E617B9AB555C41A353DA85C8E6
SHA-256:	05E77DAB19940DD457E00282837FAECC886434CC8CC5F631575A5E6C386DE774
SHA-512:	E6D4BC8D37EF78C46C1052AF92AD3265852D9ADA9CC87F768F4ED005815FEEAF206EDC79981350AD281889FB4D6BA7B3FD9E2C733B3F90023EE361C876070E9A
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/id5.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.29. * @link https://id5.io/. * @license Apache-2.0. */.!function(n){var i={};function r(e){if(i[e])return i[e].exports;var t=i[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}r.m=n,r.c=i,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=8)}([function(e,t,n){"use strict";function s(){return(s=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n,i=arguments[t];for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e}).apply(this,arguments)}function u(e){return(u="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"s

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59716), with no line terminators
Category:	downloaded
Size (bytes):	59716
Entropy (8bit):	5.41654502924362
Encrypted:	false
SSDEEP:	768:xN0kRLikBnN2VC6no/dKoBpRWEOdUY8pWcl2SAzVZT+maJ:xGCL7sCOo/ppRLOdUY8Tl2JhZIJ
MD5:	CFB114A94DBA422A0CE3FA77BEC050B5
SHA1:	3485188295AD4A4DE007C5A52CE1C89D7D4213B5
SHA-256:	2ECA6AF6292D7E6FD81E3DEAFF1603260C25C7A0D145DF9AC198419333076699
SHA-512:	41A9321B3DDAB3B8CC1D407A24DDE4D1EFB9D333FD3CF94F9E0868A28B4ECF920A913F9B563152E272DBA6EE4F1952A36BB687971B126D3952FD65B8A321B588
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/9234/lt.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt9234_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt9234_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt9234_aa(a)}}var lt9234_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt9234_b; if("function"==typeof Object.setPrototypeOf)lt9234_b=Object.setPrototypeOf;else{var lt9234_c;a:{var lt9234_ca={Qb:!0},lt9234_da={};try{lt92

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=3667141509
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	199589
Entropy (8bit):	5.538058867644667
Encrypted:	false
SSDEEP:	3072:CYAZVNSNcMzsz5AC8H9CBPIrTW77PeMfh6St2nBsLqQqdbt:3AFMgz9Zxfh6St+aqQqd5
MD5:	0A8F615056B87ED8AFA84ED1D16EE0B9
SHA1:	AFBE8947B653EEF1E991FEFC515E1D937B78A637
SHA-256:	47C9F95A694BFBC307DE0E69EA91FF4C92279EAB37FC0914B4FB1F0739C5BC5F
SHA-512:	4046DE177CFB568AA00DC38276CD970C8A0E0C08B3168745BC203A6725BA3964F05E99C305F7CCCB1BE757D2E90F9B9C56BC86A31B9CFC2CD99A82F3188C351E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-86316-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__c

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=5jrh0rv&ttd_tpi=1&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	70755
Entropy (8bit):	5.154470394652395
Encrypted:	false
SSDEEP:	768:+JcVCjfRNnKkuj+h37nFOnHdWFN4HF8JlF58Xmhgpdi0m7qX+LjnrfY3XTjemL1S:5VCjjnKkuj+tFWQ4wqUMQrcTdIaTjcWy
MD5:	7A2B67D291194120BDB151DB914943E7
SHA1:	0675660F125B6A3CC8AACDE6CB2BDA333AB5A9FE
SHA-256:	6E0A84D43913F46215E1DA913B01E7774E2A352056E8D6BFB49FE05EB550F4F9
SHA-512:	A91A8DFC50D2ABB84516BEBA05C4D245F6A40E1CC37A0ACD71FAD28351F518456CFA925E47848A2CB621FCEFF4018365F6FFC29A3981A9BE561B1FDF2ABF4599
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/plugins/connatix.omsdk.session.client-1.4.9.js
Preview:	;(function(omidGlobal, factory, exports) {. // CommonJS support. if (typeof exports === 'object' && typeof exports.nodeName !== 'string') {. factory(omidGlobal, exports);. . // If neither AMD nor CommonJS are used, export to a versioned name in the. // global context.. } else {. var exports = {};. var versions = ['1.4.9-iab4257'];. var additionalVersionString = 'default';. if (!!additionalVersionString) {. versions.push(additionalVersionString);. }. . factory(omidGlobal, exports);. . function deepFreeze(object) {. for (var key in object) {. if (object.hasOwnProperty(key)) {. object[key] = deepFreeze(object[key]);. }. }. return Object.freeze(object);. }. . // Inject and freeze the exported components of omid.. for (var key in exports) {. if (exports.hasOwnProperty(key)) {. if (Object.getOwnPropertyDescriptor(omidGlobal, key) == null) {.

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1597
Entropy (8bit):	4.552701728763297
Encrypted:	false
SSDEEP:	48:YXPk7ASgiwcmyZqNnVqIaWDmNzgUXRMHt:+k7g3yUKWKN8UXRy
MD5:	02AF2266B85541272F1EA3D0517691E4
SHA1:	1FBAFF3001A0956DF9A6B17660029DB7B540FC14
SHA-256:	6765A7BD3FA6E2945F7C22C0FB58C209F7229C84081E5155CCBF646DBF6C3FA9
SHA-512:	A8292DD1825576EA58B1AA4D551CDCDE273F540AAEDD2F3302ECEF4E324BB155A1E95A2371E30F5237D692D29BEA1964D965DE7EF22533B16B3AB95E611A2C02
Malicious:	false
Reputation:	low
Preview:	{"dataAsOf":"2024-04-18T00:00:00.000Z","generatedAt":"2024-04-18T16:00:35.398Z","conversions":{"USD":{"USD":1,"JPY":154.340294035022,"BGN":1.8314448918438055,"CZK":23.648281674314074,"DKK":6.987171083434778,"GBP":0.8018353778443674,"HUF":368.8828541998314,"PLN":4.050472890720105,"RON":4.659425039797733,"SEK":10.897087742297968,"CHF":0.9086993164153947,"ISK":140.74351531042234,"NOK":10.991197677685177,"TRY":32.49695664388051,"AUD":1.5513624871242626,"BRL":5.241408371570371,"CAD":1.3753160408277927,"CNY":7.237943627680494,"HKD":7.831725817024066,"IDR":16181.000093641724,"ILS":3.7796610169491522,"INR":83.51718325685925,"KRW":1374.1080625526733,"MXN":16.943534038767673,"MYR":4.783500327746043,"NZD":1.6867684240097385,"PHP":57.240378312576084,"SGD":1.359677872459968,"THB":36.755314167993255,"ZAR":19.052439366981925,"EUR":0.9364172675344132},"GBP":{"USD":1.2471387863782875,"JPY":192.48376699210536,"BGN":2.2840659597327977,"CZK":29.492689307235953,"DKK":8.713972065212314,"GBP":1,"HUF":460.048

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 342 x 50
Category:	downloaded
Size (bytes):	2879
Entropy (8bit):	7.62143111234988
Encrypted:	false
SSDEEP:	48:0IhitNn2VqpJ3TPL8a3hxzRg7KiUlyKCITzCwA9ErhzvYEM:82ET/hxNg7KNyBVwkQhhM
MD5:	9098909B853256CD990F06D5ED7D4BA1
SHA1:	758E3E8E02574FE76B64D14150E1B910B6C1B00A
SHA-256:	AEE7EDBCB570CAE2EC689EA12A8195ACDDBDEF7396E20F6389BBA9F0608B39D3
SHA-512:	83B9DD05A9E9C87224EE13D72679BAF32D880352D457FAFE6C0A4056710AC5542D509ADE58F309C74A2D2849310CCC10FD55C5492E98876B3D40AECA78E779AE
Malicious:	false
Reputation:	low
URL:	https://cdn.justjared.com/wp-content/themes/default/images/jjlogo7.gif
Preview:	GIF89aV.2.......u..;@..........gp.......X`.. ....,0.IP.......................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:B098C8F7842311EAB799FFB08D8CC38B" xmpMM:DocumentID="xmp.did:B098C8F8842311EAB799FFB08D8CC38B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B098C8F5842311EAB799FFB08D8CC38B" stRef:documentID="xmp.did:B098C8F6842311EAB799FFB08D8CC38B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...................................................................................................

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	34315
Entropy (8bit):	7.976620477304767
Encrypted:	false
SSDEEP:	768:0Fvc+vIzfkufBp/vkcRHKx5+fAVKFVqRGk7exHoAlR:0Nc+ATkAP4x5+fAVKH+qVR
MD5:	8C675DD2837F38182D7507BEB9A382B6
SHA1:	434659C79DC96B6614FE35503E450725BD5F2EEA
SHA-256:	D8770DCAF5FE9D445CED16ED28F33503C968E4FCF9AAE928845AF0F18E86ECF7
SHA-512:	8AAFC52FB00B6F65D31A319F6EC40BEA005883655B18341FE7059BB4D4154F3685A1A9E606207A733B195F88258923F6A4351C0AF187B91ECEA3929D112CC87C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:754FDEC3FDE411EE8B50864215DF537B" xmpMM:DocumentID="xmp.did:754FDEC4FDE411EE8B50864215DF537B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:754FDEC1FDE411EE8B50864215DF537B" stRef:documentID="xmp.did:754FDEC2FDE411EE8B50864215DF537B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 364x180, components 3
Category:	downloaded
Size (bytes):	20460
Entropy (8bit):	7.9231583446836416
Encrypted:	false
SSDEEP:	384:tPOAd6MX8qkUJVS+xsH5EkxrLcPGQmMZaFtFB+8/aLK0rmF8u7I:sqbJVDxmiPGQzutFYD+0rR
MD5:	D81EF90D5FD819FF8E2E27BC5DF486EA
SHA1:	9B2DCA296D2106BE0C7F7E544C8B17E483BF96AF
SHA-256:	038DE56E406A59626CF5FC1828B4FB54B541A6903490C1388D88E90ADE27534B
SHA-512:	6FF48E0A2344AAE129AD6A4DFB1E33453E44748D5D790A705A3F12D4E3AC19474E8DAD162E3A8CD0C0896556D443CB39DE6EAD9B2EB7347E89A3FBE7F6E352E9
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/img2.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:44b1b93e-32da-4084-89ac-f92a7ed6855c" xmpMM:DocumentID="xmp.did:DC1EC309B3B511EEB93B8921D7C19B7E" xmpMM:InstanceID="xmp.iid:DC1EC308B3B511EEB93B8921D7C19B7E" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ba3dca1-8e8c-4534-9b35-4990195e748b" stRef:documentID="adobe:docid:photoshop:552d9709-9dae-c44d-99d5-e58ffed88dbe"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d............................

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	69172
Entropy (8bit):	5.268293105185626
Encrypted:	false
SSDEEP:	768:pDQZMYcmk1OwgLTGg3BbU5QyzYh4/sU0gO0DnEljaMhFiokCwxaK2m9hDMaQgJSI:lW5c7XQVRfg8BhYocWCMaJY0fSlA
MD5:	60C8878662B54936050DA15809455C90
SHA1:	919FF608C872442FF4C87B4759CEE6BCD799FBD1
SHA-256:	7E5473A142DF98D45567030697B05971F0448C7E6CDC76BFB30198CAAB79EF6E
SHA-512:	7080B68F99A325A42BBDD7611A0C1C0AB3D8A902EE95F70C49A658FA3ED48F62C3DE6785C7EBBB0A3F70AE2DFDBA0906B43763E9860D443C6B12966BCF97438D
Malicious:	false
Reputation:	low
URL:	https://baitbaseball.com/v2jaxeuX_Hk3GKMTpqiBqy0Msxd_NxEovD1J9sWXnOcZpltQROR4DIwU
Preview:	!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var e in n)r.d(i,e,(function(t){return n[t]}).bind(null,e));return i},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([function(n,t,r){"use strict";r.r(t),r.d(t,"_reset",(function(){return dr}));var i="o

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.77093626917207
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KV6EBsXAbBK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqzX+BK3T
MD5:	61CA2D50712129BAB2DA2EADF692620B
SHA1:	9C0E72F89D020B89FD1BE79E379092BF54F41BC6
SHA-256:	6BBBBD632D865BF739CFC4952142C582C2733E5342783A58E2BB23554D9E267F
SHA-512:	1A0796646C1DDF6155DD3B91BE3E93F9D434424A6F073A2D114225046D96F883F9BC9A4886FD56968ACFD2E7FD70A1661BB4A2373B779F9D64061E402CE862E8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /public/hb/bid</pre>.</body>.</html>.

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1924), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	73548
Entropy (8bit):	5.086149231186715
Encrypted:	false
SSDEEP:	1536:YiLe1YOWx+AoBEFcltL8dMnDJC17hxci1T52Z5kz+O4q4U5Xi2P:YiLe1XE+jEFG0MMz+Rq4U5XX
MD5:	73E30001CB09D2A3028D1947426B53AC
SHA1:	8271ABC6546A82050723591325FF334FB4A51F1D
SHA-256:	6911F3878BC0FE4CDC7B91539FF8363C083F3D10F4123AEC8C1F194926A242B6
SHA-512:	85C8088485920611FE9D7FE3DB192C157E17A678F583B7CAF9093FFE52377A3388CE39AF47BB94583FB2D4B87CD4574A2A29120380ED1600B5D03ECFDBF5CCEF
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US" xmlns:og="http://opengraphprotocol.org/schema/" ><head profile="http://gmpg.org/xfn/11">.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />..<title>Just Jared: Celebrity News and Gossip \| Entertainment </title>..<meta name="description" content="Just Jared: The latest in entertainment news, photos, and celebrity gossip in tv, movies, music, pop culture and more!" />...<meta name="verify-v1" content="oXumOPsmbh5NSgcb+H7QnS6LODchpcrrTjiY8wrg5eg=" />.<meta name="google-site-verification" content="cyHsbO1FlfVhQrShgaYdVLYI3yR-2aKWtQ03mGzDN6I" />.<meta name="msvalidate.01" content="73DE402B5E1946776E6178138877FAF2" />.<meta name="yandex-verification" content="6cf9eea1526004cc" />.<meta name="generator" content="WordPress " /> leave this for stats -->..<meta property="og:site_name" c

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	907
Entropy (8bit):	4.963921795373696
Encrypted:	false
SSDEEP:	24:O2JJ2aXC9nggL1YpQnMVhthb5vdawYhF6JGY:O2JJ2pggCpFVvI+JL
MD5:	BA93B0C6233A825A51E2BE27F36289B4
SHA1:	2C4621A0F9252043D369D9CDEE6939B3C0C00F8B
SHA-256:	FC744992C30A094047051F2168F08D25DCEC1B9285B4141EBF09271C193E525A
SHA-512:	7820A30365C0E16AFA5ADDC4832D054CCF383CB85DEC7B51955375C97B572AB5909A391B9BE8C819525D726B0A7B13D2CDBBA75E27D102A2168463E0A46A3AF9
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/css/main.css
Preview:	html {. -webkit-box-sizing: border-box;. box-sizing: border-box;.}..,.:before,.*:after {. -webkit-box-sizing: border-box;. box-sizing: border-box;.}..body {. margin: 0;. padding: 0;.}..#mainContent {. position: relative;. overflow: hidden;. width: 728px;. height: 90px;. cursor: pointer;. display: none;. background: #edebe4;.}.#mainContent div,.#mainContent img,.#mainContent svg {. position: absolute;.}...hide {. opacity: 0;.}...setImage {. height: 90px;.}..#img2,.#img3 {. -webkit-transform: translateX(182px);. -ms-transform: translateX(182px);. transform: translateX(182px);.}...setDown {. -webkit-transform: translateY(7px);. -ms-transform: translateY(7px);. transform: translateY(7px);.}..#topGreenBox {. right: 0;. width: 546px;. height: 90px;. background: #023D3D;.}..#cta {. top: 9px;. right: 9px;.}..#bgExit {. position: absolute;. width: 728px;. height: 90px;.}

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9252), with no line terminators
Category:	downloaded
Size (bytes):	9252
Entropy (8bit):	5.16821523485247
Encrypted:	false
SSDEEP:	192:35RqSljrf44tBKK09rn57XJ5Y+5Rg2aso5oD3jjqU5JRU:JR84tsKQrn57XnYea0DPRnRU
MD5:	471430B604A249135CF6F76826FF3C59
SHA1:	28DF69224ED0791BE01AE9E9E9CCA98F12CB4E99
SHA-256:	0AE8F033629579097FC16E1672528F3B382A58A0865ED7EB15D4D9419C5B1919
SHA-512:	EC2FD9464B4DAAED194CAC8E41702ECC5C692907205578A3D2E8DCD32E63368766D4B90AE96290A453EB2E63E45DCFD7D73238D0FB39EC5AEC56310D3D1D76A8
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/unified/4.21.0/custom.1a28bbe027bd69b90733.bundle.js
Preview:	(window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[2],{182:function(e,t,r){"use strict";r.r(t),r.d(t,"default",(function(){return m}));r(27),r(54),r(102),r(51),r(49),r(50),r(30),r(31),r(32),r(186),r(187),r(53),r(55),r(68),r(35),r(72),r(33),r(22),r(28),r(29);var n=r(0);function o(e){return(o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){y(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){O

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45703
Entropy (8bit):	5.990727300408801
Encrypted:	false
SSDEEP:	768:zQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtOAMTUVgOqQ4LVCzlx8YiQ4atfqomRzzId:4R3e3oVUC5x8itiXS
MD5:	D43EB7E5743BBF3A7AF243988C759650
SHA1:	59EAD68B24F6A311FB72E977C797498B049079D7
SHA-256:	E3C8D59518CD1097EEDD9A2895C8C8F583F999C0416F1807A23D558F03B41DEF
SHA-512:	87B8AEB8138028D913B3DD769E6640FAECDA95E3C86B837D61258A8414A56458B5ED0315B50D33D683EE23EBC0A8C77E497A518DD3713818AF59B2E760D3E963
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3204156870783777&correlator=3005524710582424&eid=31079956%2C31082853%2C95330210%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_4&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=2&didk=570410212&sfv=1-0-40&rcs=1&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532392967&lmt=1713532392&adxs=820&adys=3389&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=2&ucis=a7z9a7r64ysj&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=124864849&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356162&idt=16827&prev_scp=tg%3D0%26shb%3D1%26it%3Dtbr%26amzniid%3DJBwkJ7FiZPEfK81JSox-uBUAAAGO9nzxgAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAvBiED%26amznbid%3D1bc3zsw%26amznp%3D9qn0g0%26amznsz%3D300x250%26amznactt%3DOPEN%26ics%3D300x250%26iba%3D00003%26iaid%3D328ac261da2326f%26ib%3Dcriteo%26aid%3D0edf3b11-fc8a-4969-9d97-cb323ad5e680%26at%3D1%26h%3D13%26auto_refresh_counter%3D1&adks=76579100&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_4":["html",1,null,null,1,1,1,0,0,null,null,null,1,null,[138357457275],[5748181897],[5046746103],[2884652103],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsk0uvGDqh4YTh4QdvB9XmvKvU6SksFnKFLTx6_Vkav5ARNvuXgNLroFQGkO2NJfp_bUCsHIpo-SNOOwhmVpym6Iww","CNqCws2tzoUDFcPwKAUdpskLjw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"a7z9a7r64ysj",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SP

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75977
Entropy (8bit):	5.29012154608858
Encrypted:	false
SSDEEP:	768:x40jXiQelUFqaLN80uCV4tJoYIFA3Ekea0C3BAPoS+wOfZyQr7M6Hrx6:pjBg0r43AmIiUoSdOJrtY
MD5:	2008F61543A14BC0893A126F7C9736B6
SHA1:	1F796E95FDE22349D6226AEAD8D661B652D1310A
SHA-256:	291F515583A6C387346D142CAED7EFDA8F0630866C7FC9D0F026FD95AED50081
SHA-512:	EF5B000CB7C1EC306B6A39670054E6F78E159D1FBE7D34A71AACF801D1D7D7520F93DCC7214F83B5F122D585F9EE55E4DA76461DABC6BABC9DD317526D81589D
Malicious:	false
Reputation:	low
URL:	https://csync.smartadserver.com/rtb/csync/CookieSync.min.js
Preview:	!function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);throw(f=new Error("Cannot find module '"+i+"'")).code="MODULE_NOT_FOUND",f}c=n[i]={exports:{}},e[i][0].call(c.exports,function(r){return o(e[i][1][r]\|\|r)},c,c.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}({1:[function(require,module,exports){"use strict";var __values=this&&this.__values\|\|function(e){var r="function"==typeof Symbol&&Symbol.iterator,t=r&&e[r],n=0;if(t)return t.call(e);if(e&&"number"==typeof e.length)return{next:function(){return{value:(e=e&&n>=e.length?void 0:e)&&e[n++],done:!e}}};throw new TypeError(r?"Object is not iterable.":"Symbol.iterator is not defined.")},Cloneable=(Object.defineProperty(exports,"__esModule",{value:!0}),exports.Cloneable=void 0,e.prototype.clone=function(){var e=this,r=new this.constructor;return Object.keys(this).forEach(function(t){v

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (56043)
Category:	downloaded
Size (bytes):	327164
Entropy (8bit):	5.5061054495525745
Encrypted:	false
SSDEEP:	3072:zcLShNRXSBeNN9dDon/kyvRweEXMV6AxBUjqN3Lj1TKid0bGpLsev6nsRs2hW/:W8N9+/k4fMqz9GCNvmszU
MD5:	81267302EFDFB3E4524A22631A8FC99E
SHA1:	EFB274E7D019D5F3CDBEE88D317F46FE45BC91EE
SHA-256:	70C00445D6632039ED99AF760731DAF3BF60EB12061863EE61E2CD7276A54D18
SHA-512:	D378A12E5465E2DEFBBB794D1F5CA287D8A9B31E16482F782DC6C53D9F6CB4600B8B2ADCAAC0CCF963AA06B42569C8119E16987F59FB052B4AB1254784ED5EF0
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.justjared.com
Preview:	<!DOCTYPE HTML>.<meta chartset="utf-8">.<title>Twitter Widget Iframe</title>.<body>.<script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?functi

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	41301
Entropy (8bit):	5.328728246661616
Encrypted:	false
SSDEEP:	768:zRN675xw/i3c9OlP0Sl3tiMVwbu1FIbGHgARi3iLrZJb1w7Ofb/hbNvRfWKLBTd9:zRN67cfBk3tTuZJ3iLrZJb1w7Ofb/hbD
MD5:	134FB04A4750A30FB28DCFB9600F508C
SHA1:	0EF858FFFA31E15721249B1E5DB74859E63BE733
SHA-256:	3DA0DF189F27C046312EEA0DA1FBA5927C501FB18AD32293BCD4280E48ED02EC
SHA-512:	E0CB0176C9FAF1F83A6AB91743ECC612AAFEB88CAF757328F0C5771DE318ACA4FC5DBBD5B673B4B0BE395092ADA37D44F8EBD2D8AAF755B4B657330D70EA5E40
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/plugins/connatix.omsdk.service-web-1.4.9.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}. var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};. function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x50, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1010
Entropy (8bit):	7.763461315126031
Encrypted:	false
SSDEEP:	24:0dcARAzTS51hWQiJgBsauzOXK0cI/GZz7z2Vn5XO4jjoKTpSFpO6tKPV:OQnJihuzOX/dV5BjjgDyV
MD5:	6A7E2B6C6C04504CFBC1E84E46EEAC4C
SHA1:	526106151814EDF528BAC7A44EF79E8EBF33F4FE
SHA-256:	2384B2BCA063543557DE5B07A4F580C98D33427A1B580AFFF58134638E5D4C13
SHA-512:	9D027374D6909D2B7183BDD1CB72CF6ABCC72FE5C74023CF02B04AFF2278616EEA1317232EED4AF4FFD6297C3FF6C91AF7EE48AE8955A4E97E3394565C030F11
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?h=76&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fstatic.us5.us.criteo.net%2Fdesign%2Fdt%2F100366%2F5313039%2F275026afecd648afa3a87193a64ec6c7_logo_n_horizontal.jpg&v=3&w=596&rid=4&s=FcokYNlarkWPYPA9HUSzGSBU
Preview:	RIFF....WEBPVP8 ...........2.>m4.F.#"!&8....i...~#...O....f............~=..........?.?....)......7.....55..GCx?...oi...9@.v...K.8r].....hGA..jRV.4...x4..T..8..0.....h_.......Q..[..(....^".DS@>'..8..5AT.......... .....JY../..\.>...g...0 ..iG.....5dM...1Fs....x..fB..<W.6.u......W.........a....8.K....J...A.a.kl....h$...){....]+Y..q ........2!..r..3....#....`.CZ..P/.+...Ki.r..Y.7-...yP....c....LZO1*..iQ..G.y_.-..cLX...%.n...0...X....?d.a.n.Gx..C....}.._.G.....8&pWQ:'7>..{.'......X...zx...1.rA.7.{.^..'9........G.."U<...4^_.8.L.S..!Q......"...^V6...uk.....J.v..?..N.G.w.,..@.YB....Y:~..K..zv..&.F.n{3... 2./....y..A.......f....}.N#.....E.......c.u.......o9.m...R..t..4.9...@...DY(...N...5rQ.#......M....!X%.n_...C...).M}..<.r;V.......w.rF...W..-....X..(.i....S..Gzm.....;.N....RB...lu...:WR3bQP7...$.kl.......Xj%D...4l.9..:_{.c..hDr...1..v.y..[.....>.65......pD.nHD..wa,?k.'..ZCVM.....O._n...P.=.z;".n.a&d3M.m....z`..r)y..#f>f.....y...9........u.

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 208x261, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4466
Entropy (8bit):	7.957215175857895
Encrypted:	false
SSDEEP:	96:V3gInk4K8x1LwlbFRjR+SwRTe0H7CGotOmp72Qb:V3ZnkZfRARe0H7CZpRb
MD5:	70AE9018C6F197061D31FAAC2C7FEB5F
SHA1:	EE457AA45EA288F99C6B6B888DC29F380904A186
SHA-256:	8A10B03B5E0730F99A49E8F8705FF69C600FA0BE15E3703AE3C1FF4A18C55AEB
SHA-512:	DBC332A9E762F2BC3AF883D6329C103686BF2C6F6FFAA6816F2F88EA1F408621BE6C857E17D48E74843906F91B68C7217278C08282A60DF8B3CF9351F346806E
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400015165506_WHITEGOLD_486x684.jpg&v=3&w=400&rid=6&s=AV6NXtrNQ44BsxwGsSSQ-bgh&b=400
Preview:	RIFFj...WEBPVP8 ^....X.......>m2.G$#"!)s{....in.o...Rw&.^f...-....'...8......[......O_.W..9..ytV.....t....c......dd..."..o.]..>...k<q4.cB...F. >..,..U....B..{.....y.;.u.w.N..B.1.OBx.U....K-..=.'........2...;..W.{.P..~.7.\|1N."..xz.....'Y_H...".Z#.:.....N..%.G.....a.Z.K..B..zp.p\|^`.......U.c.u+i...!.s.q..Q...:-..L\|%.s...sAR.m.........!.{._k.H}..>..[....o #7.....'./38...FRpL....0...1...<7'8.!....e....]..-.D...".S.wu.Z.e.....u.G.I.n.-.8..G',....nA..aF.~.q.......m....\...-..z.N?....c...k:...#.d...W=h...>..Q#..V.7....b?P]...,.gEz.E.%].t.....:~..`..U(....pp..=j..j..#..x.7^...?.r{5.......N..8X...K.o..+.x.&.J.g+y..!ON..>..[Y..=.D.T..[]!.z.......>h.Oz....n...."[3.SO..M..4[D..cH ......I$...5R.0. ..........b.^.K.Z...."..r.....i.B1..J...Yj..Z.W3n...~......>.1...6.<....j..-....x...2.p3j..X....M...$.t..0..l1..8...C....1....P.6..8F.........@"z.:L.~....b.......k.......Cd.i.....'.>.../.0..t.QX..cCu..............U.61.'.*....`.C...bA.....h.8AS...

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-east.amazon-adsystem.com/x/px/JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ/atf/%7B%22atf%22%3Atrue%2C%22f%22%3A1%2C%22vs%22%3A%22visible%22%2C%22ah%22%3A90%2C%22aw%22%3A728%2C%22ts%22%3A1713532430557%2C%22bn%22%3Afalse%2C%22pixelId%22%3A%22kk5z5rtpai%22%2C%22ver%22%3A%22r-1.32%22%7D?cb=1604815
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1340)
Category:	downloaded
Size (bytes):	1429
Entropy (8bit):	5.706970701536421
Encrypted:	false
SSDEEP:	24:f1bvTS2tR4PyT08FwRTeUzkHe8yaynJkbR90n9L:tzTSA4PyrIjzkHTj46bRi
MD5:	198005C1649B2E9D961FB95036F5DBAA
SHA1:	73609AFF45F732270C881F01CF62A9754F94A93C
SHA-256:	D0A424148932FBAAB4329DADA322FEC351250CB9CF72235C2816C3E485721C8E
SHA-512:	CDEEEBCEE22685C1F0E2A17FCF7D54557384F1BCB8264B8D3FCF231EEFE8E8803A3F3019EC3FA4D4E718F5D844D2384E285A0DFECB20F119A89752F9CD5E1B3A
Malicious:	false
Reputation:	low
URL:	https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyRhZDVjN2JiOS0xNWE0LTQwYjQtYWQzZi03M2ZhN2NkODRlZDCqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=a662aef0-1110-44c8-b99d-2acba4a5db18","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3Da662aef0-1110-44c8-b99d-2acba4a5db18%26bidder%3Dopenx%26uid%3D%24%7BUID%7D","https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63
Entropy (8bit):	4.501189154298473
Encrypted:	false
SSDEEP:	3:YxhACNN7kYCiNQDxP9FxUW4:YndkYCiNQtP7uW4
MD5:	1F00B83EE145E5D88C5E251E942BE4AC
SHA1:	220E4F3F1D0BBA9C02843EEDCB1A774C21401BD0
SHA-256:	498F569DD0990E2D9F5DAAA0D114389F12DC6D6BBDB3A9AD598B3E9DFF7C99C8
SHA-512:	D063631AE48A70C0F9121C23C4C63CC3E13B5D59AFD3C04E1CFD2B185BF5699A220885E99AB96A0F7727C8C69A5F817375B6F0A6AC0720BD8CC3EF4B55740F2A
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
Preview:	{"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:13:37"}

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:d:d
MD5:	C9F0F895FB98AB9159F51FD0297E236D
SHA1:	FE5DBBCEA5CE7E2988B8C69BCFDFDE8904AABC1F
SHA-256:	2C624232CDD221771294DFBB310ACA000A0DF6AC8B66B696D90EF06FDEFB64A3
SHA-512:	BC23B8B01772D2DD67EFB8FE1A5E6BD0F44B97C36101BE6CC09F253B53E68D67A22E4643068DFD1341980134EA57570ACF65E306E4D96CEF4D560384894C88A4
Malicious:	false
Reputation:	low
URL:	https://c7.eu-3-id5-sync.com/
Preview:	8

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1917
Entropy (8bit):	4.789459836510163
Encrypted:	false
SSDEEP:	48:SuOCUC9hU0KQBknEh0LDlMJLTueW3RdufCmmmOlAwBrv:SuOCZ9hnJBkEh0LD6x+3fufBmmO+whv
MD5:	E8EDFD51B5F964EE289CCB19D71C210B
SHA1:	1EF090DBA250FDF7B2ED7865EC2B7E94C637DCFA
SHA-256:	8DDC149C683494166174815145A79CBBD19ED47BAD89A04CFC6E46C03654B534
SHA-512:	2F6A0F6AF43464DD5A8C7DD316ECE87A94C48660CDDF66C5B7EE28B7B647FA0EDEE27A0FAB9D2A71C9171D490247EEED28E2A878A9105AB09994807E0DC46709
Malicious:	false
Reputation:	low
URL:	https://ts.amazon-adsystem.com/?s=%7B%22sourceid%22%3A%22600%22%2C%22sourcetype%22%3A%22dtb%22%2C%22traffictype%22%3A%22web%22%2C%22mediatype%22%3A%22display%22%7D&p=%7B%22srcName%22%3A%22CS%22%2C%22adId%22%3A%22593399596890441530%22%2C%22is3p%22%3Atrue%2C%22campaignId%22%3A%22582347282419143467%22%2C%22ep%22%3A%5B%22paa%22%2C%22ara%22%5D%2C%22creativeId%22%3A%22590904568646777949%22%2C%22bidId%22%3A%22uKZ9OkqnBPcLvCMjgR46yA%22%2C%22advertiserId%22%3A%22577874589498151894%22%2C%22clickDestnUrl%22%3A%22https%3A%2F%2Fdrinkag1.com%2Fen%22%7D
Preview:	function extractPayloadParam() {. var doc = typeof window !== 'undefined' ? window.document : document;. var scriptUrl = new URL(doc.currentScript.src);.. //Extracting payload params from script url. var params = new URLSearchParams(scriptUrl.search);. var payloadParam = params.has('p') ? JSON.parse(decodeURIComponent(params.get('p'))) : null;.. return payloadParam;.}..function constructScriptUrl(baseUrl, params){. baseUrl = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;.. //Construct query parameters. const queryParams = Object.entries(params). .map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`). .join('&');.. //Append query parameters to baseUrl. const scriptUrl = baseUrl + '?' + queryParams;. return scriptUrl;.}..function injectTag(tag, scriptUrl) {. if(tag === 'script') {. const script = document.createElement('script');. script.src = scriptUrl;. document.body.appendChild(script

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuIVh9qgaGSuMfRPQ8CXNbQXd_zP45BynJPmUMcgm8R16F3K64d3wLK1arff624tkeoVaC4hhfN7QdOevcYI0HQ2jB_9t4RjSE29ZYbpliF1_Wxf2aRQBIVuH7EsaFEWSytnsTrSg&sig=Cg0ArKJSzMjTob1ouOfGEAE&id=lidartos&mcvt=27445&p=578,820,828,1120&mtos=0,27445,27445,27445,27445&tos=0,27445,0,0,0&v=20240417&bin=7&avms=nio&bs=0,0&mc=0.94&if=1&vu=1&app=0&itpl=20&adk=1494241348&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=946517701&rst=1713532374948&rpt=2545&isd=0&lsd=0&ec=1&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39779), with no line terminators
Category:	downloaded
Size (bytes):	39779
Entropy (8bit):	5.374893550155718
Encrypted:	false
SSDEEP:	384:Ua3oxHUkWhW7SQ6NbVmmfXavNRHJz/qtK8o7S1uHCs/XfPCVHk5+VLLyMyyH8oCR:P3oWjvTfXgzpjBHCs/X/I4CpTX4rcb6
MD5:	B4FFD9BBE2C3CD7A56F9CC7C09FD0127
SHA1:	87718D28AC29DC8C3859474B260B6F7C52DD400A
SHA-256:	935A7D5AFE4252704CF05B0216D2232822ED36F2FA3A512719C6E45CF6967633
SHA-512:	2170E9166C1D7DBB2ADFFD0DFBD650BBAFEDBE0A957A42184926DD4C4A8ACEFB4F8309885E522C315CCDE23802365CA0D130E11135505EF399A888DF0E575014
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/17331/sync.min.js?gdpr=0
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync17331_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync17331_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync17331_a(a)}}var sync17331_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync17331_c; if("function"==typeof Object.setPrototypeOf)sync17331_c=Object.setPrototypeOf;else{var sync17331_d;a:{var sync17331_ba={Sa:!0}

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10325)
Category:	downloaded
Size (bytes):	10361
Entropy (8bit):	5.165881119069047
Encrypted:	false
SSDEEP:	192:FpNupqzG5dc0J7HF8XH3dZ0bwuW4x+GbJxhvsZ2nJGADWCpyVQQeD7wbI60EI/y:T5gJx+GbJIZ2nBWCpyVQQeD7aI60EI/y
MD5:	38CFE07B553159D76228F68BF607971A
SHA1:	8757874755EB4F0A4B2C62FA27CD2B6AD9B69A06
SHA-256:	E15210083FE1FC53AB140F9BE5A766761EE5556269D0A7CBC953C19693292CC2
SHA-512:	A2B5694052F3CC0A61970C1FAE75B2353A24F35E2C9304D118C398AA876C9D5B01E5FC2B2998DCE4431CE4E0BBF29DE0505D7478FAA49C150AFB179B631D1E8B
Malicious:	false
Reputation:	low
URL:	https://d188m5xxcpvuue.cloudfront.net/justjared/stg/main.css
Preview:	.ad__align{align-items:center;display:flex;justify-content:center}@media(min-width:768px){.ad__align{flex-direction:row}.ad__300x250{min-height:333.3333333333px;min-width:300px}.ad__300x250-inner{min-height:250px;min-width:300px}.ad__300x250--max{max-width:300px;overflow:hidden}.ad__160x600{min-height:800px;min-width:160px}.ad__160x600-inner{min-height:600px;min-width:160px}.ad__160x600--max{max-width:160px;overflow:hidden}.ad__728x90{min-height:120px}.ad__728x90-inner{min-height:90px}.ad__728x90--max{max-width:728px;overflow:hidden}.ad__970x90{min-height:120px}.ad__970x90-inner{min-height:90px;min-width:300px}.ad__970x90--max{max-width:970px;overflow:hidden}.ad__970x250{min-height:333.3333333333px;min-width:300px}.ad__970x250-inner{min-height:250px;min-width:300px}.ad__970x250--max{max-width:970px;overflow:hidden}.ad__970x250>.ad__970x250-inner{min-height:90px}.ad__300x600{min-height:800px}.ad__300x600-inner{min-height:600px;min-width:160px}.ad__300x600--max{max-width:300px;overflow:h

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.1961893998690174
Encrypted:	false
SSDEEP:	3:CUU0/wv/p/Hh/:S0+/
MD5:	45CF913E5D9D3C9B2058033056D3DD23
SHA1:	30CB5D44E276505B1D4C053C8B25525DA228DB30
SHA-256:	42B976597A2D977D0E300F6D06BC903DB389E5C112D33C1C8C249690A522D9F2
SHA-512:	16DD1560FDD43C3EEE7BCF622D940BE93E7E74DEE90286DA37992D69CEA844130911B97F41C71F8287B54F00BD3A388191112F490470CF27C374D524F49BA516
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/skeleton.gif?adslot=ad_300x250_8001271
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=adyoulike&endpoint=eu&gdpr=1&gdpr_consent=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-r1&userId=RX-dd40f750-a014-4531-a2f1-8878dd503e55-005
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 400, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	42476
Entropy (8bit):	7.991334263399373
Encrypted:	true
SSDEEP:	768:AgTW7Aqd5pV5ipEeUvrn0Mjc9h2hCUa2bnVsFdIB3dRgXOAlFy8bVfciL9Y2:9Wc4pVkEeQnf+wCUpnV+8N++USi5t
MD5:	B01F4B6F57E1D8E3CF8AD2D5A55D3FFE
SHA1:	A155724A22AD86E57DEC8DCAC37A680262BFD1DD
SHA-256:	01415DFAF536FC729162EC40FB57C7F285537303D7137EFC533BE373C8B0918A
SHA-512:	66BEE3313B70EABDDFF3426CE31B90DFEE6A60027A5C774277C97CB034A2D2ECAA6850E7C4F82496BB23DB1DD917EF1D6038BB91AECA2FFEBF3500B062F557D8
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fcdn.shopify.com%2Fs%2Ffiles%2F1%2F0745%2F1299%2Ffiles%2FACTBSM-BLK-02_Toiletry_Nomatic_Sm_Front_20190702.png%3Fv%3D1713298875&v=3&w=400&rid=4&s=5FaysOc2aMU2to-MC01P5KBU&b=400
Preview:	.PNG........IHDR.............od.....=PLTE...;;;:::444333555888...666777999<<<222===>>>@@@???AAACCCBBB...DDDEEE111000...FFF...///GGGHHHIII......---JJJKKK,,,LLL+++MMM**)))...NNN(((QQQPPPRRR'''OOO......&&& ......%%%...SSSYYY$$$###WWW......XXX...TTTZZZ...VVVUUU"""bbb...ggg[[[```.......^^^eee]]]kkk...xww\\\yyy...sss___...uuu...aaa..~.........dddppp...jjj......{{{......mmm.................................................rrr......}}}......ooo...........iii...................................................................KLK........................===777556...<=<888776222:99/./<;;;::@@A...344@A@FEE. ......pHYs..........{Rk.. .IDATx...y.d.y....9....2k......[{K..mI^d$..0....A..1.<.0,&........&.l.."..l.Y...c.-K.,/Z[..Z..^..Uue.Z2..y.9..qn..n1........}....._.o..<.SU.O....y...P...nP._]..X....G....U.......*..=x.....W=..2......y.:........w..~U.'.....wW.....#.Lf~.W.T.'.f{V...A.M.h.:.V.z.....;.............../.C...{.Uw_o....\u....[..&.W..:....w>c...f.M]....@..].\|'(.

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6872
Entropy (8bit):	5.497332349679712
Encrypted:	false
SSDEEP:	192:cprD0SkiD53JkQ29lMkQ29qkQ296XkQ29AFN2om/mN2vpN2brHN2zgN2om//N2vv:cP7Jl29lMl29ql29Cl29AL2R/62v/2bJ
MD5:	1AD6925A904A3687E5028A5BEDD09AE8
SHA1:	81305EA0FA84F6241E73DAAEA120AC70F3DF3716
SHA-256:	6DD7EA4D392E4F1ABE084D0F728B41CB44BA347D5AA6C7162037F8A11A617121
SHA-512:	2EEE4EC99411D22C51F72648DC2C48A7DDCFD1A3C35E1748F72D896A6106A893F838F1B72BA7F5E0FA2B8E3741E976A0C0D39C36828106F6175F318DA48261A1
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Playfair+Display:400,700,400italic%7CJosefin+Sans:400,700"
Preview:	/* vietnamese /.@font-face {. font-family: 'Josefin Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Josefin Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Josefin Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/server_match?partner_id=1680&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fimprovedigital%3Fchanneluid%3D%7BPUB_USER_ID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454814460294955
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPU:ttlWBZ7O0bvQQGArHu5GKn8
MD5:	ED4FA4EB31641234901881C752E61024
SHA1:	DBD32C0D8D3E063329D7A27E24499E63804A94FB
SHA-256:	85F407912384186334577F65BF6BB88045BD96F5222D7C696CC71303D65C826A
SHA-512:	E3ABF742E5AC3175A0DCD9799FB29EFFCFCB1B6BE294D10449421A77C9EC6A0FC12855566E9761150E38BDD0CEA1D369E4984C9EF618D9F7B212CBCE88EC4A8B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5109), with no line terminators
Category:	downloaded
Size (bytes):	5109
Entropy (8bit):	5.031843915216041
Encrypted:	false
SSDEEP:	96:Eh+UfNnRveDXjahQQ869CwcM9ZUXJRGr6pKyBaIYj0YRejkwlcWlEFrc:qr2yhfbC5cxyYBRejkwaWl+Q
MD5:	89661B8FD918815BCB224BBA79CABAB1
SHA1:	FAFA9D661961BD9E83CF43E84BC2CE52AE0CB787
SHA-256:	533B23C57B1770CC3EE9C15B998B2EB494FA0ADB2D6929FD22A9B78ADFADE3A7
SHA-512:	C6BAA2E2B72B2091E16D3FD2377121E756287F9BD3906CFA85D591641342C63587AF930FBFFCE72975A260D664D677A985B8527148BE583AD0050FAFD6A4A423
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/polyfills.b0798.js
Preview:	!function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)t.d(r,o,function(t){return e[t]}.bind(null,o));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="/",t(t.s="3vyS")}({"3vyS":function(e,t,n){(function(e){e.Promise\|\|(e.Promise=n("B/eG").default),e.fet

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=330235f9-3b0f-6aa6-44842575
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32047)
Category:	downloaded
Size (bytes):	51512
Entropy (8bit):	5.4604354556714965
Encrypted:	false
SSDEEP:	768:teVfP51mXH9TnhprQbpHoTL2oTpi9pcXx7k0f6FrqDrRCJUcQZygc4eoTLKTh3it:t2maHApi7oNRUUcQZygc4eofT84
MD5:	0391C44FB8FAFA1A98A3638BA797E4D5
SHA1:	AD29F97063D7834387C9E557F7997AB4ACFCEE75
SHA-256:	69F0E1A605E4F76745EC8F017092C97487B4802998ED5CFCCA194C120C729AE0
SHA-512:	8548CC46C97A25B7138FA9FB14A9C760C797245DCE7DE3C64BB6115EC3491BAF6EDF1835663FC227F2EC6447CE068BBB4E1409E6025B6F72B347109B75083730
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/direct/csm_othersv5.js
Preview:	window.amzncsm=window.amzncsm\|\|{},window.amzncsm.rmD\|\|function(){var initCSM,amzncsm=amzncsm\|\|{};amzncsm.errorCodes={SLOT_INSIDE_UNFRIENDLY_FRAME:1,UNSUPPORTED_BROWSER:2,ERROR_SENDING_PIXEL:3,INVALID_API:4},amzncsm.errorBeaconSent=!1,amzncsm.errors=[],amzncsm.reportErrors=function(a,b,c){var d,e,f="https://",g=amzncsm.host\|\|"aax.amazon-adsystem.com",h="/x/px/";for(c&&amzncsm.errors.push(c),e=0;e<amzncsm.errors.length;e++)d={adViewability:[{error:{m:amzncsm.errors[e]}}],bm:!!amzncsm.bmk},(new Image).src=f+g+h+b+"/"+JSON.stringify(d)+"?cb="+Math.round(1e7*Math.random());amzncsm.errors=[],amzncsm.errorBeaconSent=!0,amzncsm.detachAllHandlers&&"function"==typeof amzncsm.detachAllHandlers&&amzncsm.detachAllHandlers()},function(a,b){function c(a){return a?a.replace(/^\s+\|\s+$/g,""):void 0}function d(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(k)),b&&3==b.length\|\|!d\|\|(b=d.match(j)),b&&3==b.length&&(a.f=b[1],a.l=b[2])}}function e(a,b){if(b=b\|\|{},!a)return

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=187107314970053313&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.7628743492292966
Encrypted:	false
SSDEEP:	3:6zLcM1sZ9BcyAHn:0cMSztAH
MD5:	B59FFA18DAD64BE6459B90E0117C2E94
SHA1:	40AA97C33618FB5459F4B3B8D9B22022B6616C60
SHA-256:	5F789CCAE156B160492D89A6146B1974D15128790B74ABB995D8E89FA44CDE5E
SHA-512:	19C89EAB341DB35E83AA2AFB5D41707020AF849BA0790CBA277BE2C3BB09E6E53AD9B009410783228CAF8BB82E6B81AB97B2DFD1969755EE47D9668A97F9F7A8
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/k/155.gif?puid=AAEPf07MRNwAABWcWeK7WQ&id5AccountNum=155&numCascadesAllowed=9
Preview:	could not find initiating sync partner null

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1781
Entropy (8bit):	5.156279180502575
Encrypted:	false
SSDEEP:	48:Y2cBqfbYVB7fAuEYt5lUQyUQugFyUQjM7PI:bcf7Pt5lJyJugFyJjUPI
MD5:	901E1841EE01E62BEADC5D84A5BA0B3D
SHA1:	F2E2C539DE1240687235BBCC2B62F298A6397B98
SHA-256:	B73B8CFAA201483924E3BC0E0B04C61972CD1FCD3F501EA622E7C1331B64F01F
SHA-512:	452CEBBCDE2E9A402E3BD9658F0C8CA612C4BC1DAC26591D95F4D10558B29D650CF41DAD4FEDD4AE00A63C6A808EF5ED1E893B1E371813A6D3C57142B9586D46
Malicious:	false
Reputation:	low
URL:	https://everest.castbox.fm/data/channel/v3?cid=3921236&raw=1&web=1&m=20240419&n=92c75641391bc21cf7585973d7d93510&r=1
Preview:	{"msg": "OK", "code": 0, "data": {"new_cid": 6036055, "obsolete": "387ad10ae4017f1bc328c9f359fef32633fcffe7", "episode_count": 78, "x_play_base": 0, "stat_cover_ext_color": true, "keywords": ["Music Interviews", "Music"], "cover_ext_color": "-15176278", "mongo_id": "604c178cd55e32a18945f314", "show_id": "604c178cd55e32a18945f314", "copyright": "Spout Podcast", "author": "Spout Podcast", "is_key_channel": false, "audiobook_categories": [], "comment_count": 0, "website": "http://www.spoutpodcast.com", "rss_url": "https://feeds.sounder.fm/11059/rss.xml", "description": "You know them for their songs, videos, and epic performances, but there is always something even their super fans don't know until now. This is the Spout Podcast, where famous people spout off about more than they're famous for.", "tags": ["from-itunes", "from-google"], "editable": true, "play_count": 1345479, "link": "http://www.spoutpodcast.com", "categories": [10071, 10009, 10074], "x_subs_base": 0, "small_cover_url": "

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.cootlogix.com/api/cookie?partnerId=openx&userId=73db8c99-4eaf-44a4-b197-4578118389c7&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:W:W
MD5:	ECCBC87E4B5CE2FE28308FD9F2A7BAF3
SHA1:	77DE68DAECD823BABBB58EDB1C8E14D7106E83BB
SHA-256:	4E07408562BEDB8B60CE05C1DECFE3AD16B72230967DE01F640B7E4729B49FCE
SHA-512:	3BAFBF08882A2D10133093A1B8433F50563B93C14ACD05B79028EB1D12799027241450980651994501423A66C276AE26C43B739BC65C4E16B10C3AF6C202AEBB
Malicious:	false
Reputation:	low
URL:	https://c3.eu-3-id5-sync.com/
Preview:	3

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1706
Entropy (8bit):	4.486405975317783
Encrypted:	false
SSDEEP:	24:t4L4zU0/zfN6lgmKhOde/8q61cu4zIQ+Bi3+s1nkH8Q4h4yBEvU65ZvtlDM6xRsN:zDNsgmCOdekvOX2Nm4uIZnDM6woE
MD5:	DFB2FE1042D0C99D40E21A921F64F35D
SHA1:	9125B0DA3A59EF2087AD5EA4EDC7E7D2FF229C56
SHA-256:	A71FDB2AF0679F36EDBF63EB7944DC2403C85572D9DE916CFCB12BF6277C5C37
SHA-512:	183280CD69D4B45942C5EE089F03C99B20CB0E62F2D68B190D88F210F91F6511EBE66D8D8FBEE061B12A5A440E82337A4EC505D4911443A128EDC5F87D64AE85
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/flash/icon/privacy_small.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 19 15" height="15" width="19">. <style>. .bg{fill:#fff;opacity:0.6;}. .icon{fill:#00aecd}. </style>. <path class="bg" d="M0 0L19 0L 19 15L 5 15A5 5 0 0 1 0 10"/>. <circle class="icon" r="0.75" cy="5.875" cx="8.75"/>. <path class="icon" d="M 5.3730468,1.0136718 C 4.6293185,1.0090776 4.1,1.3947866 4.1,2.5 4.100712,5.7520821 4.0996094,8.7129311 4.0996094,12 v 0.800781 h 0.013672 c -0.00328,0.03309 -0.00524,0.06633 -0.00586,0.09961 -4.7e-5,0.61699 0.447682,1.117187 1,1.117187 0.035907,-4.48e-4 0.071766,-0.0031 0.1074219,-0.0078 0.1364212,0.007 0.2721632,-0.02339 0.3925781,-0.08789 l 1.7871093,-0.917969 c 0.7171771,-0.35578 0.4527743,-1.437158 -0.3476562,-1.421875 -0.1186385,0.002 -0.2351089,0.03213 -0.3398438,0.08789 -0.103283,0.05499 -0.527302,0.28718 -0.7851561,-6e-6 C 5.8554801,11.595981 5.6990806,11.369862 5.699,11 V 3.6 c 0,-0.1796875 0.1147961,-0.6221743 0.7443593,-0.5921875 0.3595207,0.017124 -3.3

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	425
Entropy (8bit):	3.8849984211879014
Encrypted:	false
SSDEEP:	3:YMU/XTT5I+kKBz1VKNM/udNIAuJHJjLTqNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5m:YV/DT5FBrWM/ieAuHjgz/iJQpxer3
MD5:	E9C1AC7F1ABA36F8E487C55878D87704
SHA1:	69DBCB0AE374973D268C58A6EEAE2EA72BDD67B8
SHA-256:	80E98EE1D1F2A10CA268F8C6DE68EA4CC9ED5A63F19A47FA6DBD81457A478129
SHA-512:	688072EE0E185243F40DDED116CAD3FFE62F06A1BD1895EE1C510136E9C750633D1E9465C9EED9477CDC7337C7E340860355AF25A9F01DCB7028906D56C13BEF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1961765009388584&correlator=581348282174153&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Chigh_impact%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=1x1&ifi=2&didk=461368580&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354220&lmt=1713532038&adxs=155&adys=8499&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=18x18&msz=0x0&fws=4&ohw=18&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3DhighImpactDFP%26pos%3DhighImpactDFP%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=829439793&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/21854935662/justjared/desktop/high_impact/home":["html",0,null,null,0,0,0,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CJyIgrutzoUDFabvKAUd_fYDog",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	305153
Entropy (8bit):	5.28871415824133
Encrypted:	false
SSDEEP:	6144:MZShGIKSCu4DzPF0BfZiP9GwBKn3YifcN1:MZShqSCu4DzP+fkPkw2fcb
MD5:	B9E5BC6AE2304C1FF623D74C6E93FE00
SHA1:	BF769EAF9695B695795D2292DF891E3FB1B5E8DA
SHA-256:	2F2EF1A173106EFC9F1E2048EE2A1F0ECAC78E166A57E83128776F565312357E
SHA-512:	D9C8E8E2219DA99EAEBA57E2648CA41935008CDDF44BB1BC1BE7E2B94B28DB2E046BFDD8ECEFE5A38B0CF611F91BAE1BD03BEE3C46C756876DBDE49C77675F44
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};var e=function(){return e=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},e.apply(this,arguments)};function n(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1;c>=0;c--)(r=t[c])&&(a=(i<3?r(a):i>3?r(e,n,a):r(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a}function o(t,e,n,o){return new(n\|\|(n=Promise))((function(r,i){function a(t){try{u(o.next(t))}catch(t){i(t)}}function c(t){try{u(o.throw(t))}c

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=rise_engage&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTcxMzUzMjM3MS1HR1JSVlRaNS1CTDJO
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219526
Entropy (8bit):	5.418571249895602
Encrypted:	false
SSDEEP:	6144:adRzmcBHahZ0XqyiAD+HbDTEXeqUgcxeVJinW:qCsJAkcx+J
MD5:	06CADD0914E06CC0A76D18BABBBEE383
SHA1:	85CC67A186D6A5A278F6B96995130FDF50EC3A98
SHA-256:	102372B5C55B13196105178B8C401C69D4BA3B780A24217BB09727364D446879
SHA-512:	20B189C0CA9C7A03504F54D84836B96E80E85C48C8AA73507DA185C3B3818FFBEF49FABE61EEFD057AC6B160EBC3253D47524588BDEF443E381F3323433A09CB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:30,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{%22Country%22:%22US%22,%22CountryRegion%22:%22GA%22,%22City%22:%22Atlanta%22,%22PostalCode%22:%2230301%22,%22MetroCode%22:%22524%22},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22clicks%22:0,%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532388101"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:h:h
MD5:	F623E75AF30E62BBD73D6DF5B50BB7B5
SHA1:	50C9E8D5FC98727B4BBC93CF5D64A68DB647F04F
SHA-256:	3F39D5C348E5B79D06E842C114E6CC571583BBF44E4B0EBFDA1A01EC05745D43
SHA-512:	2AC968752F624BE3E3DF46764B51B7831FEB70D40307DF5D587D4793BFFEAF8B4042A1FD6D465DF2AACC3304328D431EF10E083BAF690B8CC535480A4FEF092F
Malicious:	false
Reputation:	low
URL:	https://c4.eu-3-id5-sync.com/
Preview:	D

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://c1.eu-4-id5-sync.com/
Preview:	0

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=1&gdpr_consent=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	775334
Entropy (8bit):	5.311155977014005
Encrypted:	false
SSDEEP:	6144:+v1NUGcJbmJ5aOB7bwMLEnJDDc5IYIiTPNNYhbzvyBl9CE+BgjhbWRIiIBlz:+v1NsmJ5aO1tEqPDSvcCEUSbopWz
MD5:	94A5626EB472E8DF09751FEB6D7A46A6
SHA1:	FB5FABB0E2EFA31DC47D384C98FF311400FABD99
SHA-256:	BE09F93A99C3F9CEB9FE8EF17E8E7EEAC93D79A2D951D75226B53B8AB0DCA1AF
SHA-512:	96DC49CDCC4552F03C4E9FB4116AA1684D2EBB653265D434577660B4137A6969642AE20A7DE676829065977B871D39A0A8E78B5DBE29BB72312BDEC1B7BA9D09
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/castbox-desktop/loader.js
Preview:	(function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(e){for(var t=window.document,r=o(t);r;)r=o(t=r.ownerDocument);return t}(),t=[],r=null,n=null;a.prototype.THROTTLE_TIMEOUT=100,a.prototype.POLL_INTERVAL=null,a.prototype.USE_MUTATION_OBSERVER=!0,a._setupCrossOriginUpdater=function(){return r\|\|(r=function(e,r){n=e&&r?d(e,r):{top:0,bottom:0,left:0,right:0,width:0,height:0},t.forEach((function(e){e._checkForIntersections()}))}),r},a._resetCrossOriginUpdater=function(){r=null,n=null},a.prototype.observe=function(e){if(!this._observationTargets.some((function(t){return t.element==e}))){if(!

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=40&external_user_id=403845b4-2734-49ca-b474-2c7385907b7c&expiration=1721394808
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0015a0000344WLQAA2&gdpr=0&src=pbjs&ver=8.30.0&coppa=0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	181427
Entropy (8bit):	5.3165564054694645
Encrypted:	false
SSDEEP:	3072:wcOZUBaTfzKdlef4Zki2SUzg7JVek2SJrJc8hGbKWwuZ:FOqBKzjf4iGek5U4GbQuZ
MD5:	017BEB97750BEF416A5BB7EEF3394EE1
SHA1:	051EFC72E866EDAEC7343B7684B87AB069A046C5
SHA-256:	F7FD9BF21D530BC49A48EFC8F39F8EB8C25C31610A98F483EBF10D86C0165014
SHA-512:	CE2EE61D3128BD472AE8B1B6EF3B32D98550766F9F7244E085CABC95A10898AE2DD9E3C3F92FB39B1B8B8C3836B345B43C3EFD911889148ECA0BBD59F8950F47
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/assets/smart-tag/versioned/ads-v2_017beb97750bef416a5bb7eef3394ee1.js
Preview:	(window.webpackChunksmart_tag=window.webpackChunksmart_tag\|\|[]).push([[695],{1871:(e,t,n)=>{var i=n(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=i(n(9974)),r=(n(2481),i(n(5754))),o={init:function(){var e,t=bouncex.getBounceVisitCookie(),n=bouncex.getBounceCookie();if(bouncex.segments=bouncex.segments\|\|[],null!==(e=bouncex.state)&&void 0!==e&&e.gdpr)o.clearSegments();else{var i=bouncex.calling_url.match(/wkseg(\d+)/g);if(i)bouncex.segments=i.map((function(e){return parseInt(e.replace("wkseg",""))}));else if(n.softID){if("string"==typeof t)try{t=JSON.parse(t)}catch(e){r.default.error("could not parse visit cookie for segments")}t&&t.seg?bouncex.segments=t.seg:o.downloadSegments(n.softID),bouncex.segments=bouncex.segments.filter((function(e,t,n){return n.indexOf(e)===t}))}}},downloadSegments:function(e){var t="https://dfp.bouncex.net/pub/v2/segment/".concat(e);a.default.get({url:t,error:function(){o.clearSegments()},success:function(e){var t=e;if("string"=

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3236)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.311110515964322
Encrypted:	false
SSDEEP:	192:OdjQ65BDlhSsXfHfFuSeNRURvyVOYjmekLihBvEtg38lTjLky3RqUJgFVTB2:O2oXhSWp+OYjmjg38bbgFl4
MD5:	4AF9428D8C901774B6F33D2A094EF050
SHA1:	3E5C245C4FB5FD1824F84CC9E1C403851C4DD673
SHA-256:	E318E0AC932DF7816EC1771B773D18BC0085E0D5ECF63E5CE793B44FFE351A6F
SHA-512:	48178A0724FC0E3DEC8303B22B1AF379F63962422F1FE40992449B9D6E1EE46BCAEDBFA2C01900EFC1228482CFD9925066898CBA541CA9E58CE277BA53A158D0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240417/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2277)
Category:	downloaded
Size (bytes):	3554
Entropy (8bit):	4.943418873015876
Encrypted:	false
SSDEEP:	48:mHTkM39XlYGDl6KNAZuToBmdm2nmLgfGD2lJ:mTPZAZuTooUbD2lJ
MD5:	0D6CA18EF0A22B73A85F662E4FF167E4
SHA1:	DED9433A22FFC85EC5ED5AA9382B16540708DB04
SHA-256:	06E4D249E7F9C78E8B23B0305AB09DAFB0016848B83E0197B728EBAA303C45C0
SHA-512:	0D36DDA2D777707A001B1095EF6FB222B2E876FB85EFDA3508B07EDE4E8775FAD51D4961D527F85013AACADB86F94940E5EF83506E98CF0D554709C7CC8777B5
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/app/castbox/static/css/slick.min.css
Preview:	@charset 'UTF-8';.slick-list,.slick-slider,.slick-track{position:relative;display:block}.slick-loading .slick-slide,.slick-loading .slick-track{visibility:hidden}.slick-slider{box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent}.slick-list{overflow:hidden;margin:0;padding:0}.slick-list:focus{outline:0}.slick-list.dragging{cursor:pointer;cursor:hand}.slick-slider .slick-list,.slick-slider .slick-track{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}.slick-track{top:0;left:0}.slick-track:after,.slick-track:before{display:table;content:''}.slick-track:after{clear:both}.slick-slide{display:none;float:left;height:100%;min-height:1px}[dir=rtl] .slick-slide{float:right}.slick-slide img{display

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (363)
Category:	downloaded
Size (bytes):	4110
Entropy (8bit):	5.37692951160216
Encrypted:	false
SSDEEP:	96:D6Z5djm/G7Cjm+5Cjm+Tjm/Wjmwrjmw1jmyI/kjk85jmOT5jmOQujmOAjmyi:D6Z5djm/GOjm+wjm+Tjm/Wjmwrjmw1j5
MD5:	548846C31F248BF424C1E5B28B01D6D8
SHA1:	85ED1EFA0A1A503589F64A1E039D49796C1280FD
SHA-256:	5332CD2387349307E87D2097A9D5B7381E8C5B692D5205202342E55B33AFCD6C
SHA-512:	ABFD3492EAB2DE2CAFF38B19615C8099E2DC75D4E13A4EE17F9041E11E394581356D636CCCE1E7986B9175D20F0DEA5C85F45A2E7E88BE6780E31AF64A5704F4
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/user/html/62ce79e7dd15099534ae5e04?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dkueez%26userId%3D%24%7BvdzUserSyncMacro%7D%26gdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>. <img src="https://sync.cootlogix.com/api/user?partnerId=kueez&userId=5f2f51a7-e226-bbae-76c9-2d8714f31edc&gdpr=${user.gdpr}&gdpr_consent=${user.consentStr}&us_privacy=${user.usPrivacy}">. <img src="https://image8.pubmatic.com/AdServer/ImgSync?p=162110&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-pubmatic%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%23PMUID" width="1px" height="1px" style="display: none" />.<img src="https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-openx%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26userId%3D%7BOPENX_ID%7D" width="1px" height="1px" style="display: none" />.<img src="https://u.openx.net/w/1.0/cm?id=99b0e635-e719-4648-8bd7-0fd339d4e2e5&gdpr=&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.kueezrtb.com%2F

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	245508
Entropy (8bit):	5.566320258346195
Encrypted:	false
SSDEEP:	3072:Ru01AZVNSNcMzszFeI4q8T9CBPIrTWRvYElfh6St2nBsLqAyAXDeltzvsXGh9Q:31AFMgzFeUDLfh6St+aqAyAXDelJsXh
MD5:	576E513EDBEA43CB19D2921E3A2D7F50
SHA1:	A172356EC3CAE271D18DF9B0DDC744BB9F118BA9
SHA-256:	093BF9548D0BEB7CD49DBBB692395F9F28EC3E4A78054CFD9045515731272960
SHA-512:	38A076B3354C77A3674DC79A154B4E9186E5534DBC9DFC73E53DBAA53EDDEA9B0676121DBD401E3F50B1031D4486995720423130F67633D035443759A641E5E8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-FVWZ0RM4DH&l=audDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":17,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR",

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	137674
Entropy (8bit):	5.844178808122998
Encrypted:	false
SSDEEP:	3072:oV/bLz4LP1NH5LLbXs7juR4FtEWXM4wZXCBf677:0/bLz4LP1NH5LLjs7ji4FtVXM4wZXIif
MD5:	5EA4B24BDD575C1B5721DBD489F81CC8
SHA1:	BBB2F6F1C8E5856EDFCB1EFF92BB5D1769E3DBEE
SHA-256:	2B481272F1FC02E8E236D21C06033AE8F1497AD8562D1C9994350D642ECEC4A9
SHA-512:	D956B1A25DC07D178EEFBE77F8D0FD14133989574670A7A36AA36AFE6481534DDBB1EFD1D1962861303F9DCFE04667605CCF75C6F55B56529391881FBF3940F9
Malicious:	false
Reputation:	low
URL:	https://cadmus.script.ac/db356nau468gk/script.js
Preview:	(new function(){var c=['qxjYyxK=','w0vsuL9nxq==','Dgv4Dc9QyxzHC2nYAxb0','CgfYzw50','CMnFy29UDf8=','zMLUza==','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','B25LCNjVCG==','cI0TlqO=','CMvSB2fKzwq=','DhjHy2vK','zxzLBNruExbL','sfrntfnJCMLWDevSzw1LBNq=','C3rHy2S6ia==','sfrntejHC2vfBgvTzw50','z2v0t3DUuhjVCgvYDhLezxnJCMLWDg9Y','BMf2AwDHDgu=','CMvTB3zLq2HPBgq=','y2fSBgvY','rv9tvfi=','CM9VDa==','Bwv0yvTODhrWlwvXDwL2psjdB250zw50lvnLy3vYAxr5lvbVBgLJEsjD','CgvYzM9YBwfUy2u=','y3vYCMvUDfnJCMLWDa==','BMf2AwDHDgLVBG==','qxbWlNb1Da==','uMvWB3j0Aw5Nt2jZzxj2zxi=','Dgv4DenVBNrLBNq=','CxvLCNLtzwXLy3rVCKfSBa==','pg9IBJ50Ehq9','Cg9YDa==','DhLWzq==','u3LUDgf4rxjYB3i=','ywn0Aw9Ux25HBwu=','uenjrc0=','CMv0DxjUicaKChH5','yxbWzw5Kq2HPBgq6ia==','nc4YnY4X','v0felq==','sfrntefUy2HVCKvSzw1LBNq=','u1rzteu=','x3r5CgvVzIG=','BwfSDMvYDgLZAw5Nx3bVyW==','uKrolvG=','zxz0lwG5A2SY','y2zJB21Wyxq=','CMvWBgfJzq==','BwfW','sfrnterVy3vTzw50','cMDSB2jHBcbJB2rLqgfIB3v0oNnYy2rVyZO=','phjJDd53Awq9',

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	202
Entropy (8bit):	4.5352138509647455
Encrypted:	false
SSDEEP:	6:rrBHI/Z9sjDEXTdkPEIU+ADtp2hEEXTx+tA7:RHIhCjDEXpkPEt+ADtp2bXF+W
MD5:	B1CABA4CC6008D11FFD00AA4494C0019
SHA1:	E3AB07FBC9EDF0F34933A36CCB134686BDD8EEA5
SHA-256:	8F54B3EEA1B94DC8E8BC73B8C655E674DE9963805C60811FD6AACEA0ECE27D42
SHA-512:	6A01B5A5FB8F1CD2385BD829F9CAC00DF764A372BCE340D44C13987BE0E461E3EAFEF12C8DDAA71648B813638E0BB2052809F225CDAD969ACDA0CA15F52E684E
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fwww.justjared.com%2F&account_id=1247
Preview:	{. "stage_message_limit" : 1,. "site_id" : 7443,. "public_campaign_type_priority" : [ 1, 5 ],. "multi_campaign_enabled" : true,. "stage_campaign_type_priority" : [ ],. "public_message_limit" : 2.}

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:j:j
MD5:	800618943025315F869E4E1F09471012
SHA1:	E69F20E9F683920D3FB4329ABD951E878B1F9372
SHA-256:	F67AB10AD4E4C53121B6A5FE4DA9C10DDEE905B978D3788D2723D7BFACBE28A9
SHA-512:	D21EC9146C3C327211B8B7FD44003916B938D751D458FECE25EF51FA9C8896C97CEB22D032E6DC7388C6143A3B3157764949A7B2CBB062E005DD5F009310AB00
Malicious:	false
Reputation:	low
URL:	https://c1.eu-3-id5-sync.com/
Preview:	F

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45801
Entropy (8bit):	5.996088173892814
Encrypted:	false
SSDEEP:	768:mQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtDTUVgObUeVCzlxYFyIRbUS6/YomRzzIIK:nR3zoVVUaC5xYwUUD/YXS
MD5:	34BCFB925E6B7E351A7D274EEC5FCDFE
SHA1:	46B4C42730CA2AAC4B8160CBBC8415CEC70F0E4C
SHA-256:	4F043FBAB1C9BF19EF255F690C82C7C64EFFDB66436964D2EBB8AA19D58BBDF0
SHA-512:	36553CBABFD13D565091465C234D9F820EDDA9A0CED7F0493A08F774D4E72080D3660C45CE97524D268146F32976DB73AB857874F73EF983A51E9435F4C8C320
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1961765009388584&correlator=1383139496522754&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cadhesion%2Cphoto&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=728x90&ifi=8&didk=2418942997&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532372752&lmt=1713532038&adxs=276&adys=8773&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=6&ucis=8&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=1280x-1&msz=1280x-1&fws=516&ohw=1280&psts=AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR%2CAOrYGslC9W3W_3AujtsHnyKtJMzQcYpr29r_5ZsX6pG6_BNMAK-nIoeky6P_RVwjaPSfPclOilDIK7goP-od-fRqMNHEBgF2Smxd6_f4hUde5MH9o3CL%2CAOrYGsnbkBJrfC_SMFmhI3gHn7Jbpoegxe5Tygpb8xpqz8X_Ccj3kILwyL1gliBCXmc5cwrDFAzR2NL0OvXhP2KjkGmw83sDL02mdFW4VBm1WIr2pwyN%2CAOrYGsnsJAV7ez72LGmmn6d2Ht2A1Jn70sMm93fMBjaT35p272D3_9exGuvZfel5_89_mevwxZnFTZISElsmYFWRA8HzuOEWjshP8ez0zEdgLw%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslregH8m33151vWWC7D4Rvn983iFcPFWuZWCrwAU1TPh6mxxmg9WYDeZtvtKYM9Hp3z3T7PomhWtAjIo6mjk6L2ixyWnn8zRJShdK6s_4k8Nseg%2CAOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EloKDWNyd2RjbnRybC5uZXQSQGQ2NjgzMzQ0ZWIzYzU5ZTY1NzhlODlhNTE1MTAxODVjYTAyY2U0NzRlOTYxMGJiYjk1ZGE4NGNjOTJjYWEyYjQYi9nzs-8xSAASGwoMMzNhY3Jvc3MuY29tGLHa87PvMUgAUgIIbxLYAQoOZXNwLmNyaXRlby5jb20SvAFyMmRFaEY4Mk1HRXdlVmd6V2xsMloxWWxNa0psYzNGdlkzbHpWRGN3VEZOQ05UUWxNa0pOTmt3MVQwOXBja1ZZVWxoV2FVTnlVVWRwZVdKaE5XWXdSRU5xWkVsT1VpVXlSamRUTWpaM2NYUTVXR3hyVEZkV1Z6WjNNRmR2SlRKQ1NFRXpZVzExZWpaT1duQlhjWEJ1WTFaVmRWRmxOa1ZsVDJWR1MxVjBjWHB5ZDNsb2NuZFJUMk5yUVdkVBjh2vOz7zFIABI-CgVvcGVueBIsZXlKcElqb2lWWFpxUTNCWGFIcFJUMWRWVXpnclZYaEJUVTlWVVQwOUluMD0YydHzs-8xSAA.&pps=5%3D640%7C432&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dphoto_Top_Left_160x600_OuterRail%26pos%3Dphoto_Top_Left_160x600_OuterRail%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1%26hb_format_criteo%3Dbanner%26hb_size_criteo%3D728x90%26hb_pb_criteo%3D0.08%26hb_adid_criteo%3D1003b69791cd11ad%26hb_bidder_criteo%3Dcriteo%26hb_format%3Dbanner%26hb_size%3D728x90%26hb_pb%3D0.08%26hb_adid%3D1003b69791cd11ad%26hb_bidder%3Dcriteo&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes%26arcspan_c%3DavM7hHWe%252C8FWC3Bns&adks=1915671097&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/21854935662/justjared/desktop/adhesion/photo":["html",1,null,null,1,90,728,0,0,null,null,null,1,null,[138364391171],[5793238921],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsn5sJj3z7-aHWSiD9EoK1CwFjIru1iPcEFgW9ri01CZcMMRBEPW5N9FBsABWoubskQDODFbhx2ab-gzBkY6yX2QSgAZdWMsLxU5STN6cg","CMPq78OtzoUDFYwIigMdQ6EF2Q",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"8",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Libra

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17095), with no line terminators
Category:	downloaded
Size (bytes):	17095
Entropy (8bit):	5.43998968450795
Encrypted:	false
SSDEEP:	384:a9Usn6m9OgjiVGbCW0WBvRtqYCMkdE6jCZxzxXvd1CWgSFZ0Z:ap6COoiVGbCWzE+ZTfd1CWLFS
MD5:	8E99BDBFDD9E627259AD8115D1CADEC8
SHA1:	008EF4A704F832389CBFCEB135B3A722FCB5E1BC
SHA-256:	2BD27FB4CDD30B9B0C730E44A8EC482A49DBF95EAA5C3F399C816DFEF9990BEB
SHA-512:	80862B9498EFDF43BA2F1250B270F69325438240CD84F6686B1E0219F1B3FCE43163258FA7C23C05A1B0780CDC92115EA72886CBFA5C5A22BC21E818FACAE71C
Malicious:	false
Reputation:	low
URL:	https://ad-cdn.technoratimedia.com/html/usersync.html?&srv=cs&source=admedia&UID=b775784632323f34fcd70d90833d7507&cb=https%3A%2F%2Fpixel.s3xified.com%2Fdspsync%2F%3Fpid%3D1642%26buid%3D%5BUSER_ID%5D
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"><script>(()=>{var e={676:(e,t)=>{t.writeTag=function(e,t,n,r,i,o,a){var c=document,d=document.getElementsByTagName("script"),l=1;for(l=1;l<d.length;l++){if(d[d.length-l].src.indexOf("/adserv_")>0)break}var u=d[d.length-l].src.replace(/^[^?]+\??/,""),s=window.getCookie&&window.getCookie("TMEDIA")\|\|-1,m=window.getCookie&&window.getCookie("TMEDIAISP");-1!==s&&(u=u+"&dmsc="+s.substring(5,s.indexOf("/"))+"&dmsi="+escape(m));a=a\|\|"0";var p=/iphone\|ipad\|ipod\|android\|silk\|kindle fire/i.test(navigator.userAgent.toLowerCase()),h="https://secure.adnxs.com";(h+="/ttj?id="+i,n.indexOf(",")>-1)?h+="&promo_alignment=none&size="+n.substring(0,n.indexOf(","))+"&promo_sizes="+n.substring(n.indexOf(",")+1):h+="&size="+n;h+="&pt1="+e,h+="&pt2="+t,h+="&pt3="+a,h+="&rev="+a,h+="&position="+("ATF"===r?"above":"below"),p&&(h+="&st=mobile_web"),h+="&brlg="+(window.navigator.userLanguage\|\|window.navigator.language\|\|"").toLowerCase(),h+=o,h+="&"+u,h+="&c

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEAapA3rEkivth37HBNDiVB4&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-OMVKZOm8TG6iSewK5gxT49SGTn734nhk1br2WA
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	192416
Entropy (8bit):	5.317947977746608
Encrypted:	false
SSDEEP:	1536:uHs7piWq8S4f8mxAyZ439GnuNFVBiIA0+uER87aj3f1K1ONPlR3xn0j/hILMJBwB:RrUh3QuvHNjjaLMsTks
MD5:	A4C12F7902BF699B4F7EF0E9F76109A9
SHA1:	11FCF8D80AC784718D70A9992FA138C733D548E2
SHA-256:	D170B4813455671FC1EBC65A19CA5AE5553AA357051F1F1913E57F3A800DCD6D
SHA-512:	1461AE37619212306F648999104B609E05955D67D808892EC62E5140A11BD0C074E12D299E8540D4E5014C4678F4890E61877B95AE2D54B3FEE4F12A99F5F72C
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/player.renderer.1d1c484cd8798559d0f6.js
Preview:	(self.cnx_webpack_global_elements=self.cnx_webpack_global_elements\|\|[]).push([["renderer"],{563:(t,i,s)=>{"use strict";s.d(i,{$:()=>e});var h=s(7360);class e{constructor(t,i={}){if(this.gP=t,this.bn=i,this.xP=0,this.mP=t=>{t.preventDefault(),this.yP=t.pageY,this.bP=t.pageX,(0,h.cn)(this._P,"cnx-scrollbar-prevent-select"),(0,h.cn)(this.Gt.document.body,"cnx-scrollbar-prevent-select"),this.Gt.document.addEventListener("mousemove",this.fP),this.Gt.document.addEventListener("mouseup",this.TP)},this.fP=t=>{const i=this.bn.horizontal?t.pageX-this.bP:t.pageY-this.yP;this.yP=t.pageY,this.bP=t.pageX,(0,h.PM)(this.Gt,(()=>{this.bn.horizontal?this.SP.scrollLeft+=i/this.CP:this.SP.scrollTop+=i/this.CP}))},this.TP=t=>{(0,h.IV)(this._P,"cnx-scrollbar-prevent-select"),(0,h.IV)(this.Gt.document.body,"cnx-scrollbar-prevent-select"),this.Gt.document.removeEventListener("mousemove",this.fP),this.Gt.document.removeEventListener("mouseup",this.TP)},this.wP=t=>{if(!this.bn.horizontal)return;const i=t.deltaM

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2413), with no line terminators
Category:	downloaded
Size (bytes):	2413
Entropy (8bit):	4.683744865069312
Encrypted:	false
SSDEEP:	48:y1TQsDhoumyHO+THSeHcHrnenhmT/r4XE0Uhnhm11nhmS:yRpOAO+bSEyrzTF0b0S
MD5:	07E399DB70F111BBC766928D9DD6DC12
SHA1:	C157491D391B4FD8B9E629E95A8D9555B4A07636
SHA-256:	CC3A41863D92B22799FF23C52E2173E80B13EBC75B9144151EA105CD52B59DE5
SHA-512:	0C57030BC2F8579DD1A19BFE3CCFF365CE1DE782E541A8DFAF89545BDEFA9561B00945C8662F1C06AF1526780CA05CBB6E74EC29473429AD25ABDF3D3424819F
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1928.005-3.034/frame_content.js
Preview:	var IL_FRAME=function(){var i,o;return{init:function(){var n;window.top.infolinks_pid=window.infolinks_config.pid\|\|window.top.infolinks_pid,window.top.infolinks_wsid=window.infolinks_config.wsid\|\|window.top.infolinks_wsid,window.top.infolinks_advtq=window.infolinks_config.advtq\|\|window.top.infolinks_advtq,window.top.infolinks_iframe=window.infolinks_config.iframe,window.top.infolinks_basePath=window.infolinks_config.basePath,window.infolinks_async&&(window.top.infolinks_async=window.infolinks_async),window.infolinks_ddw&&(window.top.infolinks_ddw=window.infolinks_ddw),window.infolinks_config.inplace_slot&&(window.infolinks_config.inplace_slot.id=window.infolinks_config.container_id,window.infolinks_config.inplace_slot.width=parseInt(window.infolinks_config.inplace_slot.width,10),window.infolinks_config.inplace_slot.height=parseInt(window.infolinks_config.inplace_slot.height,10),window.top.infolinks_slots?window.top.infolinks_slots.push(window.infolinks_config.inplace_slot):window.top.i

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	5.010046753517047
Encrypted:	false
SSDEEP:	6:PGfo6oIsrbJk7vwoIsrbYKg8Nv7woIsrbA80dkkN:PGfroNbJwvwoNb997woNbAFN
MD5:	0CA4D2883DAE8784EB1CA3B6CA7BF82E
SHA1:	73F6F42F7D84D159C82D0BC287E3D209BA4350F7
SHA-256:	6F14DD2BBBB6BE2AADE6D5881CD84F9957B047A813F2E108A44443E7BEFA8C64
SHA-512:	45B7BBC4FC471A122361D20DE75C76C9B4907938D23BBB4A16F4329D7626E1DC345FD70E3A46747F250DAE15ABFE468D1D44F28B8A02782EBDB573B741926317
Malicious:	false
Reputation:	low
URL:	https://vid.connatix.com/pid-5cad8f3d-ecf1-441c-8c48-779a68f6d6dd/ece582e4-f873-4af7-8e2c-fd3f253ebfe1/mmid-859b9f01-8322-f1c6-1f35-2a8485980fda/playlist.m3u8
Preview:	#EXTM3U.#EXT-X-VERSION:7.#EXT-X-STREAM-INF:BANDWIDTH=438900,RESOLUTION=480x360.0.m3u8..#EXT-X-STREAM-INF:BANDWIDTH=1175900,RESOLUTION=960x720.1.m3u8..#EXT-X-STREAM-INF:BANDWIDTH=2495900,RESOLUTION=1440x1080.2.m3u8..

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	220960
Entropy (8bit):	5.347907813973347
Encrypted:	false
SSDEEP:	3072:wq1ZTyM4seMZOtNt9XcMwqqIihfusMK+luRocSuebpBvR:wXNt9XcMwqqIkusMuaNBvR
MD5:	D0D2A4FC2A83166647088CB81E6EC62F
SHA1:	E04999308B8D401C6E31A84EB650A861BFE65E40
SHA-256:	862F55BDBD1B26FA2A775F1E207055760B12CCB3375E1F61FF8E82F4DC7E6A19
SHA-512:	3C604CD119AA82171A19FB2BA495C4E2A678CAB028F7FDE7E5EC40D82928BDD5F2E9E8B5695EDD2978421FD20B204D5D78D68301FFE9C57173BE769B650E1FCD
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.vendor.6f338e46.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[9],{0:function(e,t,n){"use strict";e.exports=n(274)},203:function(e,t,n){e.exports=function(){"use strict";return[{locale:"en",pluralRuleFunction:function(e,t){var n=String(e).split("."),r=!n[1],a=Number(n[0])==e,o=a&&n[0].slice(-1),i=a&&n[0].slice(-2);return t?1==o&&11!=i?"one":2==o&&12!=i?"two":3==o&&13!=i?"few":"other":1==e&&r?"one":"other"},fields:{year:{displayName:"year",relative:{0:"this year",1:"next year","-1":"last year"},relativeTime:{future:{one:"in {0} year",other:"in {0} years"},past:{one:"{0} year ago",other:"{0} years ago"}}},"year-short":{displayName:"yr.",relative:{0:"this yr.",1:"next yr.","-1":"last yr."},relativeTime:{future:{one:"in {0} yr.",other:"in {0} yr."},past:{one:"{0} yr. ago",other:"{0} yr. ago"}}},month:{displayName:"month",relative:{0:"this month",1:"next month","-1":"last month"},relativeTime:{future:{one:"in {0} month",other:"in {0} months"},past:{one:"{0} month ago",othe

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=15927&puuid=Vz%2FbJWYibdPMu3ZvZk8k2Q%3D%3D&us_privacy=&_rand=1713532413609.3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1195), with no line terminators
Category:	downloaded
Size (bytes):	1195
Entropy (8bit):	5.357128909133966
Encrypted:	false
SSDEEP:	24:kR7LyjVrG83v8SRjLGZI8S1GXp28SYt7/jj8ScgGnBtr4yTHOOQ:k7LGT8Ix83w8xXj8tvLr47
MD5:	12BBE8856AED27D1FC370D53E65AC507
SHA1:	17A8F98C88CBF7958E852D1E5AC473F817B6C4CA
SHA-256:	EE4E771B97F2559BA0B6CBEE8C42BA18E36C547D0080E08C1C6B45E0564671A2
SHA-512:	7E95126543934620A9C7996636DAA817734AB77C9C5CC2C36769205CFECB672C2AC709E15F0F9D37A4ED2CC9BB89441E6485FE3510CDA04CCC187237C9645328
Malicious:	false
Reputation:	low
URL:	https://cs-server-s2s.yellowblue.io/sync-iframe?gdpr={gdpr}&gdpr_consent={gdpr_consent}&redirect=https%3a%2f%2fcks.connatix.com%2fcks%3fpid%3d24%26ev%3d1cea9752ba4141efa5c1f9f338ffb4de%26pname%3dIronSource%26api-tier%3d1%26uid%3d{partnerId}%26direct%3D1
Preview:	<html><head><title></title></head><body><img src="https://sync.1rx.io/usersync2/rmpssp?sub=typeaholdings" style="display:none;"/><img src="https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID" style="display:none;"/><img src="https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E" style="display:none;"/><iframe src="https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID" style="display:none;"></iframe><img src="https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent=" style="display:none;"/><iframe src="https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=" style="

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=PNoZYBiDuXiYZvaVd8ixzJNL&source_user_id=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=sharethrough&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	4.926803711884739
Encrypted:	false
SSDEEP:	6:YGGlqmRUjfUjxPekALLWvSwtFN+cDmWDcywtFN+cXVKRMSQ68V3p4RGTzkjx1:YGGlMeztF1DmicbtF1XyPQZsGT6
MD5:	52A82CC88716C8EEA047F2449CC12BED
SHA1:	4262783CCEF8B496B4F021301A48FF92693C37E0
SHA-256:	1619B80E7F15DA966625778C4173919E49A802DF669393F7EA317CB13B55218F
SHA-512:	CBE8C765E067C86CEBFDB486BC8FF4FC4A71DC46C9CE690E53B8432E69A4F5BEBF3094451CC9EA67077025CC1F9810BF6DE5EEA0688BC674EE868699F6D5D098
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/wrapper/v2/meta-data?hasCsp=true&accountId=1247&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%2C%22ccpa%22%3A%7B%7D%7D&propertyId=7443&ch=null&scriptVersion=4.21.0&scriptType=unified
Preview:	{"ccpa":{"respectGPC":true,"sample":false,"applies":true,"sampleRate":1},"gdpr":{"additionsChangeDate":"2023-12-28T15:11:39.780Z","getMessageAlways":false,"legalBasisChangeDate":"2023-12-28T15:11:39.780Z","sample":true,"version":111,"_id":"5f29baa8b8e05c76a44c3154","applies":false,"sampleRate":0.05}}

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 18
Category:	dropped
Size (bytes):	504
Entropy (8bit):	7.077396655327543
Encrypted:	false
SSDEEP:	12:23fKQXIO48nrZQR6Dio4GP9wTP81lOTtX:25JrZLDrLzstX
MD5:	35909DDC26EFD9E41E015EE251F0E037
SHA1:	DCDB3EAFEADC14B02092DDD1B172BEE5B883838E
SHA-256:	70772A7A36AB39E1F8CC319770A5EEA261D23326E087C878D390ECA09963D83B
SHA-512:	F32602964FA4E1A88F0397059BDEE64027C36D985848CCF74EE07804A1076C48573277BC9969913FF45FCF3D1C022323884A01234E2435EE094C6049696FEA0B
Malicious:	false
Reputation:	low
Preview:	GIF89aq...........l..j..C..q.....s........9........E.....;...................................................!.......,....q...... ""G..K..K.:p,........@.F0.(... d.l:..tJ..H&..r%h....+..H.8TB..eu~-.X[.7.w.se=?CHklI.q.PsTuYyz/}`...h..in.....R.wZ[]..b_7..g.jkm.......x.-..5.d...i..........+._.2........U...............#v....~....6qs...p..A.Cn.??.^..6...7..>..0......ud..'..u...ME.}.$fZWQA..M..QXj.G.1.M.Y.".....'.~..4b...\.....\P3R.U........*3.X.Vs.......9..MeV.&<..].l..}.7..)!..;

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=1045438816811072924&expiration=1714742001
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539)
Category:	downloaded
Size (bytes):	2791
Entropy (8bit):	5.287322045927613
Encrypted:	false
SSDEEP:	48:bL4kJCci4a9kJlBArKGCTCUn8b1wyWmKV7CSiaH1wyWqk/1wyKbS1w1ivEgvHO1E:n4Ci4acaK52U8WyWmKVunyW36yKbF1iJ
MD5:	5C7D501A421E8374AEA0ED48A56FCBB0
SHA1:	6D3E76AF7ACA71F56F36D587C040E1B9EBC42892
SHA-256:	44CE81F335EF7BF6DE6077CF455BA3246E3C6296C341569078483632DB25F096
SHA-512:	BD4417BE5B755D5768BC3CFF88F4F78488274CAB93E5EFF8DBD776A4120440143D7C8EBF9C122E08E08A564F4B51AC7EBC6B48233EC97369770782FA7B67C1C3
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/usync/iqusync-1.29.min.js
Preview:	var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(d){var f=0;return function(){return f<d.length?{done:!1,value:d[f++]}:{done:!0}}};$jscomp.arrayIterator=function(d){return{next:$jscomp.arrayIteratorImpl(d)}};$jscomp.makeIterator=function(d){var f="undefined"!=typeof Symbol&&Symbol.iterator&&d[Symbol.iterator];if(f)return f.call(d);if("number"==typeof d.length)return $jscomp.arrayIterator(d);throw Error(String(d)+" is not an iterable or ArrayLike");};.function getIfbip(){try{return Number(document.currentScript.getAttribute("data-ifbip"))}catch(d){}}.(function(){function d(){var a=document.createElement("script");a.async=!0;a.type="text/javascript";a.src="https://cdn-ima.33across.com/ima.js";a.onload=function(){(new _33AcrossIdMappingsProvider({pid:"0015a0000344WLkAAM",expires:90,refreshInSeconds:28800})).fetch().then(function(b){Array.isArray(b)&&b.length&&(b=JSON.stringify(b),e.il_ls.lexc_33=b,localStorage.setItem("lexc_33",b))})};var c=document.getElementsB

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2314)
Category:	downloaded
Size (bytes):	4043
Entropy (8bit):	5.403398189872564
Encrypted:	false
SSDEEP:	96:NY7YNYMj8UazlKarsW1SPKTBxj6kDxx1vlsyS159O84+SGyAZTxSf0v:686BbldnMSTflDBvQB4+PXVxScv
MD5:	DB68CE1DB64EC5895355EF8870D44DFF
SHA1:	39CABE6D5EDDC7A76B282E8AE6D026E26B5FF611
SHA-256:	36BE4F9EEE63AF832548F73B3116ED38059E64867B036714A0A272B6406AC3F8
SHA-512:	25763A4EF87441C49E9DC13EFA977473363715B4BE81C38FD74FF4E31220A0F729B5D5D8DAEB65B0160C6B18CCB540ADB26760A8E45608B8833443D6D14307FF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return-1===a.toString().indexOf("`")}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;var n;var q=class{constructor(a){if(p!==p)throw Error("TrustedResourceUrl is not meant to be built directly");this.j=a}toString(){return this.j+""}},p={},r=function(a){if(void 0===n){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{constructor(a){if(g!==g)throw Error("Bad secret");this.l=a}toString(){return this.l}};new t("about:blank");new t("about:invalid#zClosurez");const u=[];var v=a=>{console.warn(`A

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x172, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4494
Entropy (8bit):	7.96066276970898
Encrypted:	false
SSDEEP:	96:nHBv+6GOLXru37CaNJehl2Xc9VgW55oPBpyJFmNwNMVWI5qx:nHBvgOLX6l9Xit5oW+vE
MD5:	921056DC06959318980468439528A41C
SHA1:	33B68D7A57F3CB05B065F746D7655C0C17F208F4
SHA-256:	45412503E04051376DC2C761AFB6D6641C7E55FC9E8D637B79975E6933276579
SHA-512:	95E52A6013D05D19937FD5A3FD99ABF82D752B6DA1AA618CE06D89456474C65A2E47718FC7544D6CD46260B50EC78C11E24E1646219A04114875E036109435CB
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400015154109_GOLDBLACK_486x684.jpg&v=3&w=400&rid=6&s=NazFNjxLySNEdzchgcn4tpsP&b=400
Preview:	RIFF....WEBPVP8 z...PU...*,...>m0.F$#!........en.^.).......x.y..............x..cp;..Wf...c......`....D...c..^..j7....84[l.j.)E....o~..#.Ytns,`K3..U...[...w..(.....>Q.H.(...t.'........3.z..J.. s".w.9........[[.....<SO............+.....?c...\.au%@.E...F.7lS......4...r...C...i.2.K...l.e..0Eat....$.9~&.....q..6}.....hY$eH..^c/....Z.....9.c....f....lRr..6}.....8..@.:.KL.DHdD.L.\.O{..........$.~...t....:.C.-.jb...U,....w7.) .\|..X..`.?.`H.7c.y..,..5..k<@}...".}sQ.7%P.....7>iv.....[eb.......1E..{..l.2g......KL{{..........Y..r\.s~G@....dter..(..z..p.5.4=...4.e....[..:........;xY....r..M...O.......x..^.......~s..<..If..].._.u...v...9..7.N..&...3G.M....b...`......R......s..W0.$...<.. ......~>........ZAv,..9.k...S...A41.;..~..cl....,....B/..u.jw.[...........6...f...c....qZ.z.....O...(.EG...H..:.'.....T_;.......S..;(..Q.5Lj.p)57Y5`.....~u.Q....\>..d..}Lp.`....).H>.../..y..)MF2...n.1>.T.ia. b....4..~.\........<..9..r.....C.o.wu....2tI.:...Ch..H.?.im}....M.m(6.

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	5.271014610700572
Encrypted:	false
SSDEEP:	6:tI9mc4sl9D4U2UJyuERJQLSEvPGyMbWYY6nUbWa7qG8NLP:t4L4N65MJW2r48NL
MD5:	1BFE2E290EC4440DA74A2E2C249EAE2B
SHA1:	0B888A3F9E27D1554F2E21D51E7A1C223D00DBD4
SHA-256:	8EC89605FE3D580E9539C7B858E8F69BA4E26FE06377EBE04585397DE23A7395
SHA-512:	FFD0A44963979942061CE2B086ABB17B6041B0D1753447B50166B9CB2778FD6BF89C292AB46CA5E383DF4C2BEA3038383F65798779A86BD30CAD6B447F1138CA
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/flash/icon/close_button.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 15 15" height="15" width="15">..<style>...bg{fill:#fff;opacity:0.6;}...icon{stroke-width:1.25;stroke:#00aecd;}..</style>..<path class="bg" d="M0 0L15 0L 15 15L 0 15"/>..<path class="icon" d="M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5"/>..</svg>

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=YnUBs5Yz9Zqjy9VCcoCxquFP&source_user_id=SrCpyrdV1RXO2T5
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 218 x 35
Category:	dropped
Size (bytes):	5311
Entropy (8bit):	7.752916715564999
Encrypted:	false
SSDEEP:	96:1yc3k/GCCEyDAPrrTgnGHleMLyHSL+Z8UNPFid/tuJIj1gFAum3:c0giD0rrT7Fese+UNPnKj1gVg
MD5:	CB890FB2CE924D666A24B8A44C04A1B9
SHA1:	96579D727A0F5EAFC1D12B02B648D19ABB0F729C
SHA-256:	058EDF53F777D5EE4E6E2003B6B095430E234C6CBF6984CF3EA6CDE06D949353
SHA-512:	683D92F82DCD9326B3F1452CF91B4F9880DF42FCA9F623930B2BFB4182918923D475F51799B4CB56E0139B45100E75D298078F2548440A3BF85296A6AD89CA36
Malicious:	false
Reputation:	low
Preview:	GIF89a..#................U................/.......2.................&.....J..............4...E...d................3.........v...(..u...y.........Y..n.......:..8........m...........g...K..........................C....fr...Q........f.........r............2z..;..................t...........O..$E...........Y...$....-........F........M.....U.....6...M....%.. ..<..S..G..E..:..IU...........0....`......j......2........................Z....[..$.............w..R........R....................]........(.........5.. ....E..]....................qf......................{..............}~..~..............N..j..............................................................W..0........3n..........f..i..p...........>.....:...................m..{..T......B...........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (844)
Category:	downloaded
Size (bytes):	144131
Entropy (8bit):	5.5246257157455085
Encrypted:	false
SSDEEP:	1536:5OazYUweavhDak/SXhHTNZ7rXJteOHxHtHNH40r2zDTVjwbhqwBXxYrKBljPikou:5Xw9a+ZVMdjBBWm62pc9LLA
MD5:	B32038724D4BDD891B2EB5991B7C39F6
SHA1:	0CC9B79A213AB7BEA5E5A1DFFE87D0E11F8E75E8
SHA-256:	3CC66544FA1DFEA5436D6C59FF531CAC87263BEEED67F033B44AA48E70EDC3B4
SHA-512:	2EED7797AF05681CEB1F7B34C962C04B24B679B851B4B71A6A5690CF896FAF5D33BDFB389EDE2AE7E9933183C7C61B3A0223A1C02F0535193DF3CFBC40BA5374
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10-hb.js
Preview:	var insticatorCommentingUnitSettings = JSON.parse("{\"id\":\"5c7bebcc-d90e-4a1a-be8f-7dc2f4ee68c8\",\"nextToButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdMobile\":\"DISABLED\",\"createdAt\":\"2023-05-31T22:07:18.000+00:00\",\"updatedAt\":\"2023-05-31T22:07:18.000+00:00\"}");'use strict';var settings={global:{domain:"justjared.com",gamNetworkId:"2507246",gamNetworkString:"2507246,22973718026",amazonUamId:"70fb13d1-ab65-42ac-a7ca-0b4e680d5c92",insticatorAsi:"insticator.com",insticatorSid:"bd45a367-d5fa-4207-9aec-1acba8ec52eb",embedHost:"https://dashboard.insticator.com",siteUUID:"2cdf4c71-ad6c-487e-b43a-8f1af912284a",acgId:"606d8d15-9a87-4b2c-b63c-7fa2a3294d10",prebidCdn:"https://d3lcz8vpax4lo2.cloudfront.net/files/instibid/"},ad:{settings:{DEVICE_TYPE_BREAKPOINTS:{mobileUpper:748,.desktopLower:990},PREBID_TIMEOUT:4E3,numberOfDuplicateAd:0,PREBID_MOBILE_TIMEOUT:4E3,REFRESH_TIMEOUT:3E3,AMAZON_TIMEOUT:3E3,adUnitToSizeMap:{DESKTOP:{"div-

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10412)
Category:	downloaded
Size (bytes):	290979
Entropy (8bit):	5.601227895444036
Encrypted:	false
SSDEEP:	6144:fA3b5PeuR9DE/B8OrAefXm4D1muZkX/a2kp6Ili1rdd+aT2f4Fc1cSkIHpuSApes:qb5HR9DZ1p+QYBtEf
MD5:	CAB9E4E5436433A552EF088861C783A2
SHA1:	7C77065A6DE9ADF3C0E20381A39C7650EDFD15CD
SHA-256:	70B914DE15DD75628895223BFE09012E3687598BCA4DBAA34A97234F6A8826E9
SHA-512:	2F15D1BD2CC2B3C9A91A0BCA62C5D77515CE11E50BF83A24C9128C987A0E6D704D1E0C4ADF8FD82E1DA3FDD5B21E02278313B5B5BC1082695C016CD11D068D9D
Malicious:	false
Reputation:	low
URL:	https://cdn.confiant-integrations.net/gptprebidnative/202403121239/wrap.js
Preview:	/* eslint-disable spaced-comment /.(function() {. 'Copyright . 2013-2024 Confiant Inc. All rights reserved.';. 'v3.202403121239';. var confiantCommon = (function (exports) {. 'use strict';.. (function(_0x3ac78b,_0x49b52c){var _0x80bbe2=_0x3ffa,_0x12cb31=_0x3ac78b();while(!![]){try{var _0x5934b6=-parseInt(_0x80bbe2(0xa9))/0x1+-parseInt(_0x80bbe2(0xb4))/0x2+parseInt(_0x80bbe2(0xbc))/0x3(-parseInt(_0x80bbe2(0xa2))/0x4)+-parseInt(_0x80bbe2(0xb6))/0x5(parseInt(_0x80bbe2(0xa3))/0x6)+parseInt(_0x80bbe2(0xad))/0x7(-parseInt(_0x80bbe2(0xb7))/0x8)+parseInt(_0x80bbe2(0xab))/0x9*(-parseInt(_0x80bbe2(0xc0))/0xa)+parseInt(_0x80bbe2(0xb1))/0xb;if(_0x5934b6===_0x49b52c)break;else _0x12cb31['push'](_0x12cb31['shift']());}catch(_0x365065){_0x12cb31['push'](_0x12cb31['shift']());}}}(_0x190b,0x194d1));function confiantTryToGetConfig(_0x248678){var _0x4d147e=_0x3ffa;function _0x697215(_0x1218f8,_0x45ed35){return !!(_0x1218f8&&_0x45ed35&&_0x1218f8[_0x45ed35]);}function _0x584bfa(){var _0x395f7

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=24&external_user_id=db936981-528a-4ea5-a990-5f76796d1680&gpp_sid=null&gpp=null&us_privacy=null&gdpr_consent=null&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2408), with no line terminators
Category:	downloaded
Size (bytes):	2408
Entropy (8bit):	5.2184211475875
Encrypted:	false
SSDEEP:	48:JCRQt+usBs4stCBOJy1U4ziOSfdlVPLjuNZoz3N+cIO3fkFvMP4F:JCqqqbQxJSfv1RN5IO3Mn
MD5:	FC893948C3EFC689B5B19D8A77958E23
SHA1:	17947BE723EE49C1FF2C3C1BE9DF72221218D4B8
SHA-256:	F4FC114373DA7E63FADE04D84F7F1CFB5B31632246F33B10F3B7B275B85E6DD6
SHA-512:	F6319C492B1B89E834681D8D75CDB3D5B947340071965931A306942A9CE5684D73EA4D7D6FD29C00F4814C8B3B0E1D8DAC51C480ECA44F3465F4D4A7F7F789C2
Malicious:	false
Reputation:	low
URL:	https://assets.bounceexchange.com/assets/bounce/local_storage_frame17.min.html
Preview:	<!DOCTYPE html><html><head><meta charset="utf-8"><script>var optOutKey="gdpr_opt_out",optOutValue="1";function clearAllData(){document.cookie.split(";").forEach(function(e){e=e.split("=")[0];-1===e.indexOf(optOutKey)&&clearCookie(e)}),localStorage.clear()}function clearCookie(e){document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:01 GMT;path=/;domain=.bounceexchange.com;SameSite=None;Secure"}function setCookie(e,t){var a=new Date,t=(a.setDate(a.getDate()+365),t+"; expires="+a.toUTCString());document.cookie=e+"="+t+";path=/;domain=.bounceexchange.com;SameSite=None;Secure"}function getCookie(e){for(var t,a,o=document.cookie.split(";"),s=0;s<o.length;s++)if(t=o[s].substr(0,o[s].indexOf("=")),a=o[s].substr(o[s].indexOf("=")+1),(t=t.replace(/^\s+\|\s+$/g,""))==e)return a}function addEvent(e,t,a){e.addEventListener?e.addEventListener(t,a,!1):e.attachEvent&&e.attachEvent("on"+t,function(){a.apply(e,new Array(window.event))})}function receiveMyMessage(e){addEvent(window,"message",e)}function p

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	69639
Entropy (8bit):	4.869426023874478
Encrypted:	false
SSDEEP:	768:0TXCWV2NXw73l8bMe244M7iSKtXPsgn88siVuGi8ZVL0UjiA4YAMf6XeAqthmrM2:0iNAAAPjmOGv9isR
MD5:	0A65E43F87B9AC1B8D2CB56646206390
SHA1:	9744808FCEADEA589A5496A45DA53D925106B996
SHA-256:	8F60C8E46FF2161132091C8BDAF0628C161918A67A1D65854C21BC6BDFF7EB91
SHA-512:	42337730D48F86D401E0E309C75EE0F3B29A451A41217B783171A856E83FEA6689394960B690419689A2487668BC9606624D293C41DB61D3C59957DBEBF74026
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/static/iquid-01.js
Preview:	"use strict";.function _typeof(t) {. return (_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(t) {. return typeof t. }. : function(t) {. return t && "function" == typeof Symbol && t.constructor === Symbol && t !== Symbol.prototype ? "symbol" : typeof t. }. )(t).}.function _createForOfIteratorHelper(t, e) {. var n, i, r, o, a = "undefined" != typeof Symbol && t[Symbol.iterator] \|\| t["@@iterator"];. if (a). return i = !(n = !0),. {. s: function() {. a = a.call(t). },. n: function() {. var t = a.next();. return n = t.done,. t. },. e: function(t) {. i = !0,. r = t. },. f: function() {. try {. n \|\| null == a.return \|\| a.return(). } finally {. if (i). t

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	810
Entropy (8bit):	4.785286521682457
Encrypted:	false
SSDEEP:	12:qC5SFQK41jVJE220s6BIXWWSHEwqxyuopjItNjGavB80+HJldjy/k:b5ZVSEsqQSHrqgXsJfp80sy/k
MD5:	47FD1631D6FE2E2BF391AF27FE2E0565
SHA1:	8E3B265DB517A67346B516B25CF9B5FD2BE8F0D1
SHA-256:	8A59881AAE83948C79AAD351B6C2B206F08360449C9A47E725F4523B57C5D5E4
SHA-512:	D2F0C450369454D1B112E7D72C351F4033754805A276A0CAD2FBA7DAAAB65ED93D68C37958C2A3D70C96400AA7633138A81190E347C079BD9CCE9D9521A89726
Malicious:	false
Reputation:	low
URL:	https://aacdn.nagich.com/assets/locale/en.json
Preview:	{..."closeBtn" : "Close<< Dialog>>",..."a11yBtn" : { ...."txt" : "Accessibility",...."tip" : "Open accessibility options menu",...."drag" : "Explore your accessibility options"...},..."blindNotif" : { ...."note" : "Please note: This website includes an accessibility system.",...."keys" : "Press Control-F11 to adjust the website to the visually impaired who are using a screen reader; Press Control-F10 to open an accessibility menu."...},..."shortcuts" : {...."a11yMenu" : "Press enter for Accessibility menu",...."a11yMenuMobile" : "Press for Accessibility menu",...."blind" : { ....."txt" :"Press enter for Accessibility for blind people",....."mobileTxt" : "Press for Accessibility for blind people",....."sup" : " who use screen readers"....},...."keyboard" : "Press enter for Keyboard Navigation"...}..}

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	258
Entropy (8bit):	5.719568814077515
Encrypted:	false
SSDEEP:	6:YvRro1i0uCWoM6VfsoD6VQMm6VK6hQYuD1vUzILnvck+ZbZjZl:e6WP6JD646hQUkzEk+ZbLl
MD5:	655DEFC90398DF5DB964844E75F894EB
SHA1:	22876BE4CBEA1F6B46446E7E62738942DAA43E23
SHA-256:	7D8533C029710E5866339B922C09B29A70208DF9AE8053A813A2530F757A98A8
SHA-512:	839DA0DC5E18738E085C6C1A7C37B3D6315513841928AC09EAA4DB99A62ECF7F77F005736263BFBF5275F9F995E71F6D6E2C494D9A3E8FBF93A0407C4D7F642A
Malicious:	false
Reputation:	low
URL:	https://vid.connatix.com/pid-5cad8f3d-ecf1-441c-8c48-779a68f6d6dd/ece582e4-f873-4af7-8e2c-fd3f253ebfe1/2_media.bin
Preview:	..video_justjared.com_2_16042024...Z".:...sp.jpg......B.1_th.jpgJ......h264..360_h264.mp4J......h264..720_h264.mp4J......h264..1080_h264.mp4Z.playlist.m3u8b$08d6b12d-5e3f-8a17-2879-4f87ea5a3d8bj.r...$859b9f01-8322-f1c6-1f35-2a8485980fda.................{}...

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1371)
Category:	downloaded
Size (bytes):	1372
Entropy (8bit):	5.174397963973616
Encrypted:	false
SSDEEP:	24:crtgEBE1Oy4uo5XBQc5uH8NeQwXeHyblxmTmrGtuvPkwyxbqGoJsJcJ/6TA:v+uWBeQwuHyb7SehyCPyA
MD5:	00A8E13A83B2BBAB51AF8E55F52BE363
SHA1:	57340EB5C07E50D96F4A04BD4C220F0F24CEC649
SHA-256:	3AEC57FFA5C31E185202DDAA3B5B9D9872D4504F4546AB4EEA1298BAAF3C7CC7
SHA-512:	78112684775C9DC7130F6A8BEF064CC249B8898D2FA97D6B213CEB9B04C46D561F4BB8548F1AA02C01F30E23515D28421ABEF5FA41B9F02BB23D803CD2ACBE6A
Malicious:	false
Reputation:	low
URL:	https://script.4dex.io/localstore.js
Preview:	!function(){"use strict";var e=function(){return function(){try{if(window.top.location.href)return!0}catch(e){return!1}}()?window.top:window.self};!function(){if(!e().navigator.userAgent.match(/(MSIE\|Trident)/)){try{!function(){var t=e();if(t.ADAGIO=t.ADAGIO\|\|{},t.ADAGIO.cleanAdIsLoading=t.ADAGIO.cleanAdIsLoading\|\|!1,t.ADAGIO.cleanAdIsLoaded=t.ADAGIO.cleanAdIsLoaded\|\|!1,!t.ADAGIO.cleanAdIsLoading&&!t.ADAGIO.cleanAdIsLoaded){t.ADAGIO.cleanAdIsLoading=!0;var n=t.document.createElement("script");n.src="https://cadmus.script.ac/dahhc4ozyvjm6/script.js",n.async=!0,n.setAttribute("data-client-key","7d1ed67e-10ef-4c22-b165-710c6bfa1345"),n.setAttribute("data-api-integration-mode","prebid");var a=function e(){n.removeEventListener("load",e),t.document.head.contains(n)\|\|(t.ADAGIO.cleanAdIsLoaded=!0,t.ADAGIO.cleanAdIsLoading=!1)};n.addEventListener("load",a),setTimeout((function(){t.ADAGIO.cleanAdIsLoaded\|\|(n.removeEventListener("load",a),t.document.head.removeChild(n)),t.ADAGIO.cleanAdIsLoading

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	4.7628847635205425
Encrypted:	false
SSDEEP:	24:hMSvMtzbzwHUjffbJlL8lcW4p7Oy/ZFoWBPzAl24Dtty84j:tiXc2Hd13QyIfztyPj
MD5:	33353692B0F7815FAD3FCC2E0A4FE39D
SHA1:	99484EA9268237C2E2163AA7A3CE15E1AFFF7515
SHA-256:	C1AC28657F1A714D986281BD77D5AB6BC8099E7708693337FB5C7001A5653BC3
SHA-512:	234942E642DB965B6CD528A1A3728581ADCD7487CE96C8715A00E69CB7C87C8D15FFA8AA5B736182188A2E91985D8927BBCB84A45009493B7FCB34BA047D4355
Malicious:	false
Reputation:	low
URL:	https://cs.ingage.tech/v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>. <title>User-Sync</title>.</head>.<body>.<script type="text/javascript">. if (window.localStorage) {. const lcUserKey = 'instUid';. const url = new URL(window.location);. const to = url.searchParams.get('to');. if (to) {. const instUserId = url.searchParams.get('userId');. window.localStorage.setItem(lcUserKey, instUserId);. window.location.href = decodeURIComponent(to);. } else {. const uid = url.searchParams.get('uid');. const instUserId = window.localStorage.getItem(lcUserKey);. let requester = url.pathname.split('/');. requester = requester[requester.length - 1];. if (instUserId && uid) {. window.location.href = '/v1/sync/' + requester + '/' + instUserId + '?uid=' + uid;. }. }. }.</script>.</body>.</html>

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://merequartz.com/aadetect/px.gif?ch=1&rn=82656&adslot=hluad_728x90_
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/server_match?partner_id=1934&r=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D253%26type%3Diframe%26id%3D%7BPUB_USER_ID%7D%26auxuid%3D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (14253), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	162922
Entropy (8bit):	5.56344266903549
Encrypted:	false
SSDEEP:	3072:07XPuUUpcDozX7Dxt7L2FWXE6bn8SvijEjzh5:0bPDmcMb7n2FWXERkh5
MD5:	E19330CFF61C587EBF46E25668460E3F
SHA1:	73E09E80DE26D3A0A088A8B95A86C495BC024F6F
SHA-256:	0E3B0724395387CB14B4C377F05FC13DD6F7C7DE2C0A6C4804D1C58F43905819
SHA-512:	2F2328E0716E1781FDED0C7E2CF86C5063DD7F02EB215BD32D49DDB66B9762F715E86075F7D069D09626097EBB704A9255F9E4FA11201B610890607FB7BF1C0C
Malicious:	false
Reputation:	low
URL:	https://ads.us.criteo.com/delivery/r/afr.php?z=24649CB0EDF8BC90&u=%7Cr6N6e7BDQxslTmWtsjAIqqCK7LUZHd0o9tHP%2BmMvxLo%3D%7C&c1=SMhbYeryLxmFaVtI-bxLNkQBtRdVXdXS3sYS_m2e7eDHcAej6N3l6caEHwXUrLa-nbcTh1VJyNfo9sPfce7D_DawCexGFCv8Zl_rjJ2iDvaFt73w0zRE0-LnN5D1VJ8QrqfJ_3lnzuhmTwUrtNTkc-bs0Y9AzAE6CHjcz7f4lxkZsy5sZ56ylqXHVV-Vyjrxl_Y5TBM3TPh4Nq9pLJ7GkkhFOQicmcRfGb1Bd8UhOMc1JQqXuSCUfevgKuUBROwHwXYlKF9_UQ2i14SnskoGO5yP_1YR0FBF-jlwwqCrIWLNQ2fSjUuQDiU6rz7pdVbHokfWCvwN0ocpCM9aBokX_-aDsqQ46AI3RRLih-rbeAzABHK4ZLU0qe64080uEhif7wjM_EJy7UjhD7NDKT4f2ZZt_VukoiB0PclTrRNku4zdhTr6iuuWHt0JLKVEu0ZGui1MtoDCCL9bUEWeuB15IaZJLvl-_M6z1qqhrPqfOiiMYDa0j-YOGoj6bUQjwt6l8e3v4x8RqLPZKE2ro7ocS9r2nQ267iFF519o-anW2HjFytHPTuGo_uY_mVByhUBG_tQHINygGQdJPrsZoOJjjc8QskdJBpeDTNmEs6PEOA9Sn1OzDVNKNlaJW6QnXyfUsMBBy5N2rac4mTNz5jDjWhDIA-zqdwN3STfqXyC-T0R04LOIBbY0_7HNvrshrnNS
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Advertisement</title>.<meta charset="utf-8">.<meta name="format-detection" content="telephone=no">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<meta name="viewport" content="width=device-width, initial-scale=1" />.<style type="text/css">body{text-size-adjust:none}</style>.</head>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>. BannerId 10967427, ZoneId 436345, AdId 1701191 -->.<div id="main" style="position:relative; padding:0; width:300px ; height:250px ; background-color:#ddd; cursor:pointer; overflow:hidden; display:inline-block;"> <style> .privacy_element, .privacy_element a, .privacy_element img { text-decoration:none; margin:0; padding:0; border:none; } #privacy_icon, #privacy_icon a, #privacy_icon img { cursor:pointer; } #privacy_icon { position:absolute; z-index:100; top:0px;bottom:auto;vertical-align:top;margin-top:1px;

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1728
Entropy (8bit):	5.9839378385519355
Encrypted:	false
SSDEEP:	24:tCfLir1n2j1EoFtdy6iRXCJ/OPUHxoF8J7ifJNqJOGkDv8MlWBYn/Pfu0UXYsxME:EC21rrdy3UdSF8JWNu48/CnGtz
MD5:	2466A7A5A60D0AF7D084A67CFECCE341
SHA1:	637F6945B48BFA87AC1F4C8DAD43FB239734E8A0
SHA-256:	0DE0323DECF6695D61B0281C25815EA009C2D9E333B972A8F9BD3F2F78BA36F9
SHA-512:	A7F9C4B4494CD80144FF78C589D99B254E4F76423385CD4A8940F6EF3788DA99C3F2B8324B3F60431DE30ACA54DBCCBF891809782EC582E517D72A5177AB045F
Malicious:	false
Reputation:	low
Preview:	<svg width="8" height="16" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="-8" y="-4" width="24" height="24" xlink:href="data:image/png;base64,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

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:c:c
MD5:	45C48CCE2E2D7FBDEA1AFC51C7C6AD26
SHA1:	0ADE7C2CF97F75D009975F4D720D1FA6C19F4897
SHA-256:	19581E27DE7CED00FF1CE50B2047E7A567C76B1CBAEBABE5EF03F7C3017BB5B7
SHA-512:	0DC526D8C4FA04084F4B2A6433F4CD14664B93DF9FB8A9E00B77BA890B83704D24944C93CAA692B51085BB476F81852C27E793600F137AE3929018CD4C8F1A45
Malicious:	false
Reputation:	low
URL:	https://c5.eu-4-id5-sync.com/
Preview:	9

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4423
Entropy (8bit):	5.266681513752207
Encrypted:	false
SSDEEP:	96:beBUgc0OmZkiCG/Dwo2oNKfE24VzXDaTpXpDidL7CDBsxphPkTN7Dty1UFP/TdvF:be2Z0OtWco2iOE24+fidThchNy1k7j
MD5:	171DF609D08E47F89A94111EFE668FFD
SHA1:	C217407F1F1ABD83554A132F5E9543EB21836B64
SHA-256:	0C0228A75B5FB15F809BB27DD2C1913C4C8E0B51B0029B51D4AB1C8F42EEFF6C
SHA-512:	57DEADEBBBB270EFD251DE59D517469497B4BC8F283617568FEB9FA0A0B6FFD05411AC3C99FB3047D3F912FA25712A98549E5EC861849330DAB6E49E7C44CC50
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var lotameClientId = '16576';\n\ninitLotame(lotameClientId);\ncreateLotameScript(lotameClientId);\n\nfunction initLotame(propertyId) {\n var lotameConfig = {};\n var namespace = window['lotame_sync_' + propertyId] = {};\n namespace.config = lotameConfig;\n namespace.data = {};\n namespace.cmd = namespace.cmd \|\| [];\n \n namespace.cmd.push(function() {\n namespace.sync();\n });\n};\n\nfunction createLotameScript(propertyId) {\n var lotameSyncUrl = \"https://tags.crwdcntrl.net/lt/c/\" + propertyId + \"/sync.min.js\";\n var lotameScriptTag = document.createElement('script');\n lotameScriptTag.src = lotameSyncUrl;\n document.head.appendChild(lotameScriptTag)

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999677882041166
Encrypted:	true
SSDEEP:	24576:BEZHKrT409CJMOQ8/URzjVSPjFvgyosVgF9D6C8rm4rzQ:dT409j8/UlgL6sOT2Xrm4rzQ
MD5:	9E015FE21382956322ABEE55E2FFD0DC
SHA1:	898748BD235EB8C9D789550078D4304DE9E49D45
SHA-256:	3FC694098A8B9B805D40E326E5351C7CE194DE7706CE54562CD7905042BD9AEF
SHA-512:	EAF9286BA2D3522F64321C38A8BE1F7C3B9AA1CFC4A495299F14E344D9AA6378FDC6E334AA1654C97C4D1088541DDECE71F404AC64C05FE1F31F1DA7F3D06F06
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/dt/91644/5409671/6e29e5204e824421ba7a64a4b6e77dad_untitled_design_(8).mp4?ibv=1:2f75092362f61f:0
Preview:	... ftypisom....isomiso2avc1mp41....free.%x+mdat..........E...H..,. .#..x264 - core 157 r2969 d4099dd - H.264/MPEG-4 AVC codec - Copyleft 2003-2019 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=12 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=abr mbtree=1 bitrate=1024 ratetol=1.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00....^.e......w.J.}5..[~.;.1/.G.C*.....VEG.8.........@N}v..:........J.LQ;.c.....+..r.Y....F.7}...[.....I...?8`..Q .....GX.8i.a.d..7..c....)3.....Cl;_J-.:..Vj..2j.N.Q.W.P...........}\...5.SP..&.[..x[1...N...6a.U......<.;..&.X.E!.U.N5.D8....

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-sovrn&gdpr=&gdpr_consent=&us_privacy=&userId=IhHYAPZHgyDtLY4rTVmqUZsu
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2019 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	32915
Entropy (8bit):	7.962548872435107
Encrypted:	false
SSDEEP:	768:XqqfKRlCCOur5eFnHd87M27amxTvBgcvO6xIQfFAL4lq2:XelCBcepdetgcvH5fFAU
MD5:	A9CBC3A4FF99F419A6E6C7624FD64077
SHA1:	707DCA3B1B4CE9FA1A5818849A7058F042E71457
SHA-256:	22D7200DDD3C5F0AA8A5C9F4A1A814E99973FA64E67273C44496F4986AAE11F7
SHA-512:	FC51356883A815089F40742AE992CA2B6F7B7A82E1A8946604FCF91DC8C29F60466C603A980C7C10F206F01F790B63929E05932D8F8A9251E5F0DF0E58E20F21
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/kourtney-kardashian-shuts-down-fan-comment.jpg
Preview:	.....6Exif..II*.......................2019 Getty Images.......Ducky.......F.....thttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" photoshop:AuthorsPosition="Stringer" xmpMM:InstanceID="xmp.iid:582F08DBFE1211EE8D30CCA90C398DFB" xmpMM:DocumentID="xmp.did:582F08DCFE1211EE8D30CCA90C398DFB"> <

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	703
Entropy (8bit):	5.500014033089228
Encrypted:	false
SSDEEP:	12:2ebxvfCYK+sOeRjrImdjGDYL8BMe0i4J/bMU3+n1V0oKfzZ/g/MnGQ7Qb:2evK+Yjr3ctBLnSl/g/
MD5:	AF29F8AB0A14B9FB8FA5029624F0F463
SHA1:	E21E9EFD84E1B0FF1436D87641B9930BC18B910D
SHA-256:	5D74685B2F83401C8CF4E5346B0028708AD5B122D9BF47C96492B333027C2C3F
SHA-512:	225470D338D4F77AC218DB5B070945ADA0A5F6E2F93021A12198C20FED8A2B9DA369BA5F378A95A7E04CA7B11C13166ABFB0263DF39258A3B9322BD36CBAB5B2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/jwumXNuB/v1/?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsharethrough.com%26id%3D%24UID&gdpr=0
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<img src="https://s.amazon-adsystem.com/ecm3?ex=sharethrough.com&id=7456771a-49ee-4e2a-b013-668de61e15dd">.<img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=">.<img src="https://cm.g.doubleclick.net/pixel?google_nid=sharethrough_ob&gdpr=0&gdpr_consent=&google_hm=NzQ1Njc3MWEtNDllZS00ZTJhLWIwMTMtNjY4ZGU2MWUxNWRk">.<img src="https://pm.w55c.net/ping_match.gif?st=ShareThrough&rurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DYnUBs5Yz9Zqjy9VCcoCxquFP%26source_user_id%3D_wfivefivec_">.<img src="https://creativecdn.com/cm-notify?pi=sharethrough&gdpr=0&gdpr_consent=">.</body>.</html>

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuIVh9qgaGSuMfRPQ8CXNbQXd_zP45BynJPmUMcgm8R16F3K64d3wLK1arff624tkeoVaC4hhfN7QdOevcYI0HQ2jB_9t4RjSE29ZYbpliF1_Wxf2aRQBIVuH7EsaFEWSytnsTrSg&sig=Cg0ArKJSzMjTob1ouOfGEAE&id=lidar2&mcvt=1057&p=578,820,828,1120&mtos=0,1057,1057,1057,1057&tos=0,1057,0,0,0&v=20240417&bin=7&avms=nio&bs=0,0&mc=0.94&if=1&vu=1&app=0&itpl=20&adk=1494241348&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946517700&rst=1713532374948&rpt=2545&isd=0&lsd=0&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9549), with no line terminators
Category:	downloaded
Size (bytes):	9549
Entropy (8bit):	5.357468120215562
Encrypted:	false
SSDEEP:	192:EAh0Ik0e6LkuakXkTBbXitzBXIk0e6mwYmzYM0n:10R0Jck0dbSbXR0J4mzY9
MD5:	2DC861789C89C9B49B00C145A9C1F410
SHA1:	B8D137DA7AC934470688D70A94C15326A7E1DDFB
SHA-256:	A672B5DBED029FEE05620EB8B132EDC8F9ABF906895E30A60D73E53EFE4D8AF2
SHA-512:	760B58BAB43C714FBF02756534D87074CA01E1B6038A447BCAE0148B6D25538C14C1B6692FB85B7F7492DBD5BCA67587F566656CA4A735B54953D4C63392507C
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/manifest.173670c1.js
Preview:	!function(e){function a(a){for(var c,r,d=a[0],i=a[1],l=a[2],s=0,m=[];s<d.length;s++)r=d[s],Object.prototype.hasOwnProperty.call(t,r)&&t[r]&&m.push(t[r][0]),t[r]=0;for(c in i)Object.prototype.hasOwnProperty.call(i,c)&&(e[c]=i[c]);for(f&&f(a);m.length;)m.shift()();return n.push.apply(n,l\|\|[]),o()}function o(){for(var e,a=0;a<n.length;a++){for(var o=n[a],c=!0,r=1;r<o.length;r++){var i=o[r];0!==t[i]&&(c=!1)}c&&(n.splice(a--,1),e=d(d.s=o[0]))}return e}var c={},r={8:0},t={8:0},n=[];function d(a){if(c[a])return c[a].exports;var o=c[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,d),o.l=!0,o.exports}d.e=function(e){var a=[];r[e]?a.push(r[e]):0!==r[e]&&{5:1,14:1,15:1,18:1,19:1,20:1,21:1,22:1,23:1,24:1,25:1,26:1,28:1,29:1,30:1,31:1,32:1,33:1,34:1,35:1,36:1,37:1,38:1,39:1,40:1,42:1,43:1,44:1,45:1,46:1,47:1,48:1,49:1,50:1,51:1,52:1,53:1,54:1,55:1,56:1,57:1,58:1,59:1,60:1,61:1,62:1,63:1,64:1,65:1,66:1,67:1,68:1,70:1,71:1,72:1,73:1,74:1,75:1,76:1,77:1,80:1}[e]&&a.push(r[e]=new Promis

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=gapzaid&ttd_tpi=1&gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	736
Entropy (8bit):	5.431095997956037
Encrypted:	false
SSDEEP:	12:U7Dlf5ZIcBxwhObvbUsIBbRT7GcBxwhObvbUicY5Y2PqVCZEnxTht1DtfCYKO+k9:WDlf5BNbT/vwNbTROC6DnKO+kFl4nKb/
MD5:	3185442274F968CA83072ADEA2E39FB3
SHA1:	A51E7FDFB312920F7B8E43B54006E185D0782FB8
SHA-256:	61B3867690D3DA28DF6F7D458E19A44CCE84567A0993143EE64E52F213F69998
SHA-512:	34CDF533F39B3A5785D537FE8CD3DEFD65484A280A7AB9F9F66BCAB9937EC9F260AF55217117F30475167F26C91C0381907196D28FABFCD27145EB6D79DB6B9B
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=MsG0RONB99OMG&cb=2&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-3%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_3%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_3%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	/* aax response */.apstag.bids({"rm":true,"id":"JAdeqGgl2mzoIo3uWXKbBHAAAAGO9n3R5wEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD4GWau","to":5000,"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JAdeqGgl2mzoIo3uWXKbBHAAAAGO9n3R5wEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD4GWau","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"div-insticator-ad-3","amznp":"9qn0g0","mediaType":"d","amznbid":"1bc3zsw"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"2","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-onetag_pm-db5_ym_ppt_cnv"})

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	111
Entropy (8bit):	4.099277144642351
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbfsGsvziAEtvBL//+ac4NGL:hxuJzhqI4GsbiAEdB6X4QL
MD5:	38227EA31F26CDC0269DA468A2F6CA6D
SHA1:	131E3EF364E2C24812508E7A81C9CB8422AA775D
SHA-256:	0A7C567B36A7BFB198D6F6FBB8B26C0C1FBC557CD4F0FD696835974EDD036F0A
SHA-512:	BA05B3EF2B78DA11134E1FDBADAA1113E11A9DF7148970B8B31A1264CC2A433686D96EF9D00C66AFF4BDAB37052AF3C246C659E4610A2D67FCF7EF106A771303
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/empty.html
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <title></title>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SWhIWUFQWkhneUR0TFk0clRWbXFVWnN1&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2193
Entropy (8bit):	4.484040634395486
Encrypted:	false
SSDEEP:	24:t4oGJv8FStaBtXnOYVaaxfl1WruNrNJz5ElB2HxEJf7Rfvzxi7tgnAQXTflgpx0+:08X7hV9LK1f2t+CH0Lo3TGQeDgym
MD5:	4C23CFAE18151EB40A5CDE158E48434F
SHA1:	0FE07FD6A29C1391FA952593CBE32AAB4F12A7EA
SHA-256:	A0E62CA4A82BEF79BBE9DC2ABA6C0782A7D8ECA046BB1BAA30EE91EC37931553
SHA-512:	CF039824570560E54A6CEF70780B53B1880A5AA45676703DF5DE437A0E334253BF88D0496F5B0971A70CC9DDDD3191910A6BB6DC2FCA356EB6948058045631FC
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/flash/icon/criteo_logo_2021.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="209.3" width="1053.5" xml:space="preserve" y="0" x="0" id="Layer_1" version="1.1"><style id="style69" type="text/css">.st0{fill:#fe5000}</style><g transform="translate(-223.3 -209.8)" id="Layer_2_1_"><g id="Layer_1-2"><path id="path71" d="m609.1 401.4-35.8-53.2c-2.7-4.1-1.7-9.6 2.4-12.3h.1c16.4-11 26.7-30.7 26.7-53.4 0-38.9-32.5-69.6-72.6-69.6h-86.1c-3.3 0-5.9 2.6-5.9 5.9v37.7c0 1.6 1.2 2.8 2.8 2.9 29.1 1.6 52.6 26.7 52.6 55.4 0 28.9-23.7 53.5-52.6 55.1-1.5.1-2.8 1.4-2.8 2.9v36.6c0 3.3 2.6 5.9 5.9 5.9h50c3.3 0 5.9-2.6 5.9-5.9v-17.6c0-12.5 10.8-15.6 19.1-5.8l21 26.3c1.9 1.9 4.5 3 7.1 3h54.8c4.9 0 8.9-3.9 8.9-8.8.1-1.9-.5-3.6-1.5-5.1z" class="st0"/><path id="path73" d="M636.6 212.7H680c3.3 0 5.9 2.6 5.9 5.9v190.6c0 3.3-2.6 5.9-5.9 5.9h-43.4c-3.3 0-5.9-2.6-5.9-5.9V218.6c0-3.2 2.6-5.9 5.9-5.9z" class="st0"/><path id="path75" d="M756.3 262.7h-45.7c-3.2 0-5.9-2.6-5.9-5.8v-38.2c0-3.3 2.6-5.9 5.9-5.9H862c3.3 0 5.9 2.6 5.9 5.9v38.2c0 3.3-2.6 5.9-5

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3745
Entropy (8bit):	4.853229251359781
Encrypted:	false
SSDEEP:	96:JvfD7/wRi/FE0R0v/DaKwMt/MDEgV/NT7R5:5D7oamv/Ys0NV/H5
MD5:	7689064A29273BE8192735A0A9EFA637
SHA1:	7B221C57AEBF7A96BB86202C1B322BF4B7E6085F
SHA-256:	74F22B35B1E4E4456880BD07C2C5C830C82C75C307C61F3C56EEAF25019B7F80
SHA-512:	4D2F88B6F6BBF2815659F8EB26C76712A886111AE8FDA1AE44209B1696627A37AB95480BC5FC1B499EE10FD834A70A3B04F30F6DCA7E226D53E273ADD22C355E
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/cta.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="145px" height="26px" viewBox="0 0 145 26" style="enable-background:new 0 0 145 26;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#023D3D;}.</style>.<path class="st0" d="M141,25H3c-1.1,0-2-0.9-2-2V3c0-1.1,0.9-2,2-2h138c1.1,0,2,0.9,2,2v20C143,24.1,142.1,25,141,25z"/>.<g>..<path class="st1" d="M9.87,14.01V9.51h0.91v4.38c0,1.31,0.52,2.01,1.5,2.01c0.97,0,1.49-0.7,1.49-2.01V9.51h0.92v4.51...c0,1.72-0.84,2.64-2.41,2.64C10.71,16.65,9.87,15.73,9.87,14.01z"/>..<path class="st1" d="M16.14,9.51h2.36c1.22,0,2.4,0.45,2.4,1.99c0,1.53-1.13,1.98-2.4,1.98h-1.45v3.03h-0.91V9.51z M18.49,12.72...c1.07,0,1.48-0.48,1.48-1.22c0-0.75-0.41-1.23-1.48-1.23h-1.44v2.45H18.49z"/>..<path class="st1" d="M21.71,13.05c0-2.3

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://measurement-api.criteo.com/register-source?impressionId=66226ded5a542777147c2ebd54eb74ad&partner_domain=regrowhairformula.com&external_uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff&partner_id=91644&source_type=event&campaign_id=429940&marketing_objective_type=0
Preview:	OK

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	58212
Entropy (8bit):	5.349713055626157
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYmYwsxC0H9:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyq
MD5:	E4E10D598A8FCB88B37FB4393F84A326
SHA1:	383DE0A6372874A62F212A3321A27204177F3DE3
SHA-256:	FEA181E0A1719300F2DCEEFFAD92A782266AF6D64BA91F5F652955E5425A8BAB
SHA-512:	8C20C23EE9CF945B837AEC63A9FA054F047714C4BCC3FCCEF22CA11ADD616E0E7EA8782CE3C7851CEEFF05B365B000BDE10E92074ABB764FD226CBF0FC97C576
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/572262379840831?v=2.9.154&r=stable&domain=www.justjared.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	93
Entropy (8bit):	4.514244499364558
Encrypted:	false
SSDEEP:	3:YAv+ejadWrjHvALuCKxBAVWUpZKxVWR4V:YAmUad+TIuzxBWWUfdR4V
MD5:	EADFCE794A6A63B46A25AEB1B62607DB
SHA1:	BF21A194D4CD30D3CDE62FDC58CC3321A8DFE60F
SHA-256:	1972A9798645E0E54859B82C0F0994116425C8AF9F4BF407480C4DC0350A8AE3
SHA-512:	7A521C2B2FE270802B4841CF209E2E1970D257B2E2488126FAA66710E4AEA37AE9A22528CE004D328EE42883D5A11DFA84AF2F04EDA739B9423F258A56EDD4C3
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"httpStatus":400,"message":"No origin header found.","errorCode":"bad_request"}]}

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1606
Entropy (8bit):	4.382511802056168
Encrypted:	false
SSDEEP:	24:t4L4PH/d66Li8Kde/8q61cu4zWUQHv3+s1nkH8Q4h4G+EvU65ZvtlDM65qNG1/u2:zndZLi8KdekvOi6Nm4lIZnDM65bf
MD5:	ABDD6AC886BCEB6657049814375BE895
SHA1:	3E1BBBDE5FEAF6B6B264038439EB459150E369B3
SHA-256:	095C997695F6A290FDBA58B778EB0A0FDCDD9C108669E41265527A262223F1E6
SHA-512:	0EF0444C359399FD153552A154160D550C8A4D3DE1277F5E526DCE12991C676435DE276D667325CCAA4D30084C9CF768CAE8B388331459856F20D297D32E0D8A
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/flash/icon/privacy.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 15 15" height="15" width="15">. <style>. .icon{fill:#00aecd}. </style>. <circle class="icon" r="0.75" cy="5.875" cx="5.75"/>. <path class="icon" d="M 2.3730468,1.0136718 C 1.6293185,1.0090776 1.1,1.3947866 1.1,2.5 1.100712,5.7520821 1.0996094,8.7129311 1.0996094,12 v 0.800781 h 0.013672 c -0.00328,0.03309 -0.00524,0.06633 -0.00586,0.09961 -4.7e-5,0.61699 0.447682,1.117187 1,1.117187 0.035907,-4.48e-4 0.071766,-0.0031 0.1074219,-0.0078 0.1364212,0.007 0.2721632,-0.02339 0.3925781,-0.08789 l 1.7871093,-0.917969 c 0.7171771,-0.35578 0.4527743,-1.437158 -0.3476562,-1.421875 -0.1186385,0.002 -0.2351089,0.03213 -0.3398438,0.08789 -0.103283,0.05499 -0.527302,0.28718 -0.7851561,-6e-6 C 2.8554801,11.595981 2.6990806,11.369862 2.699,11 V 3.6 c 0,-0.1796875 0.1147961,-0.6221743 0.7443593,-0.5921875 0.3595207,0.017124 -3.339e-4,-0.093424 3.9343887,2.0557392 3.934723,2.1491638 3.782409,2.0484663 3.786315,2.416917 0.003

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	4.7628847635205425
Encrypted:	false
SSDEEP:	24:hMSvMtzbzwHUjffbJlL8lcW4p7Oy/ZFoWBPzAl24Dtty84j:tiXc2Hd13QyIfztyPj
MD5:	33353692B0F7815FAD3FCC2E0A4FE39D
SHA1:	99484EA9268237C2E2163AA7A3CE15E1AFFF7515
SHA-256:	C1AC28657F1A714D986281BD77D5AB6BC8099E7708693337FB5C7001A5653BC3
SHA-512:	234942E642DB965B6CD528A1A3728581ADCD7487CE96C8715A00E69CB7C87C8D15FFA8AA5B736182188A2E91985D8927BBCB84A45009493B7FCB34BA047D4355
Malicious:	false
Reputation:	low
URL:	https://cs.ingage.tech/v1/syncPage/rubicon?userId=84007c2a-d31f-425a-b5e3-a16088ed1608&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>. <title>User-Sync</title>.</head>.<body>.<script type="text/javascript">. if (window.localStorage) {. const lcUserKey = 'instUid';. const url = new URL(window.location);. const to = url.searchParams.get('to');. if (to) {. const instUserId = url.searchParams.get('userId');. window.localStorage.setItem(lcUserKey, instUserId);. window.location.href = decodeURIComponent(to);. } else {. const uid = url.searchParams.get('uid');. const instUserId = window.localStorage.getItem(lcUserKey);. let requester = url.pathname.split('/');. requester = requester[requester.length - 1];. if (instUserId && uid) {. window.location.href = '/v1/sync/' + requester + '/' + instUserId + '?uid=' + uid;. }. }. }.</script>.</body>.</html>

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251 2024 Disney. All rights reserved.], baseline, precision 8, 120x225, components 3
Category:	dropped
Size (bytes):	31705
Entropy (8bit):	7.9685459323651155
Encrypted:	false
SSDEEP:	768:7v5qZpcw20FyBz6qZReUOOvRr4wLKADJPUThRt3dOcE695ijH:7F0FQz6b8OwLzDJPchROo5eH
MD5:	9D4A419F21FC326A689B267A2A6311F3
SHA1:	B8B8F6A0EA02978F5552DCB2F81A0B8F70E0E294
SHA-256:	3AA024C5ECB8DF64AB181E2510036B79E608FB9D0033AD33FE014AFB123454A2
SHA-512:	34AFF8D0C0464564B37AF1FACDCDF886F4FB48A9B76056FA80681D90CD48C0FE743215D281BCFCF16FC2151C843F30857103C7D1965E4A61EF8964D07FA496CE
Malicious:	false
Reputation:	low
Preview:	.....JExif..II*...........%............ 2024 Disney. All rights reserved.........Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpRights:Marked="True" xmpMM:OriginalDocumentID="7311CF3CE498DF9B7D2B09954C17C6EF" xmpMM:DocumentID="xmp.did:3DB6401BF88E11EEAD9CD2D3B4A64DED" xmpMM:InstanceID="xmp.iid:3DB6401AF88E11EEAD9CD2D3B4A64DED" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)" photoshop:AuthorsPosition="Disney"> <xmpMM:DerivedFrom s

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001713532371-GGRRVTZ5-BL2N&gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	914898
Entropy (8bit):	5.359172274889843
Encrypted:	false
SSDEEP:	24576:xPs9z787I1ysVkDc34airET3iubkaYcNWV/dWnFOqvIplzohhcgZS9jhyz9yeL05:Js9U7I1ysVkDc34airET3iubkaYcNWVB
MD5:	5C1CF7A9408FB79E414FC2A617F05B05
SHA1:	BC503BFD0591AA445E898EA4F7919902951EE19E
SHA-256:	2E92B5B7D2364D76E2ABC32C8958D3193778526C9117C32A873600ABF274ACE1
SHA-512:	5839BFA42CC08D39F3F860C5760EB60E29E8F07E4903475B938B730CE4E6446FF661FF9C65CAD8A73027CBD2047374751D297174030BDF7BE8F5BBE4E9FE0884
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/impl.20240418-18-RELEASE.js
Preview:	/! 20240418-18-RELEASE /..!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),function(){var win,doc;((e,t,r)=>{const i="trc_modal_hidden",o="trc_modal_mask",n="trc_modal_dialog",a="trc_close_modal",s=t.createElement("div"),l=t.createElement("div");let c,d="";function p(){u(l,i),u(s,i),r.dom.off(t,"keyup",m),r.dom.off(t,"click",g),r.dom.off(t.getElementById(a),"click",g),r.dom.off(e,"message",b)}function h(){u(l,o),u(l,i),u(s,n),u(s,i),w.appendChild(l),w.appendChild(s),t.body.appendChild(R),y(d),c=!0}const u=function(e,t){if(e.classList)return e.classList.add(t);r.dom.removeClass(e,t),e.className+=` ${t}`},m=e=>{const t=e.which\|\|e.keyCode;27===t&&p()},g=e=>{const t=e.target\|\|e.srcElement;t!==l&&t.id!==a\|\|(r.dom.stopEvent(e),p())},b=e=>{/http(s)?:\/\/www\.taboola\.com/.test(e.origin)&&e.data&&1025==+e.data&&p()},f=f

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (43834), with no line terminators
Category:	downloaded
Size (bytes):	43836
Entropy (8bit):	5.493721000305304
Encrypted:	false
SSDEEP:	768:zFTD9xK1hQTPf1PL+bvbKU4QPeEDm9uhpKwPRodf5l2xe67AlT3ue:oGx+bvbKXGmYaf5GUT3ue
MD5:	18C5A5EF85CA2FB30C40F2ADFBEDDF48
SHA1:	C9F2F95F640569CF0BF0A073478C2F0BF7CC47EC
SHA-256:	F1A2DAEDBC22CA041D75B4501FFE5AD51A747BE7150BA85B430781DE40623E03
SHA-512:	279FFA423839E33D8DDC15D2E8AC86910A1F4DA90838C39EEDC1CA84BCB4DD07B308C9873B64C97EDB03FE7896DFF9331F71C62CA501008EF711AA7221870C0B
Malicious:	false
Reputation:	low
URL:	https://aacdn.nagich.com/core/4.5.4/accessibility.js
Preview:	!function(e,t,i){class n{constructor(){if(this.instance)return this.instance;this.instance=e.a11y=this,e.version=this.version="4.5.4",this.GetDefaultProp(),this.SetPolyfills(),this.setNativePrototypes(),this.AssignConst("isDev",!1),this.AssignConst("SHOW_TIMEOUT",400),this.setConsts(),this.initWindowEvents(),e.Event=this.Event=this.GetDefaultProp("Event"),e.JSON=this.JSON=this.GetDefaultProp("JSON"),e.Function=this.Function=this.GetDefaultProp("Function"),1==e.nagishOnTop\|\|0==e.nagishOnTop?(this.AssignConst("nagishOnTop",e.nagishOnTop),this.init()):this.IsNagichOnTop().then((e=>{this.AssignConst("nagishOnTop",e)})).catch((e=>{INDlog("IsNagichOnTop failed ",e),this.AssignConst("nagishOnTop",!1)})).finally((()=>{this.init()}))}init(){if(e.isIframe=!e.forceBtnAppearance&&this.isIframe,this.isIframe&&this.addClass(i,"INDisIframe"),!this.IsSitekeyValid(e.sitekey))return!1;if(!this.isIframe){let e=document.body,t="indRatio";const i=()=>{e.dataset[t]=Math.trunc(100*window.devicePixelRatio)};i

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1461
Entropy (8bit):	6.7208619205274704
Encrypted:	false
SSDEEP:	24:2aTjH5UayHrg4NiL2uueqiIz0gqZFXogi8Xl/lC9:2Kj5UayLg4sLXueqi6xqbYgZK9
MD5:	0B75F9D407F7447C0EDF988DFF95C3A4
SHA1:	0CED9AB401855469D7A0E2E21B881D9FCBCC96EE
SHA-256:	C19BE565A18EA79B8B7A3D565C928E582E6AB2AF3A6B299477E91AF605544AB9
SHA-512:	B2BEB0E8A44F1A12C88C0D5216429F68878C7E9FF7A6B70F317313866FE044EA6886886FAE58251CD15033F35D7BA65591ED895BF69E156ADF45BF0B15F19DE1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...2.............PLTE.........UUU...fffUUUIII```UUUFFFNNNIIIDDDPPPKKKCCCMMMIIICCCJJJGGGEEEIIIFFFDDDBBBHHHFFFDDDGGGEEECCCAAAFFFDDDCCCAAADDDCCCAAAEEEBBBAAAEEECCCBBBAAADDDCCCBBBAAADDDCCCAAADDDBBBBBBAAACCCAAACCCBBBBBBAAAAAACCC@@@CCCAAACCCBBBAAA@@@BBBAAABBBBBB@@@BBBAAA@@@BBBAAABBBAAABBBAAAAAA@@@AAA@@@BBBAAAAAAAAA@@@BBBAAABBBAAABBBAAA@@@@@@AAAAAA@@@AAAAAA@@@AAA@@@AAAAAAAAAAAAAAAAAA@@@AAA@@@@@@@@@AAAAAAAAAAAA@@@@@@@@@AAAAAAAAA@@@AAA@@@@@@AAA@@@@@@AAA@@@@@@AAA@@@AAA@@@@@@AAAAAA@@@AAA@@@AAAAAA@@@AAAAAA@@@@@@AAAAAA@@@@@@AAAAAA@@@@@@AAAAAA@@@AAAAAA@@@@@@AAAAAA@@@@@@........tRNS........................... !"$%&'()+-./023456789:;<=?@BFGHKLMQRSTWXZ\]^_abdegijklnpqtuz{}........................................................................................F..=....IDATH..._Kq....6.J-!!.T...R.E)D.%..K.K.~)..K...n..e.^....KM;.....e....=...9.3...\....R...6..0v1...N._..M..z\|.i..Z...C....?.0qu......l..;...{. 4.r.....UX\|W..6g....`.&f...N.[q.4.....g.....r.......W....._...p!

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZiJt0-EedLilJRkb8yqXAxW4
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	4.6902383260460265
Encrypted:	false
SSDEEP:	96:JvfFOE8V1YCxeVPWFTSs/fuHjX4XoOSDFPW+Xq8Sb8u:5FOBVyceVu8ufuHjX5BuBxwu
MD5:	2ACF57F1D0A94C0EBC9AB8D3DE706E60
SHA1:	C0C07FE7C3AC5B1A78279F80E0E333E127935537
SHA-256:	B1435FC77250178012CF525B67312979EEB182B389FDAFB3496F0EC41DC3CA8C
SHA-512:	75EF07AC8906F39930E5F616AD2EC66BA6A98BBE78C78AA9E0D4CA5A3852CE411BA172DA588C6DF1566D1C921E7BEAA0D8758192CB612CDE56D469FCD4839361
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/4950761559091977241/img/copyOne_line1.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="728px" height="90px" viewBox="0 0 728 90" style="enable-background:new 0 0 728 90;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M192.08,10.2h1.69l2.45,9.17c0.14,0.47,0.27,0.95,0.4,1.46c0.13-0.45,0.31-1.03,0.41-1.46l2.47-9.17h2.05...l2.43,9.17c0.14,0.47,0.29,1.01,0.4,1.48c0.14-0.5,0.27-0.99,0.4-1.48l2.5-9.17h1.6l-3.42,12.6h-2l-2.5-9.44...c-0.14-0.56-0.31-1.12-0.45-1.67l-0.43,1.67l-2.56,9.44h-2.02L192.08,10.2z"/>..<path class="st0" d="M209.54,10.2h1.55v4.36v0.74c0.47-0.83,1.49-1.46,2.67-1.46c2,0,3.21,1.26,3.21,3.49v5.47h-1.55v-5.28...c0-1.64-0.56-2.47-1.96-2.47c-1.48,0-2.36,1.15-2.36,2.52v5.22h-1.55V10.2z"/>..<path class="st0" d="M218.05,20.42c0-1.67,1.33-2.47,2.88-2

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	3.73975580441777
Encrypted:	false
SSDEEP:	12:emfsH0FTFEpOLi4ksAHHXwTWckgmi4KsfdRsDtFTURXRGhzJm+HHu:emfm0FTFElFumzf6tFTjJm+u
MD5:	C545FC9FA7D524ADAE74A14295EF572F
SHA1:	B0600276C8356BDE4B722A481C80638D3512F035
SHA-256:	E2374F3CB224492D2A93636943FD68448410913278DD012E8A75AF9954D000DE
SHA-512:	FE1252B0B55005F48E5B3EA0D52A96E4696D7B71E47EEDF8DAF644AAA7D59D7FBB5A2629E6D1744809FD36C2DC3163EED9F0C64CD0CD6196EAD688869B96B803
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.justjared.com%2F
Preview:	[null,[[["107430338"],["21747486121"],["21854935662"],["22911927924"],["22939112713"],["22973718026"],["2507246"],["39694909"],["7103"],["75894933"],["94166617"],["114727145"],["170737076"],["183691092"],["21669242017"],["21676408940"],["22562447"],["51698323"],["68813383"],["90593245"],["92073293"]]],[[["107430338",1],["114727145",1],["170737076",1],["183691092",1],["21669242017",1],["21676408940",1],["21747486121",1],["21854935662",1],["22562447",1],["22911927924",1],["22939112713",1],["22973718026",1],["2507246",1],["39694909",1],["51698323",1],["68813383",1],["7103",0],["75894933",1],["90593245",1],["92073293",1],["94166617",1]]]]

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1786)
Category:	downloaded
Size (bytes):	1814
Entropy (8bit):	5.112693320289033
Encrypted:	false
SSDEEP:	48:P3mz6dc8pJTFOyXyk6axS9JaTF4GFvplrxDZWr3D7TdttYwrbSwr4f:PWzgJTFHXbpxSyjplhZWbTvtYwV8
MD5:	8F67E84733CAE50CCE31D7D6FF0A2F7C
SHA1:	AE79413D557CAD3070B6FC4379E810BAE0138DE7
SHA-256:	10994D9A08BC6036AF39A360C0A566543A1E572C1CE547DB8BFB7DD3A4A3A4C9
SHA-512:	12977E061557A7AA38646DB5F967E831B26AA1AD23B9985DD22BCEFA2E35ECF16A951C24321482F64405DD177CB6998088F4E23A6A84FB24FF29BAAD15BB90D6
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/spa-detector.20240418-18-RELEASE.es6.js
Preview:	/! 20240418-18-RELEASE /..(e=>{const t=/^(\/react)((\.\|-)(.)+)*\.js/;class r{constructor(e){this.trcManager=e}static getInstance(e){return r.instance\|\|(r.instance=new r(e)),r.instance}static detectSpa(){const e=r.detectAngular(),t=r.detectAngularJs(),n=r.detectReact(),a=r.detectVue();return{isSpa:t\|\|e\|\|n\|\|a,isAngularJs:t,isAngular:e,isReact:n,isVue:a}}sendSpaData(){if(!TRC.SpaDetector.dataSent){const e=r.detectSpa();this.sendGenericEvent(e)}}sendGenericEvent(e){if(!this.checkSessionAndUser())return;const t={data:JSON.stringify(e),type:"spa-measurements"};this.trcManager.sendEvent("pubs-generic",{d:JSON.stringify(t)},{}),TRC.SpaDetector.dataSent=!0}checkSessionAndUser(){const e=this.trcManager.response&&this.trcManager.response.trc?this.trcManager.response.trc["session-data"]:null;return TRC.pageManager.getUserId()&&this.trcManager.getSessionData(e)}static detectReact(){return!!(e.React\|\|document.querySelector("[data-react], [data-reactroot], [data-reactid]")\|\|r());function r(){const

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 18
Category:	downloaded
Size (bytes):	504
Entropy (8bit):	7.077396655327543
Encrypted:	false
SSDEEP:	12:23fKQXIO48nrZQR6Dio4GP9wTP81lOTtX:25JrZLDrLzstX
MD5:	35909DDC26EFD9E41E015EE251F0E037
SHA1:	DCDB3EAFEADC14B02092DDD1B172BEE5B883838E
SHA-256:	70772A7A36AB39E1F8CC319770A5EEA261D23326E087C878D390ECA09963D83B
SHA-512:	F32602964FA4E1A88F0397059BDEE64027C36D985848CCF74EE07804A1076C48573277BC9969913FF45FCF3D1C022323884A01234E2435EE094C6049696FEA0B
Malicious:	false
Reputation:	low
URL:	https://www.justjared.com/wp-content/themes/default/images/icon_morehere.gif
Preview:	GIF89aq...........l..j..C..q.....s........9........E.....;...................................................!.......,....q...... ""G..K..K.:p,........@.F0.(... d.l:..tJ..H&..r%h....+..H.8TB..eu~-.X[.7.w.se=?CHklI.q.PsTuYyz/}`...h..in.....R.wZ[]..b_7..g.jkm.......x.-..5.d...i..........+._.2........U...............#v....~....6qs...p..A.Cn.??.^..6...7..>..0......ud..'..u...ME.}.$fZWQA..M..QXj.G.1.M.Y.".....'.~..4b...\.....\P3R.U........*3.X.Vs.......9..MeV.&<..].l..}.7..)!..;

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2015 Getty Images], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	31318
Entropy (8bit):	7.956077221659759
Encrypted:	false
SSDEEP:	768:Aw27Gaw7PcJKJvU/QXbkBNz05Q3sa8IGeKv6l6:AG40M/QXQBNz0msa85eVl6
MD5:	F2DC96F66E24D5865E9450590FE88C1B
SHA1:	49A9AA92AF43A71D78F33AE6BDC8C67152CF3EF9
SHA-256:	513C439AC9BEB12711DFE418177B4C90A569A117F3FC3552C3609C51694349F1
SHA-512:	4565FD83C53F180F530D15B2B822CC45A95F4F64661CF1682093B6EC5FE8FEF94F2456E9C01884D63259B1C12F411CA83C8CA5109A033E9E60AF7350B281FD88
Malicious:	false
Reputation:	low
Preview:	.....6Exif..II*.......................2015 Getty Images.......Ducky.......F.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:94A83461FE1811EEB53CA38EE5B467C5" xmpMM:DocumentID="xmp.did:94A83462FE1811EEB53CA38EE5B467C5"> <dc:

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65240)
Category:	downloaded
Size (bytes):	71373
Entropy (8bit):	5.329383537472685
Encrypted:	false
SSDEEP:	1536:sg3WKq3YpgIXi7FpvAdgwseYJJKjgaDIwQpgkXgoL6I:1WNroiwseYfKjgPdpgkrLX
MD5:	E6D272F90FCDCE13431FB1EB1B5CFFC4
SHA1:	0FC263BFB85F532C8F77ACC20C80A2AE21ADA883
SHA-256:	E5118140A15E5DBB471F19C06816BCFA44170878BD8FE0ADE80C24B7A988D8BA
SHA-512:	70E1FC9DDC0680FA3E2BBA53BCCAEA61B988F2EF24E92868DE3B3480EA955939903252C88BA4DBA865914E97F581AF1C8BD1F788FB2F0CBAF85FBC70842FFE0D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/ads/studio/cached_libs/gsap_3.11.5_min.js
Preview:	/!. GSAP 3.11.5. * https://greensock.com. * . * @license Copyright 2023, GreenSock. All rights reserved.. * Subject to the terms at https://greensock.com/standard-license or for Club GreenSock members, the agreement issued with that membership.. * @author: Jack Doyle, jack@greensock.com. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(e){"use strict";function _inheritsLoose(t,e){t.prototype=Object.create(e.prototype),(t.prototype.constructor=t).__proto__=e}function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function r(t){return"string"==typeof t}function s(t){return"function"==typeof t}function t(t){return"number"==typeof t}function u(t){return void 0===t}function v(t){return"object"==typeof t}function w(t){return!1!==t}function x(){return"undefined"

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	4.8083108981550495
Encrypted:	false
SSDEEP:	6:qFzLIMQHXLxkGX16DVQ8ouqxdLaYwrtL1wVVIBq4QL:2ebxkC6DVU4dxhwVVI/QL
MD5:	34216F487875F43B5FDD24C077EEC1F2
SHA1:	7BD6074AB3AD7C8D0DD8FA084950795C01E2F49B
SHA-256:	DE259EB7BA7A0E45575DEB33946F1FBC695C97C33145AE4E49AF0069D010868E
SHA-512:	E7232AFDD23E356D93784E59ABE17E32FD968CB3F96D980E4B851186F87CEDDE7BD0E7E90838DFD7D1C156DA57DF25789041E3ECAFC5738DE8A0618384F73FC5
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dopenxpbs%26uid%3D%7BOPENX_ID%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>....</body>.</html>.

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1944), with no line terminators
Category:	downloaded
Size (bytes):	1944
Entropy (8bit):	5.1989176813159705
Encrypted:	false
SSDEEP:	48:kHRFqrG9KBpFxBficdYn6ckSPXrlM6mFat:eXYG9KBnxBHY6cDfK6mwt
MD5:	C3F5DCB0D3BE5347FC43586230331FEC
SHA1:	D57FCEDFF7ABB20F9D822A83B965A57AF9EE8007
SHA-256:	55A7AB31B5521C4FC8BA7F46BB7190A4A670D705CB58264288397B48078154DA
SHA-512:	A3D439D6EFB9DDBAAFFDB79A9E931F54847059FF95DA8A3FAAC2B7C173B90236F1A20F0AE96714284F36CCCDA287CEF6FA3E015DD8E4AD9457FB06B667842766
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fgdpr%3D0%26ex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1
Preview:	<html><head><title></title></head><body><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=0&gdpr_consent=&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale?gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://pm.w55c.net/ping_match.gif?ei=CASALE&rurl

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=gdomg51&google_gid=CAESEHL-oyR3gqIztWrW3nWmbjY&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 273 x 40, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	7.7069274315399845
Encrypted:	false
SSDEEP:	24:yHpfDiwFlHqdSxOiz8UA3+YF4UHC2vZBMCbXnoBe/GUm3gWpgAH1SKcMMOHcfLCY:yHpewFd3pOBmUHRiCbXn3OBgWpdHYKcb
MD5:	D9D306FF9FC9607E0DDCD4D206372784
SHA1:	ADAD3A8D7AD7DF435197EFABBB135C93A9291DEA
SHA-256:	645F2A9FE492E72B589090C521ABDCC569783985F06384F4BA1E1BDE2D3A7744
SHA-512:	772769FDA7EB13A3847D1D210A561728BA7A4D3BDD7E90F7EEF2A73D8495C0A161886E8B72EFFBE998C1F5E95F2A2969FB9F5E958F90FA078060E520871E89DE
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/images/player_sticker_bg.d9d306ff.png
Preview:	.PNG........IHDR.......(......H>m...3PLTE......................................................G....tRNS..."3DUfw.......P.......IDATh..Z..(... ....k{a..i..j.4..l.K\) $@..!w? ....../!....7......H.'%..."...x.<...qk.o]]..mU.\|......>.e.Sq..c#p......."..+....9%N...8.....`v-........&J..B......o.sf.....H.D.!OK.C...c...-"".D\.T.......D.evAD..%"..@k.D.k.SS..u...-'r..5.CD4.u.ZZKpjX............#PL.?......8.W".."..1e.KD.K..".... .....8\|."....2#..n<..1B.z-A....H.....I.......@..DD2J....[h..".#..."Rf..I.S\..^F........dP!.......&.P....)G...BE. bR...LDYr.j.. ..}.....".U......./.p."."..r{V.ID.)"`?.S.M.n....M.z..ZO,.W.oT7.AM...BN.@^.'...mH.P2.._).N..8.....u....p5.S.........".b.d....8.. k......h...Hj.....v..A.f.&....f..>6M.D.r.U..:^r....j......#iH...)"....9.<D..%;kTL.S.Z\|.1.'..N..4km..K...)[.....E{.......\|.!...o.?.......~c[[.&......b.g.W.rc..l......1-H..}C..).v.Po..7...4....^.,....DhG.e..u....Z.6.a....pV...E..W.....\|...w..81R'F*$.Q..p.7...A..I..35.^..S.i.'

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	224561
Entropy (8bit):	5.4296032477140335
Encrypted:	false
SSDEEP:	3072:uT/+LHZ1Uslda1XVl7zslU0uL6UEWp+f00m2VAxDK:uzaHZ1Usa1r7zslU0ia00m2VAQ
MD5:	91546647BFFBBD97C6398F9A4AB74C84
SHA1:	9FEB776A67F957590A001DAEEAAF2BB476E8F428
SHA-256:	A0D6BD4A8239D4A37D52AA4F0A393F663C900D2FD581B8242E8F47E602C143D3
SHA-512:	48922D7833C3A6DE41447E1875F6FF261E63846D7FE2BDAF7BAAB7337404ABE06A31396EFE799E4DFB7DC6E8B4552356A8D9C09FA9C225D77D09CF702A094C7C
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.player.e8375b72.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[69],[,function(e,t,r){"use strict";var n=r(36);t.a=n.a},function(e,t,r){"use strict";function n(){return(n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}r.d(t,"a",(function(){return n}))},function(e,t,r){e.exports=r(109)()},function(e,t,r){"use strict";function n(e,t){if(null==e)return{};var r,n,o={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0\|\|(o[r]=e[r]);return o}r.d(t,"a",(function(){return n}))},function(e,t,r){"use strict";t.a=function(e,t){if(!e)throw new Error("Invariant failed")}},function(e,t,r){"use strict";r.d(t,"a",(function(){return w})),r.d(t,"b",(function(){return A})),r.d(t,"d",(function(){return E})),r.d(t,"c",(function(){return m})),r.d(t,"f",(function(){return b})),r.d(t,"e",(function(){return h}));var n=r(2);function o(e){return"/"

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=12776
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16310
Entropy (8bit):	6.017521265133162
Encrypted:	false
SSDEEP:	384:RupP32EqlJPXBLW56fxWwZC9ASYki0wirrzN9QbLr:R5PxRLWcfC9ASM0P9QbLr
MD5:	C0B663FEA2E2E144FC6319387DF3BAE3
SHA1:	2D95115B62EB4AA709E204252E8C977A5E6666F6
SHA-256:	917CF69AF0B232EBFBE6DA44541104D1A3225BBEF1A6A3C71F12279D6438785A
SHA-512:	A4D0EBDAA16A77311672B31EE1DCF8D58E4E6DD665FE90685E84CFDC74CC0629A4495D34BEBD5EDDBB139FA69B17507C8B6739BF53CA0C46F4DE24D086AC0544
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202404150101&st=env
Preview:	{"sodar_query_id":"2G0iZsDtOZzB998P67S_yAI","injector_basename":"sodar2","bg_hash_basename":"tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs","bg_binary":"awIAnFKhZymy8SiC//5CKSQQZGLBalaWUc4bbZ+y/V+/PkJFTFg8FuhezFEWfli2Herd5d7PCMb6LdetyckHjjHfOIPms8BHhf8V7nYc1pa6jq6AKjiF3l6eEQSwwKHMrZlh1d9aPcPmMlVSjMpJpQNPwztNe+Rkq/zwggMQnbMCa/Kqz9Ybe4sd++9KHabyq0Lpt23k/dE8AKnf3+FJd17/2QSQpIqM0YhuqzErZq2g6U5V1gYSpWTPxuJRC/ec0VLJVfSmALsnPyx7lOATMtsEHAlTt//mfVFOpgQ3xuvbsxBngUga9izvHCUHuPasQJqUewIA5nDGhy+/geNc9bmxqv7zp6r8zHtG12KeJp60oFePyFQuwOvPfv4lGEqvtQvyOlFbNmct2CsWQaCDdPvotuPC4a6mbadfut6+YpXrFgaA+8WyWnqxVHiUkbUt5vPW4eIedIcx8gh0Lo/tlyYmgJkcrFZi73yrLBPEc/HjTELX6d3p9nieZ44isI3USgIC5sVjSx05I2l/co4v3DfCuKzRiR0Op3w4nreFjwtarAG/tzx/DaoSzs47qVAdvTIiu+9A6sBZh+1nq06/BJx49PuQwTOMkW/y7hU5EWA0zxkVcV5TcVHdbvPCoeoECbI24Ydv03BDnQrWDtkfLz9jiW2vUhhQOCi1N4Q8ktd53Sj4CaqUrYLibkPosV83WHDnfCoo90iD4ULbCVfFPT+KKOLVdrC1PdLH/tB9LgA7BYelsGYGmBnAoXAAPWsA9kZgFwzInPpPC7Zj9lvlJ67wlpM99U0SP1cY23q31UdsVEpoHzuVLjWaIu9KVWcmgYEtgP0pcekvG50se

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	297104
Entropy (8bit):	5.415038105109106
Encrypted:	false
SSDEEP:	6144:cH0k7GklUkGP2py5c9D/Y8R8Cncy47dx6rSFt:cKpsD/dR88cp7aGFt
MD5:	E72CD892F03B4FEA81409E86C67EA14F
SHA1:	9332ED2C1D6616436F12AC363225C8FF9403FD8E
SHA-256:	D0ED76584B7DB621DA391E1943556889F5AEC22AC0D93495E00AE74AF9A0103E
SHA-512:	4EF57F842DC0F160E1DDF8E6AC18DEA5B70A7E068677D48F97C89A9A24B1CA320B50BFE8D49BBC745FB4C8CD9603DCBBD2C9A106B6A729F25324E595CE9A1513
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/a/hls.1.5.7.2.js
Preview:	(()=>{var __webpack_modules__={9182:module=>{!function e(t){var i;i=function(){"use strict";function r(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,i)}return r}function i(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{};t%2?r(Object(i),!0).forEach((function(t){var r,n,s;r=e,n=t,s=i[t],(n=a(n))in r?Object.defineProperty(r,n,{value:s,enumerable:!0,configurable:!0,writable:!0}):r[n]=s})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(i)):r(Object(i)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(i,t))}))}return e}function a(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var i=r.call(e,"string");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a prim

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-ArZeLQLuOEd4YF2alZuoRhjI75E83D9CUPk8D2jAZCw-2TJzbspCMR7n0V4RpXXUuP7-NPItrbhCJkDhyugBdbV2yWqGBT6yu6I1R5OKKutB2Wwds
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	4.973645258573587
Encrypted:	false
SSDEEP:	12:YGKPoPx/mWPoPx/44GdxaNmdLPguPjRaWJmOvvsZwymm:YdQxexgbGNMLb7MWwOvlyX
MD5:	B76F14D73F05EA3375A488A4FEF76411
SHA1:	A31980B4BED5772A789703DF3D66BEEC88F78969
SHA-256:	A571A592621DC7EB131444BB57C225FD0985163DBBC8002F1892FBC306F914DC
SHA-512:	7C7651C7E708FCD6D0E908246182E1E242F6E0CA649DC681279E502F547093573DE25797153EA6ECC66ED41C5D79C5E21FCD1888D2A30272A4EAD7A64D458263
Malicious:	false
Reputation:	low
URL:	https://ids.cdnwidget.com/c?cookieID=&deviceID=&iv=&v=&GCH1=&SCH1=&GCS1=162081182&GCS2=MGVlMTdkOTYtNmI1Ny00N2QzLTk0OTQtZjJlNzBiZDE4YTE0LmxvY2Fs&pe=false&wsid=3479&varID=&varData=undefined&log=%7B%22config%22%3A%7B%22gmEN%22%3Afalse%2C%22pixEN%22%3Atrue%7D%2C%22apikey%22%3A%222%5EHIykD%22%2C%22cjsversion%22%3A%221.5.9%22%2C%22wsid%22%3A3479%2C%22loadID%22%3A%22Ke21BBgrDABPtKX%22%2C%22timing%22%3A%7B%22sessionStorageLoad%22%3A5%2C%22IDStageStart%22%3A5%2C%22obsReqpage%22%3A502%2C%22obsReqdata%22%3A503%2C%22netComplete%22%3A517%2C%22obsReqview%22%3A531%2C%22IDStagePrefire%22%3A532%7D%2C%22matches%22%3A%7B%22cookie%22%3Afalse%2C%22LS%22%3Afalse%7D%2C%22info%22%3A%7B%22isSpoofed%22%3Afalse%2C%22PM%22%3Afalse%2C%22DNT%22%3Afalse%2C%22deviceTimezone%22%3A2%2C%22extensionID%22%3Anull%2C%22externalID%22%3Anull%2C%22agent%22%3A%7B%22device%22%3Anull%7D%2C%22firstLoad%22%3Atrue%7D%2C%22deviceid%22%3A%223047150615075533353%22%2C%22visitid%22%3A%221713532398281346%22%7D
Preview:	{"cookieID":"2fJwHbKyssTzSyucBH1ZAvigaGa","deviceID":"2fJwHZyn7gvyVqvMbytKoWyu4PY","masterIDs":{"cookieID":"2fJwHbKyssTzSyucBH1ZAvigaGa","deviceID":"2fJwHZyn7gvyVqvMbytKoWyu4PY","iv":"","v":""},"info":{"country":"United States","continent":"NA","inTwoTimezones":true,"agent":{"family":"Chrome","major":"117","minor":"0","device":{"family":"","major":"","minor":""},"os":{"family":"Windows","major":"10","minor":"0"}},"optOut":"","optOutNAI":false}}

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	869
Entropy (8bit):	5.189342533469963
Encrypted:	false
SSDEEP:	24:YmUXpUsVgRyqudSz4c97QwLIx0G9xhwNy24c:YmUZUsq40Ml0iEPD
MD5:	92FEF17C842DA0D221A28D385E1CEB51
SHA1:	06E56EBFC7025316CB039391867A8D2349F9895B
SHA-256:	31C4915E660F957BBD5D22C8E4B64B92CEC4B62BFAA88A53434793BD74C8E97D
SHA-512:	3F0F73AAF6DA4D05894CFCA4FF6D1D644CBD02C8633C77BA8442325296CDD067CA1DF26EF8770434FB6016EE84C6C7B7B6E3B6A053B565A0F702B89A67A4508A
Malicious:	false
Reputation:	low
Preview:	{"at":{"mw":250,"ce":[".cnxpl-vpaid-container","#hot_stories_slider",".like-this","#side1",".css-7qo7u5",".connatix","#sidebar",".zergmod","#rc-widget-4ced13",".thumbnail"],"ref":{"max":5,"int":30},"mh":200,"ps":true,"tr":0.4,"of":false,"inImagePrefetch":true},"pxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":"u_bd73a985-3ef7-4416-a679-3a9309181613","lotame":true,"bluekaiIdSwap":true,"cis130":["7","8","19","34","41","42","68","74","75","76","97","100","102","103","126"],"labels":"Entertainment.jstjared._justjared_com","visitorId":"u_bd73a985-3ef7-4416-a679-3a9309181613"},"ads":{"coverage":1},"pag":{"t":"jstjared","pu":"https://www.justjared.com/","pvid":"bfa2ad2c-bffb-47f7-9263-15a6cc919199","css":"/ Below Image Test */\n@media (max-width: 667px) {\n .lead-img img {\n padding-bottom: 35px;\n }\n}"}}

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20144
Entropy (8bit):	5.262863002441103
Encrypted:	false
SSDEEP:	384:JQWjHvtG+XtUGbBrmj6VpDjC/1X+XtQI8dR8H/jiyIwNG0sFjRmIpaP16Ihj0Zxy:jkY1r4XqFw5FjRbaP16uYxy
MD5:	AB52FEAC105B77E4866FF3A1B52552E7
SHA1:	9A775C0C8F94D0CF1176B39ABDC8B0B885B049CB
SHA-256:	2144A917ADE30445CED0950DEAA6311394AB4D25114FA1D661A517A238917C1B
SHA-512:	56AC9FFE7D4FFE2474AFC00BCE41B7701AD239C179B0F388F01623C441B3D1C772B7FCE69ACA4EC241F480ED5166DCDF3E35289BA724722FC44A62EEC4E701EE
Malicious:	false
Reputation:	low
Preview:	{"propertyId":7443,"propertyPriorityData":{"stage_message_limit":1,"site_id":7443,"public_campaign_type_priority":[1,5],"multi_campaign_enabled":true,"stage_campaign_type_priority":[],"public_message_limit":2},"campaigns":[{"type":"GDPR","message":{"message_json":{"message_json_string":"{\"type\":\"Notice\",\"name\":\"Desktop Interstitial\",\"settings\":{\"showClose\":false,\"useBrowserDefault\":true,\"width\":{\"type\":\"px\",\"value\":600},\"border\":{\"borderWidth\":1,\"borderColor\":\"#ffffff\",\"borderTopLeftRadius\":0,\"borderTopRightRadius\":0,\"borderBottomLeftRadius\":0,\"borderBottomRightRadius\":0,\"borderStyle\":\"solid\"},\"defaultLanguage\":\"EN\",\"selectedLanguage\":\"EN\",\"padding\":{\"paddingLeft\":10,\"paddingRight\":10,\"paddingTop\":10,\"paddingBottom\":10},\"languages\":{\"EN\":{\"iframeTitle\":\"<p>SP Consent Message</p>\"}},\"iframeTitle\":\"<p>SP Consent Message</p>\",\"selected_privacy_manager\":{\"type\":12,\"data\":{\"button_text\":\"1626118152154\",\"priva

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321)
Category:	downloaded
Size (bytes):	12849
Entropy (8bit):	4.94157158244279
Encrypted:	false
SSDEEP:	384:b4WxiaCudPTdPPu5Yu55o2jo2wBm8Yij9r:bLCGB/jd
MD5:	C0AD5BCEB34DC473809DD23603A31CEC
SHA1:	03B37A465EFC809B908807497C8DFBD509BCDDA9
SHA-256:	07378CB9079FE865C12DA0F27EFFD6163ADAE9CE1EF5E177A527E35B9F093B12
SHA-512:	8A2A127FA336CCC3DAAB7E15F56A32CAED60B489CB138BAD8AD58FFDDDA855BE95D2B3CCE0699C85BF6B140EAA67B8545DFCEF18A8AD075FD716F2E6B0A944A5
Malicious:	false
Reputation:	low
URL:	https://cdn.undertone.com/js/usersync.html?partnerid=59&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dundertonenew%26userId%3D%24%7BUIDENC%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D%26us_privacy%3D%24%7Bus_privacy%7D
Preview:	<html>.<body>..<script type="text/javascript">..function getParameterByName(name, url) {...var url = window.location.href;...var name = name.replace(/[\[\]]/g, '\\$&');...var regex = new RegExp('[?&]' + name + '(=([^&#])\|&\|#\|$)'),....results = regex.exec(url);...if (!results) return null;...if (!results[2]) return '';...return decodeURIComponent(results[2].replace(/\+/g, ' '));..}..function updateUrlParameter(uri, key, value) {.. var i = uri.indexOf('#');.. var hash = i === -1 ? '' : uri.substr(i);.. uri = i === -1 ? uri : uri.substr(0, i);.... var re = new RegExp("([?&])" + key + "=.?(&\|$)", "i");.. var separator = uri.indexOf('?') !== -1 ? "&" : "?";.. if (uri.match(re)) {.. uri = uri.replace(re, '$1' + key + "=" + value + '$2');.. } else {.. uri = uri + separator + key + "=" + value;.. }.. return uri + hash;..}... var gdpr = getParameterByName("gdpr") \|\| null;. var gdprStr = getParameterByName("gdprstr") \|\| getParameterByName("g

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	149
Entropy (8bit):	4.72769442398306
Encrypted:	false
SSDEEP:	3:YIpW+5DQJtl/kH1cKBDQJ4PDGcJHTfQ2pHG/EVfHHpTlbKHY:YII+dctdkVcKBDcoy4k2pH9PpThp
MD5:	7C190E1AF98622C9C1C9E941B645DA69
SHA1:	BCDEC66BE5418B50303D1A409E2252AAA5361226
SHA-256:	DB9EF9D284931BEA064F7F8BE940DBA03820379E135A67462A440BE72D825098
SHA-512:	554D9408A7ECEC86740676C73E8854BC08EFE8ADD560FB4373444EE6B079B05FE6FA7271A8A47B8430E477A16A8350DE5A0556CF465633A288E148BFB3791B2F
Malicious:	false
Reputation:	low
Preview:	{"merchant_domains":[],"guid":null,"consent":null,"csp":null,"sessid":null,"ts":1713532349,"country":"US","country_state":"GA","bv":"4.4.0-f43c31fd"}

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:X:X
MD5:	C81E728D9D4C2F636F067F89CC14862C
SHA1:	DA4B9237BACCCDF19C0760CAB7AEC4A8359010B0
SHA-256:	D4735E3A265E16EEE03F59718B9B5D03019C07D8B6C51F90DA3A666EEC13AB35
SHA-512:	40B244112641DD78DD4F93B6C9190DD46E0099194D5A44257B7EFAD6EF9FF4683DA1EDA0244448CB343AA688F5D3EFD7314DAFE580AC0BCBF115AECA9E8DC114
Malicious:	false
Reputation:	low
URL:	https://c0.eu-4-id5-sync.com/
Preview:	2

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4354802838
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1729343571&external_user_id=ddb37c3d-7862-43a9-8061-ddaca97c3bfa
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	50051
Entropy (8bit):	7.98170014199728
Encrypted:	false
SSDEEP:	1536:B7aYT0UAuWx6QRhWDXkZw6C5LCVIf6+XIoN:xtT5AuWMQ3uswhpCKR
MD5:	1053F2BDB16FFB70D5CBB74AE53388B4
SHA1:	267B3A3CCC5767CA686659E7FB84F36F6FAC76B2
SHA-256:	C8F45270C96213376F196DAD1AE8BC5525266348F7896187A298B91B16D166FB
SHA-512:	AEC4BB38E25DFCD8AE76D040B6152DCD99A63083446705551D41B8EDCB042FD29F9FCEBCB623845231F83514F16372CE7E937A71D16CDF527E6094D0C8FCDF3B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:8A88044AFE0D11EEBF26F6A27ADCF907" xmpMM:DocumentID="xmp.did:8A88044BFE0D11EEBF26F6A27ADCF907"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8A880448FE0D11EEBF26F6A27ADCF907" stRef:documentID="xmp.did:8A880449FE0D11EEBF26F6A27ADCF907"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=2699957044
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25177)
Category:	downloaded
Size (bytes):	41711
Entropy (8bit):	5.378217167580898
Encrypted:	false
SSDEEP:	768:hf8/g/Nl/s/sgs1Rfo0b2FwYLAdYKriRzCsvFvCuQ:hfUoNlCs00xfrDuCuQ
MD5:	D495A1BEF9D7884CDBEACB176F348E91
SHA1:	E3E448386CDE3FDCE831773E9402ACF2F8C264F8
SHA-256:	3339092D85E1664461A0091A96F0C0F5F95F01F7642379C44C51B1270E13E176
SHA-512:	DF5CA8A2DD1BC7D9A36C413C43F5D69109C4DAD3BBB63B5D9E3EC810E0DA40DA1B85FC20E195781FF717110EF1E6BBEF2DC2F8CA8BD796BD0BFC59BD8044BBAF
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-04-18 11:09:43 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63670
Entropy (8bit):	5.950203519789365
Encrypted:	false
SSDEEP:	768:g8UQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtIFPR2kTtWhrJT/TruEKgt0w08be971u:ntR3Q2N7ruJYvyFTwAVhKC5xjkhiXY
MD5:	ACA0F66CC956B611D8008DBBFAC2CD1A
SHA1:	6ECC9F9FAB8A1F86E08CC3F187C1C683A68DADBF
SHA-256:	7BEF3BF369A25F1C6EECC82A3A36F11D114BE2D000B85AB349F910655858AB91
SHA-512:	77C26506952A8A2B05282D8DABFAD539470697F571743CD46145353C3416D18A76910B6EB387F67E25E12E0862F8C61B01A1A76B48754B530FC1CCF648A4D263
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3310372320495227&correlator=1921322138726702&eid=31079956%2C31082852%2C31082859%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&didk=570410215&sfv=1-0-40&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532373672&lmt=1713532373&adxs=309&adys=1231&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=1&ucis=emlo9kwgzbx5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=336x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1626008654&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532359339&idt=13739&prev_scp=tg%3D4%26shb%3D1%26it%3Dil&adks=737501260&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_5":["html",0,null,null,0,250,300,0,0,null,null,null,1,null,[138471003221],[5747548770],[5046746103],[2884915608],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslJ4_VH4GAYdE50BmGJHShkvYOYmzcp5o8Cft5LTk-ZNeKwNgyt-dXjd9g14clEUWJJoqhVDTVS2a_h","CIvrrMStzoUDFcD1KAUdgsUNsg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"emlo9kwgzbx5",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOLteWm3G757K13YneOsMH2cIib7awGMafLnH9jOtlz6u8S_nm09Y7wOTGfo6OFczyc5h9Pnuh_QTkF",null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240417';</script><script>var google_casm=[];</script><style>a { color: #000000 }</style><script>function su(id) {var a = document.getElementById(id);var b = (new Date()).getTime();if (a && a.myt && b) {var t = b - a.myt;if (window.css) {css(id,'clkt',t);return;}var bi = a.href.indexOf("&clkt=");if (bi > 0) {var c = a.href.substring(0, bi+6);

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39773), with no line terminators
Category:	downloaded
Size (bytes):	39773
Entropy (8bit):	5.402135522543525
Encrypted:	false
SSDEEP:	768:BdcaV/pfglt/tP5tDaSucFXX9i4sLd6clC:BWaV/M/t/h9i4sh6wC
MD5:	0F107A0E7753AA69CD07DED21852408C
SHA1:	CB933D8A2AD54DC5538C4D0C5EE4C2D3BE77484C
SHA-256:	FF15AC47504BB557006756AABA7DC0EADCF935F9633390F379405085D9F85DE8
SHA-512:	0122AD67A455A6715F3F3B874C6F2C5A509C9E8055E66EE44B296E28AAE50A3826D22F1B2D70F050A2785ACBB80A50770312B8B801585F7FBD2EFFD203ABF983
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16576/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16576_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16576_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16576_a(a)}}var sync16576_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16576_c; if("function"==typeof Object.setPrototypeOf)sync16576_c=Object.setPrototypeOf;else{var sync16576_d;a:{var sync16576_ba={Sa:!0}

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63
Entropy (8bit):	4.437697090806409
Encrypted:	false
SSDEEP:	3:YxhACNN7kYCiNQDxP9FxUPBn:YndkYCiNQtP7uPBn
MD5:	26D3009C8337345B6542DF8CABC56FFD
SHA1:	9D77122426ABFB73382D46D78CBA2C020C5A1BDE
SHA-256:	FFC7F23C8C1043B9605072B745B0F51E88B10952D4DC446AD64E0C8B4694E4B1
SHA-512:	513F2C63E753CAB27EE63DA172E976B212D84E90C0E268F186F3E82EF1D9DBA5713B038BE6EB4F39D9B1206255ABC4AF1676370BB59CE573306C563DEF85DCC7
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=qvrl0w8&fmt=json
Preview:	{"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:41"}

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	759
Entropy (8bit):	5.117431674983375
Encrypted:	false
SSDEEP:	12:YfIFUXphikPVxAfRZfQqt8dSzGX/AJKRLNUJ3h0I9vhwRyUm5YD2zARvU:YmUXpUsVgRyqudSz4UkLIx02hwcDS24c
MD5:	45254B2D25D61E53EC658AA3EE3408EF
SHA1:	71E3A88579EB2A97E1D6BC7D0AAD2563EE138ADF
SHA-256:	3EAD3436A527BD0011F6D9CBE1C6B74BB9A24491B8526975FDF240559E4CF21E
SHA-512:	9F770C5DE0888A6C80063F92B4F245D6266CF7CBF5AE8CB2C1AFA7CF7FFA76B127BEF4F65B532F7EBEE5238E04D30001606F8AB9550FDA5A1EE0BF19BF573408
Malicious:	false
Reputation:	low
URL:	https://g2.gumgum.com/zones/jstjared/services?dp=https%3A%2F%2Fwww.justjared.com%2F&pu=https%3A%2F%2Fwww.justjared.com%2F&ogu=https%3A%2F%2Fwww.justjared.com&rf=&r=3.88.29&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=10240&bf=f42f33720e241642e593da0d840ca6c8d6073588&ce=true&fs=false&dpr=1&sch=1024&scw=1280&lt=1713532349547&to=-120&vpii=false&vph=907&vpw=1280
Preview:	{"at":{"mw":250,"ce":[".cnxpl-vpaid-container","#hot_stories_slider",".like-this","#side1",".css-7qo7u5",".connatix","#sidebar",".zergmod","#rc-widget-4ced13",".thumbnail"],"ref":{"max":5,"int":30},"mh":200,"ps":true,"tr":0.4,"of":false,"inImagePrefetch":true},"pxs":{"qac":"p-00TsOkvHvnsZU","liveramp":true,"quantcast":true,"exelate":true,"partner_uuid":null,"lotame":true,"cis130":["7","8","19","34","41","42","68","74","75","76","97","100","102","103","126"],"labels":"Entertainment.jstjared._justjared_com"},"ads":{"coverage":1},"pag":{"t":"jstjared","pu":"https://www.justjared.com/","pvid":"68ab9643-cd36-4b2c-ab6d-2b900dbdb245","css":"/ Below Image Test */\n@media (max-width: 667px) {\n .lead-img img {\n padding-bottom: 35px;\n }\n}"}}

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1597
Entropy (8bit):	4.552701728763297
Encrypted:	false
SSDEEP:	48:YXPk7ASgiwcmyZqNnVqIaWDmNzgUXRMHt:+k7g3yUKWKN8UXRy
MD5:	02AF2266B85541272F1EA3D0517691E4
SHA1:	1FBAFF3001A0956DF9A6B17660029DB7B540FC14
SHA-256:	6765A7BD3FA6E2945F7C22C0FB58C209F7229C84081E5155CCBF646DBF6C3FA9
SHA-512:	A8292DD1825576EA58B1AA4D551CDCDE273F540AAEDD2F3302ECEF4E324BB155A1E95A2371E30F5237D692D29BEA1964D965DE7EF22533B16B3AB95E611A2C02
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240419
Preview:	{"dataAsOf":"2024-04-18T00:00:00.000Z","generatedAt":"2024-04-18T16:00:35.398Z","conversions":{"USD":{"USD":1,"JPY":154.340294035022,"BGN":1.8314448918438055,"CZK":23.648281674314074,"DKK":6.987171083434778,"GBP":0.8018353778443674,"HUF":368.8828541998314,"PLN":4.050472890720105,"RON":4.659425039797733,"SEK":10.897087742297968,"CHF":0.9086993164153947,"ISK":140.74351531042234,"NOK":10.991197677685177,"TRY":32.49695664388051,"AUD":1.5513624871242626,"BRL":5.241408371570371,"CAD":1.3753160408277927,"CNY":7.237943627680494,"HKD":7.831725817024066,"IDR":16181.000093641724,"ILS":3.7796610169491522,"INR":83.51718325685925,"KRW":1374.1080625526733,"MXN":16.943534038767673,"MYR":4.783500327746043,"NZD":1.6867684240097385,"PHP":57.240378312576084,"SGD":1.359677872459968,"THB":36.755314167993255,"ZAR":19.052439366981925,"EUR":0.9364172675344132},"GBP":{"USD":1.2471387863782875,"JPY":192.48376699210536,"BGN":2.2840659597327977,"CZK":29.492689307235953,"DKK":8.713972065212314,"GBP":1,"HUF":460.048

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	45695
Entropy (8bit):	5.995257532504599
Encrypted:	false
SSDEEP:	768:3Q+AC7+Clpxixm7VaHkuoa9tqIv8CxtNvTUVgOjonVCzlxV+OioHZSomRzzII+dx:UR3JoV9eC5xV4WZSXS
MD5:	EB6B8580F29A4DCCAA3F0BEE4E761200
SHA1:	FA25C257582C8B016033F1D39ACA40E8B5BB7204
SHA-256:	34CC1F3C3A98F1BDE118C65B39DEBC4DB992C875CB41D842796E0FB76370F356
SHA-512:	3693AB83B0F838A91A1C48DB3778F2C55CF2DC1B18E62975C10F21311EF8324EF347DF0EDE9236A93DA10D5E7142BDD7444B9FBDC74713C4A0A04DFE8B6E1F84
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1528228483345781&correlator=124554708504470&eid=44809527%2C31081518%2C95330210%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_3&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=2&didk=570410213&sfv=1-0-40&rcs=1&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532392767&lmt=1713532392&adxs=820&adys=579&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=tw3qlj9kv5i5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=300x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1842863151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356335&idt=16616&prev_scp=tg%3D4%26shb%3D1%26it%3Dtbr%26aid%3Def35eae2-a88b-4025-9739-e751240e3e33%26ib%3Dadagio%26iaid%3D76decc856284e83%26iba%3D00004%26at%3D1%26h%3D13%26ics%3D300x250%26axa%3D0.04%26axa_on%3D1%26auto_refresh_counter%3D1&adks=1494241348&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/2507246/justjared.com_Web_300x250_3":["html",1,null,null,1,1,1,0,0,null,null,null,1,null,[138455758152],[6421202393],[5046746103],[3273481138],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsl8Q6G_M_97BLOovkbIJ83bQRWqlA-xSoU3LXmzLzG3RvxnHuQggTl4kDKviSa1MSP93CqK83hPxRXU","CJHktM2tzoUDFewuigMdUjoIrA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"tw3qlj9kv5i5",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4836
Entropy (8bit):	4.530923296053844
Encrypted:	false
SSDEEP:	96:6KqqGpEya0TAEy+swod+8ZDl2nAQMOLzA4M46RdsM5Bv:6rqkEqPVswodXtl2AQMOLzlnKsMz
MD5:	3808DCDEF3D73ED2362B991CD4C48328
SHA1:	BAA7566396003B08FF393D1DCF73109AEFE2B343
SHA-256:	EDFCC75A8ECC807ACCD8EBC2099BBA54EAF2F21E6D55EACAADD9575FC145D64D
SHA-512:	CECBCD086A9CB45B1BCD7DE9C00C2EA9493BC16FB85E661E3A0B6EE51E6B6634D7E91E20CDF6B8639BD4D9DDE8C6254AC4C3B0A09067274DCFF89DD55A82A7C4
Malicious:	false
Reputation:	low
URL:	https://everest.castbox.fm/data/episodes/overview?cids=3921236&web=1&m=20240419&n=667accfeb78aeb12da97930e8573ee61&r=1
Preview:	{"msg": "OK", "code": 0, "data": [{"latest_eid": 567018231, "sort_by": "default", "sort_order": 0, "episode_list": [{"release_date": "2023-01-31T01:50:03Z", "eid": 567018231}, {"release_date": "2023-01-17T01:16:35Z", "eid": 564032508}, {"release_date": "2022-12-07T04:30:00Z", "eid": 553681366}, {"release_date": "2022-11-15T04:30:00Z", "eid": 548039517}, {"release_date": "2022-11-01T20:29:15Z", "eid": 544843609}, {"release_date": "2022-11-01T03:30:00Z", "eid": 544583019}, {"release_date": "2022-10-25T03:22:30Z", "eid": 542830300}, {"release_date": "2022-10-03T23:14:26Z", "eid": 537719976}, {"release_date": "2022-09-24T03:29:38Z", "eid": 532957961}, {"release_date": "2022-09-07T03:30:00Z", "eid": 528241106}, {"release_date": "2022-08-17T03:27:44Z", "eid": 522708940}, {"release_date": "2022-08-02T03:30:00Z", "eid": 518691930}, {"release_date": "2022-07-19T03:30:00Z", "eid": 514502604}, {"release_date": "2022-07-13T03:30:00Z", "eid": 512792695}, {"release_date": "2022-06-14T03:30:00Z", "ei

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (429)
Category:	downloaded
Size (bytes):	5147
Entropy (8bit):	5.319128004039344
Encrypted:	false
SSDEEP:	96:HvTSqmQC7PSRmPV/xSqmEi/xSqmEzSqmqmGNoSqmeAT/qzSqmRboxCGwSqmgDOSU:rSqmQwPSRmPV/xSqmEi/xSqmEzSqmqmH
MD5:	FE739B53C1345622D361966D4613ED8E
SHA1:	8F6F1F3C43D14BF54ABD1B1F9B4969571B13CC8D
SHA-256:	9DFAF96D26DA6E55828A22CB698D1C642F6714CC983A68CB6D4F1B9BD6B60990
SHA-512:	64F27FA23B3ED47BD7A9A2F2EDFCAE60F766C1D5776F4359E3C9BD508D6311D6C0EC07BDEF3FAAE99A0371583E7FA423E669CC821E0CF7655D685FAFD290E4AF
Malicious:	false
Reputation:	low
URL:	https://syncaps.cootlogix.com/api/user/html/65354ca311421d643073bbdb?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dvidazoo.com%26id%3D%24%7BvdzUserSyncMacro%7D&gdpr=0
Preview:	<html>.<head><title>Pixels</title></head>.<body>. <img src="https://s.amazon-adsystem.com/ecm3?ex=vidazoo.com&id=a2cfff08-e3a1-d49f-dccd-86df76cdf804">. <img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent=" width="1px" height="1px" style="display: none" />.<iframe src="https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D%26partnerId%3Dsundaysky%26userId%3D%24%7Bssky_uuid%7D" scrolling="no" marginheight="0" marginwidth="0" frameborder="0" width="1px" height="1px" style="display: none" ></iframe>.<iframe src="https://sync.kueezrtb.com/api/user/html/62ce79e7dd15099534ae5e04?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dkueez%26userId%3D%24%7BvdzUserSyncM

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.540555438036487
Encrypted:	false
SSDEEP:	3:YIzXl0fkvPL7exaLjJp2ERh2in:YIjl0cXnexSJp2Eein
MD5:	473E4B36E07048E5F44049958A0C1A5C
SHA1:	5C43C070CD58696BD5AA867849993FD54A2F7DCB
SHA-256:	519864B1E7D420ABFEC7EEA36517261F18642D186F7B1BEEC183FC93BC533CCF
SHA-512:	BD7047F0BA2E646D623EDDA72EDBF3393CB88C362CA81443189DDEA7B72C474461554FCFF837D13B9969E7B2184BC778C601837EC31DB73DBA72AF2F2EE70391
Malicious:	false
Reputation:	low
Preview:	{"message":"Route GET:/v1/openrtb not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	233193
Entropy (8bit):	5.430182868818706
Encrypted:	false
SSDEEP:	6144:i63EdYENTdrCNMq+r66bGbguop96FzocVfH2r+F259:i63EdYENTdrCNR+r66Cbguo0ocV/m
MD5:	ABA5645111DD0AF79BEE8F032245088D
SHA1:	FD438C173550629646F808156C5E92D007148695
SHA-256:	7E391CAC47DC8464D04C54E29019FD5489F800716597FDA2EB862B11DA6CDE64
SHA-512:	C33743AF12586814B78EAF6E6A5C1557F49A774EB57EB4F332C67157301BFA76EEB7BEF004341A88163ADC83F95D17900F4FD32715980BF4AB5378E3EB37470D
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/js/page.playerpage.89c87f35.js
Preview:	(window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[70,2,11],{1031:function(e,t,n){"use strict";var r=n(9),i=n(10),o=n(19),a=n(17),s=n(18),c=n(54),u=(n(935),n(0)),l=n.n(u),p=(n(936),n(53)),d=n(872),f=n(828),h=n(747),m=n(303),v=n.n(m),g=n(299),b=n.n(g),y=n(289),j=n.n(y),w=n(286),O=n.n(w),x=n(295),k=n.n(x),I=n(287),M=n.n(I),E=n(288),N=n.n(E),S=n(3),T=n.n(S),L=n(352);d.a.Range=f.a,d.a.Handle=h.a,d.a.createSliderWithTooltip=function(e){var t,n;return n=t=function(t){function n(){var e,t,r,i;O()(this,n);for(var o=arguments.length,a=Array(o),s=0;s<o;s++)a[s]=arguments[s];return t=r=M()(this,(e=n.__proto__\|\|Object.getPrototypeOf(n)).call.apply(e,[this].concat(a))),r.state={visibles:{}},r.handleTooltipVisibleChange=function(e,t){r.setState((function(n){return{visibles:j()({},n.visibles,b()({},e,t))}}))},r.handleWithTooltip=function(e){var t=e.value,n=e.dragging,i=e.index,o=e.disabled,a=v()(e,["value","dragging","index","disabled"]),s=r.props,c=s.tipFormatter,u=s.ti

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1017
Entropy (8bit):	4.611323150068041
Encrypted:	false
SSDEEP:	24:tjLIgsJcDCravjCNrxG8bpC49q0XkEobErU+v+mSD0iTnRR:FVsECNxzDnXBoOZWPD0iRR
MD5:	885D673AB99070F2E5005757CB895436
SHA1:	8141F94E432CAE4DA3D32CA4362838DFB53E98E8
SHA-256:	247FC189082160E979E84DE9E2A591DA28319423BC1B706E9A99F2FE3BCED7AF
SHA-512:	2A012C5D0E1D612EB884D5EE73C3799CC138A3D01B685D371DF3FF4B1EAF854331AB88A288BDDD388689E5DF5DC289936F518AF2863239BE2C1A1F42D5EBF4BA
Malicious:	false
Reputation:	low
Preview:	<svg version="1.2" baseProfile="tiny" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 11.299 14.886" xml:space="preserve">..<path fill="#010101" d="M11.271,3.656c-0.117-0.442-0.619-0.708-1.061-0.59c0,0-3.361,1.09-4.57,1.09...c-1.178,0-4.509-1.061-4.509-1.061C0.689,2.978,0.188,3.184,0.041,3.626c-0.147,0.471,0.118,0.972,0.59,1.09l3.625,1.09...c0.177,0.06,0.325,0.236,0.296,0.442c-0.03,0.59-0.089,1.858-0.207,2.329c-0.295,1.356-1.916,5.07-1.916,5.07...c-0.207,0.442,0,0.943,0.413,1.15c0.118,0.059,0.236,0.088,0.354,0.088c0.324,0,0.648-0.178,0.766-0.501L5.7,10.848l1.651,3.567...c0.147,0.293,0.441,0.471,0.767,0.471c0.118,0,0.235-0.029,0.354-0.088c0.44-0.207,0.617-0.708,0.412-1.15...c0,0-1.621-3.714-1.917-5.07C6.849,8.106,6.791,6.839,6.761,6.249c0-0.206,0.118-0.382,0.295-0.442l3.625-1.09...C11.124,4.599,11.388,4.097,11.271,3.656z M5.7,3.302c0.912,0,1.651-0.739,1.651-1.65S6.612,0,5.7,0C4.788,0,4.049,0.74,4.049,1.651...S4.788,3.302,5.7,

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HTL:zL
MD5:	C78FC4C73991971736F95F00B7C09E4F
SHA1:	2BFE006346297E446B58308E3F37169A4BC29046
SHA-256:	C70E533105E5FE64092A52295354E975F8D6DDF470DA3F7AE4A6D4F3FC915283
SHA-512:	5F85D1EA2C4DB38DF3A6FC5414C03EDA186CF86A84F9D0E4C37053791060936B486A0493B54010319FCBA943ED4E95F58045C3EDD135952E69CED9EE87BD21F0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkqhm_ePJBHcBIFDbtXVmo=?alt=proto
Preview:	CgkKBw27V1ZqGgA=

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x500, components 3
Category:	downloaded
Size (bytes):	19083
Entropy (8bit):	7.010801602687925
Encrypted:	false
SSDEEP:	384:w/EeK68Dxh7dqRX0Pqof5WpFD9ivZoyogz:w/EejUxldqan5UFD9ivZow
MD5:	59DA3288A9E4EDE58196E3315E3FD5A6
SHA1:	4A58A66095B9615438237C583FBD53529712BDC0
SHA-256:	33CB097057571EA9ECA8EF86134D64E4DD914A24C96A119423EA06290DE6A1E2
SHA-512:	D37FB972C00B785091425A9C32D2536227D229835937BEBEEFA305510E232DE8E19BEFBF1781E587832239898D26438A73C4D4B35B2351459E403F3E4A73C9B6
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/dt/40380/5056186/f3a2c067780a4258989f8432a96e9fc4_bg_n_300x250_1.jpg
Preview:	......Exif..II.................Ducky.......P......Adobe.d...................................................................................................................................................X.............~..........................................................................!..1".A.Qa2#.BR.qbr3C.$....Ss4v8..............................?................................................................................l.y.zf..;.....z.RP...TJ.P.K'pz.._.I.v.&....q[..r".r.q....j.?Z..kp...e.s\|.;-...<s.<.P3......F.......g[J.l....N......O.sGH...)..#.........\|..-n...%.X...~..u%EL.'..~...S..V...i..{..A..i...^..2....T.d.J.V....(........................................................;..=g..{U......ls...}..[....9Z..z..Tc....E..S......'^.......(=...4nV.dG1`...._7IO...rz.....^....6..1....}..x..I..9UU.e.C*s.....@..h..:f....'.X...].E..W.o<..05.[.....V..L.W.b..7+%.Z.._.\..%K...F....[K.>Gz..r..^......t..,k..xm;\..N.".5.._.....8.Su....W'.7...A....y.9B-5K.g...YY...

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43912)
Category:	downloaded
Size (bytes):	520783
Entropy (8bit):	5.407368916092396
Encrypted:	false
SSDEEP:	6144:tU1+xvM76/omFQw3oGIm9Ay7TjsuZJTTFWKf0GfLHIuyCr:vS8nFtoS9Amjsu7RfqCr
MD5:	6C4D99B5CF45C7D354FAAEA67DC51E2A
SHA1:	B9E94BAEA2DD4071EBF1186D8D80F9F0AED6F98A
SHA-256:	37955B14372CFA11D296080B612F7100210F817B0658C7234AB16FE14CCFDD6D
SHA-512:	44902079400506CFA29124CDFD53BD7CB3C5C7A37ABE61870454485CDFF04C3CD25E7CF0E71C5118215328557ACE69E582963297045DEF1B6B13387045828BF9
Malicious:	false
Reputation:	low
URL:	https://micro.rubiconproject.com/prebid/dynamic/21666.js
Preview:	//21666_JustJared-349 21666 b924c4c.!function e(t,r,a){function i(d,o){if(!r[d]){if(!t[d]){var s="function"==typeof require&&require;if(!o&&s)return s(d,!0);if(n)return n(d,!0);var p=new Error("Cannot find module '"+d+"'");throw p.code="MODULE_NOT_FOUND",p}var c=r[d]={exports:{}};t[d][0].call(c.exports,(function(e){return i(t[d][1][e]\|\|e)}),c,c.exports,e,t,r,a)}return r[d].exports}for(var n="function"==typeof require&&require,d=0;d<a.length;d++)i(a[d]);return i}({1:[function(e,t,r){var a=window.pbjs=window.pbjs\|\|{};a.que=a.que\|\|[],a.que.unshift((function(){a.rp.wrapperLoaded=!0}));try{e("./lib/dm-web-vitals/trackWebVitals.js")(100)}catch(e){console.log("DM error loading DM Web Vitals",e)}a.que.unshift((function(){a.rp.applyPrebidSetConfig()})),a.que.unshift((function(){var e=a.getConfig("consentManagement");e&&e.gdpr&&(delete e.gdpr.allowAuctionWithoutConsent,a.rp.mergeConfig({consentManagement:e})),a.enableAnalytics({provider:"atsAnalytics",options:{pid:"1260",host:"https://analytics.

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	4.1345195377278445
Encrypted:	false
SSDEEP:	3:YWQRAA2nvX0LKRFSABHY:YWQmvv/dxY
MD5:	C466BD434DB29CF02793F8522FDE5F3A
SHA1:	F39A01BB0264479DBE9A4BFB0B80AE0B3B0E8154
SHA-256:	D0D2E098CD489EF7BC528C86DE8AB5C51B5D6CDF9B76A8B08766036992F0D2F4
SHA-512:	81EEC1FC87BBC2A95B34AFF28CBBC6D13EC6C9E78BF76DD6C586ADB48D4E01533D97F1A56BBCC60BC386DF78F6A85252BECD71A945B6AA014A7717EA61CB8087
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0010b00001rrPUnAAM&gdpr=0&src=pbjs&ver=8.38.0&coppa=0
Preview:	{"succeeded":false,"error":"Country not allowed"}

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	109598
Entropy (8bit):	7.98249953518859
Encrypted:	false
SSDEEP:	3072:1thMeyDItuJQFDG87PSzTUP04j4KdXQY49dX2OZAo:X0ItuJOKkiTUPb54n9Zh
MD5:	40C5C38027495361B1D954D3C1354A2E
SHA1:	153878364F9455864E0DFAEFD17C5965AB16B6BF
SHA-256:	A5222157E28C2BEAFCD2479B82D8B4482ED5A00CD975E37A7BE81314409F2389
SHA-512:	7180D6FE0D6BF5EB680BCA554E4E6F63A8EFBA673BB450F48DF7C0311D1EC189F65A57F5BC244C1F3216FB54059C9EA901E2D3F9ECC159D090EFDC06C609C7A5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E1DA84BFFE1411EEA706BD19FE895D4B" xmpMM:DocumentID="xmp.did:E1DA84C0FE1411EEA706BD19FE895D4B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E1DA84BDFE1411EEA706BD19FE895D4B" stRef:documentID="xmp.did:E1DA84BEFE1411EEA706BD19FE895D4B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1560), with no line terminators
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.134597986218968
Encrypted:	false
SSDEEP:	24:kRouMSSYw7SYiSY3OuSYeOg9/NEntcdSY2g0rYSYHOmSYmKAtcSYt:ko6AQ3ReRlycD9ucmFat
MD5:	A335442E6408DB6842CA0F430DCE2E92
SHA1:	07427BE43CE592AA0347EB14EB00E2CF7F7ECE18
SHA-256:	45736A608F411DE758DDC87D8B95E31973FE79FED7E40CD806FF66E7DDE695B9
SHA-512:	19D3C602227196C1711DB1FB8130E839ADDC7DF9EAC03736FC5E2570E1C5F2909E451FE45DDEA7E4CE655EE7851BB538AF7AFB148E6EE5ACBA06D5D24DEC4AAF
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0
Preview:	<html><head><title></title></head><body><img src="https://um.simpli.fi/pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID&gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1&gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://x.bidswitch.net/sync?ssp=index&gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://p.rfihub.com/cm?in=1&pub=2079&gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><iframe width="0" height="0" frameborder="0" scrolling="no" src="https://um4.eqads.com/um/cs?gdpr=0" style="display: none;" marginheight="0" marginwidth="0"></iframe><img src="https://c1.adform.net/serving/cookie/match?party=29&gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://csync.loopme.me/?pubid

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.5486801981214138
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14472, version 1.0
Category:	downloaded
Size (bytes):	14472
Entropy (8bit):	7.986724793307835
Encrypted:	false
SSDEEP:	384:w3yTfckw2H7q0+0Tw0ud++DS/DvgIdDLQEww0FO/T:wCTE+Bj3ud+zgSkw4O/T
MD5:	94B8693233D1EB63780E108A1CFB5499
SHA1:	357BDF1389B7DA704F672297BCB90E1E4C070AAE
SHA-256:	CDC41415F366EF2966FC77E90D51391DEC03657A6ED397FE59EFD5CE34CF9549
SHA-512:	42687544637180C7C432DD98D59780E9A0278ABA6DC6E86EFB36EF39E2D301B04710D320ADC92C021EB4BF980650EE35EFE7AB3C30C778C06DC099F05BDDA6F1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/hindsiliguri/v12/ijwTs5juQtsyLLR5jN4cxBEoTJzaxw.woff2
Preview:	wOF2......8...........8'...............................`..<.b..m.....$..q..2..6.$..`. ..r..o.....z5c...6.....DQ/(.....J.1.l..r.^u..@2..HuK...B.1.r......r:.........y.n.<..R..qX...o.b:...p.....U......1z`.n...n.Nd.-..I.-.[....\...'.<_..z.. ..Q......U.BV..C$+\Y..p.;@..Z....F.ET.q.....3k...s........s.....Y..6V..".dpmI..j.....%..C...)".a..}.iw..?0.i......7Wq..<..4.%.v>..a.....k.fE.... .2X...o.&.z..........'m.Y..,e;?7U.{@*\@.PMS.WX....A..qb.{...4g..0.=d\.ZRX....4?...0.c...5.....x.'......f,.vi..\..r...n....r<<.e^.#.!.(#.#a.`.L.M<A.......k.B..Y3Rc...d...=.g.v.]-....H@......?....2:G.....j..h4...F.Yr.[...M..>G..hd...y.d.....#....-....1t1A.=.#u?.o.1.S"."".$...I....jL..}L.@.. .U......O....K......K.f..Y.."...@,9Q+...B\|..R .K!..s6J..X#.....:...\%....Z._>...vP.....E...8..'......m.X..h....B.%.Bm."Wa..7.w.EW.......B.....?.f@A....n...b..x.}....{/......r..v..d.......{..A..N..b.........J:....Q..P/...I.GR..G.[..!.}.n...pTl.`....};......c..o.?-...#9.V.TZ.~.[i.@.

Chrome Cache Entry: 913

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=7371428327
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 914

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537082476&val=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 915

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://aax-us-east.amazon-adsystem.com/x/px/JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ/v/%7B%22v%22%3A%7B%22p%22%3A100%2C%22t%22%3A1.012%2C%22def%22%3A%22groupm%22%7D%2C%22vs%22%3A%22visible%22%2C%22ah%22%3A90%2C%22aw%22%3A728%2C%22ttv%22%3A32.46%2C%22ts%22%3A1713532431569%2C%22bn%22%3Afalse%2C%22pixelId%22%3A%22kk5z5rtpai%22%2C%22ver%22%3A%22r-1.32%22%7D?cb=1476346
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 916

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	299284
Entropy (8bit):	5.440797825935313
Encrypted:	false
SSDEEP:	3072:IMrCpEUqpfWfMdypMTk2CTi2neSAiMrM+MmXSD3Z3bMsWFG+/FbDXmCj+u+oC6Mc:tMWlAe
MD5:	92A86E3173753B82808817A601818EED
SHA1:	167048321A9AD869EF0BDC41D3DCADAFF9958413
SHA-256:	8245D7042F8B4CDF0182EF6D693FDDF9369CEF632DB2704FB8506D03B817D8D8
SHA-512:	9AFBF5B5DB32035536BF4B8310DE532123CFCD4CB8E6A3F3B311213AE37B503675BFC706EC0C2349041648C91E2DA1A31448537DD278A509551996E50D3E992B
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/Notice.6d786.js
Preview:	!function(e){function t(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)t.d(o,r,function(t){return e[t]}.bind(null,r));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="/",t(t.s=1)}({0:function(){},"0d0D":function(e,t,n){"use strict";function o(){return(o=Object.assign\|

Chrome Cache Entry: 917

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-xandr&userId=187107314970053313&gdpr=&gdpr_consent=&us_privacy=&gdpr=&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 918

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-IkPK5em8TG6iSewK5gxT49SGTn4MNnOG2OW4Fg
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 919

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=seedtag&endpoint=eu
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 920

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	435
Entropy (8bit):	4.945463188829931
Encrypted:	false
SSDEEP:	12:hYeBx//A4xTDNDUnJmIOTB4JmIOTpNJmIO1yMu4IQL:hYeBxwu2wwwFwYMu4j
MD5:	4B81E967DF07D41C24270CCF669F7336
SHA1:	FD711B797D234F508E766F999235EFF0AA409E8F
SHA-256:	4A842D3295B35D0FDBAED094D22F5926F2BCAA2D892EC7EA9A9A89C1F84B33BF
SHA-512:	10FA559F1132F93DD803ECA540198E9A41DAAE95DDA1659766484A213D0D3AA9F1514D0A422DD86F6BD61E8D4F62A0867A50C42B3391EE8CEF70EDFBED697F99
Malicious:	false
Reputation:	low
URL:	https://csync.smartadserver.com/rtb/csync/CookieSync.html?nwid=3050&dcid=3
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml">.<head>. <title>CookieSync Page</title>.</head>.<body>. <script src="https://ced-ns.sascdn.com/diff/js/modules/cmp.js" type="text/javascript"></script>. <script src="CookieSync.min.js" type="text/javascript"></script>. <script src="TemplatePool.min.js" type="text/javascript"></script>. <script>. sasCookieSync.fireCSync();. </script>.</body>.</html>.

Chrome Cache Entry: 921

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=minute_media&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 922

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65478)
Category:	downloaded
Size (bytes):	234704
Entropy (8bit):	5.427718662498054
Encrypted:	false
SSDEEP:	1536:1M0lDe2YZMbrNJTsTzma+vPP2HPCcI8Vx62UYn2U8A5mMby/I7tILVd56xMd4Mul:eSJvNpsuiPxdu/2gIoJM
MD5:	413546E6DB1ADA0E3550D199BD93AD57
SHA1:	AE6CC4CED7CF8A34467F53016F077E73095FCFCE
SHA-256:	EB87C0447BD19366919BDB8913F775CACA732AC31CBC5E5D42E4DB5DF39437CE
SHA-512:	9759AF989A794BD291BAE1E2C0F4195F85B316F3BC06980719DD0C613F18AD2D9BDC89CCFD929FB2D74310F7CF94D75434643C0F0AF677F1D0C12A82F23EC7C4
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js
Preview:	/* cnvr-coreid 2.4.2 - Fri, 20 Oct 2023 23:15:46 GMT */.(function(){var __webpack_modules__={1556:function(e,t,n){"use strict";function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}n(2526),n(1817),n(1539),n(2165),n(6992),n(8783),n(3948),n(4747),n(7941);var o=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")};Object.defineProperty(t,"__esModule",{value:!0});var i=function(){function e(){}return e.prototype.clone=function(){var e=this,t=new this.constructor;return Object.keys(this).forEach((function(n){var r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t}

Chrome Cache Entry: 923

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (41957)
Category:	downloaded
Size (bytes):	41973
Entropy (8bit):	5.299710677376654
Encrypted:	false
SSDEEP:	768:fgQ82a2qbJ/A2T1PkIagOUlDgJUmnz8QDX/0JVro1lwmXaEKDStrU2GRdOfZCV/a:0lX1UnnzBUVfS5xi+
MD5:	9FEAFB1E202E0BEC5FE57D365ADF2E05
SHA1:	020F652BC788B9B11A0B86FC1FA5B9D4F9C80CD8
SHA-256:	95FBABEDB3CDCE723A6D587747D3D7456F488F755CF4500FF01863F714D45BBF
SHA-512:	B2E69EC2733F1BC7ED78FFC439E33D443A46D2786E4702DCAAEA33ACFEAAA33612D19651D3E3AA1DA04B8257EDDF3FC5FA63CFEEF8FF5973A7E69F0B9066949D
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idw.js?ga=0&gc=&do=www.justjared.com&e=27&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&k=am%2Fid58567483.00000000000000000000000000000000
Preview:	void(0);/* */;.!function(){function e(e){return Object.keys(e).map((t=>{const s=e[t];return Array.isArray(s)?s.map((e=>`${v(e+"[]")}=${v(e)}`)).join("&"):`${v(t)}=${v(void 0===s?"":s)}`})).join("&")}function t(e){return new Promise(((t,s)=>{e.oncomplete=e.onsuccess=()=>t(e.result),e.onabort=e.onerror=()=>s(e.error)}))}function s(e,s){const n=indexedDB.open(e);n.onupgradeneeded=()=>n.result.createObjectStore(s);const r=t(n);return(e,t)=>r.then((n=>t(n.transaction(s,e).objectStore(s))))}function n(){return O\|\|(O=s("keyval-store","keyval")),O}function r(e){return e}function i(e){let t=null;if(z.cookiesAreEnabled()&&(t=z.getCookie(e,void 0)),z.hasLocalStorage()&&null===t){const s=z.getDataFromLocalStorage(`${e}_exp`,void 0);(""===s\|\|null===s\|\|s&&new Date(parseInt(s,10)).getTime()-Date.now()>0)&&(t=z.getDataFromLocalStorage(e,void 0))}return t}function o(e,t,s=S()+6048e5){if(e&&t){let n=new Date(s).toUTCString();z.cookiesAreEnabled()&&z.setCookie(e,t,n,"Lax",W,void 0),z.hasLocalStorage()&&(

Chrome Cache Entry: 924

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvCfykQcb6Otk1vpra28q8LKQIc6ht88p64J0m4VNNI50BZEHzHi7MDs-u_hgUVIV8Hzqel1w04OIJ0tlDFPq7EwWSd51gIvVO7H049En13nFDLV7SkAk81ecn1ewv8k4ltmrQAmWQmAmBoDzMYsTx5_NJBf4-1Vug&sig=Cg0ArKJSzEZTnzHpSWM_EAE&id=lidartos&mcvt=0&p=1246,309,1496,609&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0&vu=1&app=0&itpl=3&adk=737501260&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=946517500&rst=1713532375244&rpt=1010&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 925

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	downloaded
Size (bytes):	33708
Entropy (8bit):	5.3379721973836105
Encrypted:	false
SSDEEP:	384:eBEcfkxkAJ+qMMcVhs1gew7YAFSbuQ3ozVuFk9X9C73SQ/Plkv4n7dOPQnJ/6cpB:eBEcMOh4gewEAFSbu9D87fqQn96i
MD5:	C85F203BEC141F2F60513CA0E65DAB56
SHA1:	40FDA435E84C6F5E1B7F314C850E1EBA211D5A38
SHA-256:	C9BF05D860474759FBFEAE7BD7E53E5AB907851D1CC76EF36D373F2756024139
SHA-512:	56DA2861EF5400757D4EDE9734C150DD7CC82B2C1CCE57D0D1FFD85788FF6600361602AA0E04EC4091D4F19A1A7EC06285D27D8495DA34A12E388739FFEF5811
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/ht/p/191040-27970744739601.js
Preview:	!function(){function e(t,r,n){function i(a,s){if(!r[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(o)return o(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var f=r[a]={exports:{}};t[a][0].call(f.exports,function(e){return i(t[a][1][e]\|\|e)},f,f.exports,e,t,r,n)}return r[a].exports}for(var o="function"==typeof require&&require,a=0;a<n.length;a++)i(n[a]);return i}return e}()({1:[function(e,t,r){"use strict";function n(e){function t(e,t){return y[e]=w.IN_PROGRESS,new u(function(r){t.instance.retrieve().then(function(){y[e]=w.COMPLETE,r()}).catch(function(t){y[e]=w.COMPLETE,r()})})}function r(){for(var e=[],r=u.defer(),n=Object.keys(h);n.length;){var o=f.randomSplice(n),a=h[o];if(a.enabled)try{e.push(t(o,a))}catch(e){}}return u.all(e).then(function(){i.emit("rti_partner_request_complete",{requestsCompleted:e.length}),r.resolve()}),r}function n(){for(var e in y)y.hasOwnProperty(e)&&y[e]!==w.COMPLETE&&i.emit("hs_ident

Chrome Cache Entry: 926

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/design/googlefont/roboto/roboto-400-latin.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 927

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.654474309626
Encrypted:	false
SSDEEP:	12:hYxu3VHdyC/3KDVU4dtzSwVaRfmfY3fb32FA4Nbx8QL:hYElHMiKhHz+ia94Yvj2FA4NF
MD5:	8B140F0F0F6E1A0F986CC7D6DFD74D65
SHA1:	E75B9E716E6DF29768EACFA27332F62144BDDA0C
SHA-256:	AE57797F708333552A13BCD7293180163E6F38FD11B1A8CD5AA8F05421E5B8FA
SHA-512:	BF71C5810BE6018D6C5564D4A11965F3543C458CA0AC755C4531796A14AC0A322CB838C4064C344643B0C53CD5074BE7FE6DA48AE6EBDD33B8ED610FEC46D4DF
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Taboola Topics Frame</title>. <script>. (async()=>{. var s=document.referrer;. if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")). try{. var e=await document.browsingTopics();e.length&&parent.postMessage({topics:e},s). }catch(e){. parent.postMessage({error:e.message},s). }else parent.postMessage({policyMessage:"Topics not allowed in document feature policy in: "+s},s)})();. </script>.</head>.<body>.<div></div>.</body>.</html>.

Chrome Cache Entry: 928

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1829
Entropy (8bit):	5.461849178890381
Encrypted:	false
SSDEEP:	48:Yj6k2m2bZrOGOtNdNbHGOWDBdz6GOBubF2jjSkbGO9CyXjGO+mZx1GOc:xnkDbmLBHlEPWHbbIxk7
MD5:	892365B5280B82FA93923B9AA3C72441
SHA1:	21B15BE14E5567BA55B3DDF7E6F193B2A03B8B26
SHA-256:	4BBC06B93EC46A227FF7C1A0D1AD6AC4F8FD27957B774F3B8B0D5CAE42E5199A
SHA-512:	B5FC9D811BFEDF9170E78AF280D8F84A8CCF7FB12910934BB6C39E825B53B7CF55485E8BC90D93D20A473002A5B80F9B338F690CEDC5215B3FE197F27C66D12D
Malicious:	false
Reputation:	low
URL:	https://g2.gumgum.com/assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A2%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fkourtney-kardashian-shuts-down-fan-comment.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A1636%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22Kourtney%20Kardashian%20Shuts%20Down%20Fan%20Who%20Assumed%20She%20Wouldn%27t%20Like%20Kim%27s%20Birthday%20Post%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350575&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false
Preview:	{"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID","t":"i"},{"u":"https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D","t":"i"},{"u":"https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv","t":"f"},{"u":"https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://p

Chrome Cache Entry: 929

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14301)
Category:	downloaded
Size (bytes):	14613
Entropy (8bit):	5.42072136912928
Encrypted:	false
SSDEEP:	384:Is9t0S/g8UoDthaNyvhCCVKTKWhKPKiX2BKIQNv+bPKlRCLJT9Kpw:X7/DLDth68X22RR8Tz
MD5:	120B4FD6B9D87E3DEE1FD71FF82137B7
SHA1:	D86A86A69AB7477F25377E253242D305DA6493D2
SHA-256:	9F5B814F698DA2F9AF4DD56034A54C48E457EC1F1301828769FAFC493062D9F1
SHA-512:	3692A96DF177DE54FEF873130EF2CB2A6946F41AA3D4DC77A48C296975C02623FC43E26FE2AE22A134F7FF62BBA08C63B78DEADC034D0D9242576BF09B98CD3D
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=www.justjared.com&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.us5.us.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.valu

Chrome Cache Entry: 930

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=3070155006354058421&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 931

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	219957
Entropy (8bit):	5.9676015988278355
Encrypted:	false
SSDEEP:	3072:HmwEQR/zqf/u/HVruJmseXf8Uj/HVruJJR1UB:Hm/QdzGq1ru21ruK
MD5:	7774FB5695D0B17291356A75147088A0
SHA1:	67FF94746035814A83E8FEDAD57CC7091907F02A
SHA-256:	FB2655CBF02B7D82BCAD1C9F7E9ED2C589C0D12F2CA1EA4373065FEB722FBA14
SHA-512:	8E54F97FEECF132804C52F009DF869AB94DA9E8E2C11A7738A1631C60B5C3A0FBF9C258033CD6B4E2AFF5C4FF4A00F8AC65A0B105D10462CE87993559A115618
Malicious:	false
Reputation:	low
Preview:	{"/21854935662/justjared/desktop/rail/home/2":["html",1,null,null,1,250,300,0,0,null,null,null,1,null,[138467780849],[6530590001],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslitBkWc0uwUdTB6QLmPAHxd3W3Oh7eO90SbkvmwyI7WGCfbWihLNw-3lp0Tw4T0_Am_Gpv6-HfQjB52ayOq_1qA4MQ_AKkHsokHmTjCTFPWk7g","CKnulr6tzoUDFbcpigMdvAMMvA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure L

Chrome Cache Entry: 932

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	"https://dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-OOHgrOm8TG6iSewK5gxT49SGTn7VX-AX6okm8g&google_gid=CAESELG90IMV517AUig7ZaOsiU8&google_cver=1&google_ula=913071,0"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 933

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/prebid?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dopenx%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D%24%7BUID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 934

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=36A9D4BEDC8C49329C57B49CB04880F6&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 935

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:20,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{%22Country%22:%22US%22,%22CountryRegion%22:%22GA%22,%22City%22:%22Atlanta%22,%22PostalCode%22:%2230301%22,%22MetroCode%22:%22524%22},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22clicks%22:0,%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532386805"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 936

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	214
Entropy (8bit):	4.631928108904117
Encrypted:	false
SSDEEP:	6:YMEL9LrEqajpHrHaaNmXx+aV4qW8Ii96J4Mm5Ja23pm0XhGz8:YSqwpHrHaaNmIrisJBmq2Zrl
MD5:	568EBB04835BCBA290DA08A9C6D47573
SHA1:	F010D89B29E096DBE6B62C7F045B1B5DACCD816E
SHA-256:	C4C04F49763BB036BC4DBA8C2C5787BEC45018A9C3ECFDE803E21C3E0F210518
SHA-512:	1290592E3BDC9E751F22D76252993EC8517FC028F0389EE5F2690F7A3E4A52B0F56144686D8AE8CCA7965BE12092CFFD7EC0AAD91E3DE5B00BE8D9AECF59B0D8
Malicious:	false
Reputation:	low
URL:	https://geoip.insticator.com/json/
Preview:	{"ip":"81.181.57.52","country_code":"US","country_name":"United States","region_code":"","region_name":"","city":"","zip_code":"","time_zone":"America/Chicago","latitude":37.751,"longitude":-97.822,"metro_code":0}.

Chrome Cache Entry: 937

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/prebid?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dopenx%26uid%3D%24%7BUID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 938

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 232x369, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5380
Entropy (8bit):	7.964167422130422
Encrypted:	false
SSDEEP:	96:MHnLVkOTV7qrhUno5nkSXbCNwT95BJKjqpBL9SObG0XjbUMkbP:OBkwcgqJEWpBL9SOblgbP
MD5:	279ED2F261A6A45B0A186F2724ED4557
SHA1:	5C4EC5996C7E8F13129B15692B66999997837EAF
SHA-256:	0D293AF5F4B3534DD5F528EB26E3FD10E921C0BDDF88D8914FD84F7F0B4D2489
SHA-512:	4C26B760CE491F35E9B244056363CBA93DF0048282225F9D226253E25913DA4A9A18D4C0AFB2FCA4D6640E6B23C66B744B8D78B0DE95636202345C6770687B6A
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400015212265_BEIGE_486x684.jpg&v=3&w=400&rid=6&s=5jMRwOGPUv4YmSQwaYK6CenN&b=400
Preview:	RIFF....WEBPVP8 ....p{.....q.>m2.F$#!.,......gn...........Bxo..^Ls...9..+uu..B.W.6..g....=.s...zQ!.yUr....o2O...........i..=3.......Oh.a.{.J...]iP..........5..+.....e.....)0.&.../.5.yA...hw..hG..\d.GXj.......Ay26n....Fe..~.......Mq[%.\|..y>/^-......B".".o..d:7.]...o. ....K.!q.:).Z....s.j..#..l1,...0.7bM'.p.....:z...L.....M..z...,..B.......Q.G..m.../K... q....9...on......-.....:....,...`{.%i.DV..?(.x.2..H.a.1E+.7,..8.....T.@.....7.juf...\~...h.!..X'1<..JV.j,RV..C....dKjq.R...f....iA..z.-F..2UT...vK.T..f.J6]Y;.4.P..q.....p........>.Gg..S...7..UG..W^N.1C.m.G.i...zm].5........fW....$.?.6.f..$......*(s. ......\|...w..`....?..a.jEG..=R.,........V..}....J........%.tY....pv.GX..1y.>...F}?./.X.x...k.{,...n..X..=..;..8.N.r..8.B..k.:/.s..........PK...E...s..'.e..LF."....}....Kt..(.@.?..l\|..c..<os.>z..V:......Ao!.&.WO.i..e.q^...J...\|R.....RN...v....$g'..O~.......\.....L3....B../]Y..~D.th...ke0sSQ...W. .....U..~[......-..K.r.......[.].1..x....l..u.c..

Chrome Cache Entry: 939

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3045), with no line terminators
Category:	downloaded
Size (bytes):	3045
Entropy (8bit):	5.172300999461263
Encrypted:	false
SSDEEP:	48:igxZXsIuE/8/o2pGbGxpMQRtxhssLjdjJSjsIjBtuj54jrVfi3dRtFPsis5TWuF/:vtuWcr1SsntKrlMdRtOJBWeBrbUyRm3Y
MD5:	D844D60507CC6E9B4BF8852F728D1CA1
SHA1:	1852493A1BBB00797DCC744041FE25A71BCC22F8
SHA-256:	AD5B63261DE2A4486E3FFED451C805EC6468A3A58444A143208BC22D5C096D86
SHA-512:	1F23D8FCFD49EE3347C605022128D49C1E458F91E9C77E59F93FFC4C2EAA40E1D35A30E488101BB28A512846FFC368E29938D134C83701FFD6A347A4B2C5592A
Malicious:	false
Reputation:	low
URL:	https://cds.connatix.com/p/471114/787.js
Preview:	"use strict";(self.webpackChunkconnatix_cookiesync=self.webpackChunkconnatix_cookiesync\|\|[]).push([[787],{787:function(e,t,n){n.r(t),n.d(t,{UserSync:function(){return m}});var o=n(747),i=n(263),s=n(755),r=n(427),c=n(779),a=n(532),l=n(756),u=n(141),d=n(741),h=n(804),p=n(631),y=n(839),_=function(e,t,n,o){return new(n\|\|(n=Promise))((function(i,s){function r(e){try{a(o.next(e))}catch(e){s(e)}}function c(e){try{a(o.throw(e))}catch(e){s(e)}}function a(e){var t;e.done?i(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(r,c)}a((o=o.apply(e,t\|\|[])).next())}))};class m{constructor(e,t){this._globalWindow=e,this._environment=t,this._endpointResolver=new r.C(this._environment.ovpDomain),this._topWindowStorage=a.f.getInstance(this._globalWindow,this._endpointResolver,this._environment.playerBundleNumber);const n=this._topWindowStorage.getScope();this._userConsent=new l.W(n,this._environment.implementationType),this._userSyncService=new p.e(n),this._environment.isInApp\|\|(this._lo

Chrome Cache Entry: 940

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://cat.us5.us.criteo.com/delivery/lg.php?cppv=3&cpp=v9VOM9Z9uaJKzx7QTbggMODKfciMhdxtP4TtplneI6FuItv7APibSxmNKSTj1xTWj-6cExpgZ27rtVosAy4V4dSJ0o9DO-5dg66k6Z5W9EP5Rv1vSDz3F1ll0m1Pb2LgNA8cXaNngYHJbqlyWRPqm_64KZq0wJCt9MC2Cp9_2bsdaxZ8f8ys_GnOdKoY5nwdu9Gs0AFgrrPbHJziKIbWI--LKm_czaCbLkf_pPAy7KXCUjos5mx8sv1VNc-CKa5sR-BTHn6hPY-pkBLVgy97fx2_6LUgMmIhQRUoRHjpYjQeVyGbeeEFcCwMXd5D8ZBW7D-BoPD2GGMLkQPcv5M9zvIT5IFov0j1Fj6Agi70ev8eNg6ZlO1-GEiX5AQJ6LxTo4Ai9LkPkaYSY4klCvMuI0gIwEL4oC2jK150cby6hHVMKEUcZRlDVyUxXCEaMSUQLSUy8mXYtWsUXEulkqLLqpUiRLE
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 941

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dot.gif?gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 942

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2023 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	81199
Entropy (8bit):	7.979532434473059
Encrypted:	false
SSDEEP:	1536:yuPKsv9x/4Y2MSsUFXWFMOW2Or9FBtajQdQ1lHYyxyFnfFj99nO0ZPooDmCMxcxO:LPnvsNMSsYXWXSFTaMdUYl9m4woJMxcU
MD5:	3C48138F394B396F908FE7858F61672B
SHA1:	6B4A5454C73ED759AF9313018CCD610B079BC176
SHA-256:	74F80184F257AAD1FC24AE623861BE8CB7D41E5F3F89883CCB2A157D186FDC9F
SHA-512:	43D6B8071525055CC335A7E64E1B021ACBE421867CC911F492DF6D505A381C54390917A13EFF8DA9D1BC5840E26EB2FD0008766D1DFFAC488B6A0C7A446111B8
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/chris-pratt-gets-injured-on-mercy-set-shares-photo-of-wound.jpg
Preview:	.....6Exif..II*.......................2023 Getty Images.......Ducky.......d.....thttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.0 (Windows)" photoshop:AuthorsPosition="Stringer" xmpMM:InstanceID="xmp.iid:28D5C932FE0C11EEA96FD489F202D4CA" xmpMM:DocumentID="xmp.did:28D5C933FE0C11EEA96FD489F202D4CA">

Chrome Cache Entry: 943

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=1045438816811072924&expiration=1714742006
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 944

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-nf.rubiconproject.com/beacon/e/bpstats/5f4375f3-dfcd-4515-88f1-da167a55c33b?type=bpstats&zoneId=1431476&sizeId=15&siteId=284872&accountId=19116&whiteopsMgToken=e83af57e-5177-45ca-b5dd-b7403bbf6b62&userId=LV6OX7LS-1U-G1TB&siteHost=www.justjared.com&appBundle=&supplierId=magnite.com&country=us&tagId=8736481481318196516000&url=aHR0cHMlM0ElMkYlMkZ3d3cuanVzdGphcmVkLmNvbSUyRg==&userAgent=TW96aWxsYSUyRjUuMCUyMChXaW5kb3dzJTIwTlQlMjAxMC4wJTNCJTIwV2luNjQlM0IlMjB4NjQpJTIwQXBwbGVXZWJLaXQlMkY1MzcuMzYlMjAoS0hUTUwlMkMlMjBsaWtlJTIwR2Vja28pJTIwQ2hyb21lJTJGMTE3LjAuMC4wJTIwU2FmYXJpJTJGNTM3LjM2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 945

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 946

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.kueezrtb.com/api/cookie?partnerId=kueez-grid1&userId=58637582-4b7e-42fe-b59a-889f13122ef7&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 947

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=NDEwMjllODQzYjk1NTgzNTE3YjE0NjU5MjgxZjYxNzJiMGYwMWNhOA&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 948

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.prebid.144.js
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 949

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/dds
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 950

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1006)
Category:	downloaded
Size (bytes):	43750
Entropy (8bit):	5.433897257431051
Encrypted:	false
SSDEEP:	768:CVWTYNSKSV5mglMpbOSyq/h5imuWzpLx5yax:CVWkNSjVg0MpbBMmDRhx
MD5:	D770FC2C6240423AE3E46EC026E9E0C9
SHA1:	959B88AC51E453EA8B29447BF01D4242FD3794AC
SHA-256:	8B00AC99AB14328834F0354DDD53968B563590FC5FE0A1DF5EA1A45FD3DED755
SHA-512:	9E8FCF16ABD0E0B49987CFB3C5A4175C1A005ABE3C5C252B559B0A369040DF364A37FB8A393D7CB53E588835DB76504A4577CAD4CDBF93DFDC1A416BED7A77CA
Malicious:	false
Reputation:	low
URL:	https://d3lcz8vpax4lo2.cloudfront.net/ads-code/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js
Preview:	'use strict';var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(c){var m=0;return function(){return m<c.length?{done:!1,value:c[m++]}:{done:!0}}};$jscomp.arrayIterator=function(c){return{next:$jscomp.arrayIteratorImpl(c)}};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.SIMPLE_FROUND_POLYFILL=!1;$jscomp.ISOLATE_POLYFILLS=!1;$jscomp.FORCE_POLYFILL_PROMISE=!1;$jscomp.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(c,m,n){if(c==Array.prototype\|\|c==Object.prototype)return c;c[m]=n.value;return c};$jscomp.getGlobal=function(c){c=["object"==typeof globalThis&&globalThis,c,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var m=0;m<c.length;++m){var n=c[m];if(n&&n.Math==Math)return n}throw Error("Cannot find global object");};$jscomp.global=$jscomp.getGlo

Chrome Cache Entry: 951

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156512
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 952

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=2024 Getty Images], baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	59795
Entropy (8bit):	7.970623367152065
Encrypted:	false
SSDEEP:	1536:E37JTlBfGxBShLbe0NOm48XOtU+93uV5/H1QMKSFqZ6M:ElRkihXRx/OHU5W9
MD5:	FC1454498A5AD77880C4FFBF710AF584
SHA1:	CFB3AE798E0175C34DC7D78738DE4378971C9516
SHA-256:	7B3D04FCBC62F2EF2282B2FAF2EC5176EA416AF77A4B83881CA2B158E1B6D073
SHA-512:	D9C83E427008066E7C1A6744A9463329B2EF5F18B4849CFE61AE110B4DC4C761CC3F1F8C93ED8B6B8487EA03ECC472B4B0F6D60453B7C731F4FB535D5E01B3FC
Malicious:	false
Reputation:	low
URL:	https://cdn01.justjared.com/wp-content/uploads/headlines/2024/04/taylor-swift-social-media-post-after-releasing-new-album.jpg
Preview:	.....6Exif..II*.......................2024 Getty Images.......Ducky.......d.....whttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmp:CreatorTool="Adobe Photoshop 24.6 (Macintosh)" photoshop:AuthorsPosition="Staff" xmpMM:InstanceID="xmp.iid:626DCB69FE0511EE91C7DEA4F058183F" xmpMM:DocumentID="xmp.did:626DCB6AFE0511EE91C7DEA4F058183F"> <

Chrome Cache Entry: 953

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1902)
Category:	downloaded
Size (bytes):	1930
Entropy (8bit):	5.259051494020639
Encrypted:	false
SSDEEP:	48:PtzJhaFBhh69XAarBhh6KwQh6SrN0fv5lXDRaDW9rkP6yp+IlAMrHnL:PtzJ8PkXtPhOTDRaDWVkP6ypDl/
MD5:	4C18D7617AF0157F9B414830120C88F6
SHA1:	0C1C859D42B0067BBB9DD4CD019F2F272F72D3EA
SHA-256:	DC3DE77B16C55596D1990B2B8EB6F01153AAD005FD6806C253A037ECC1B76368
SHA-512:	8C96394BAE3F7209651D0D25F528B10A2A899C5BCBFA74DA8A10F3C546AE2F46594F8B542A18C180706C220D21EC8332CADE32CA885CE02E0D1727624162C366
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/google-topics-api.20240418-18-RELEASE.es6.js
Preview:	/! 20240418-18-RELEASE /..(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics_sdk)return;a(TRC.topics_sdk)}catch(o){__trcWarn(`failed to save handed Google Topics at local storage: ${o.message}`)}}function a(o){try{const t=[];for(let e=0;e<o.length;e++)if(o[e].topic&&o[e].taxonomyVersion){const i={i:o[e].topic,v:o[e].taxonomyVersion};t.push(i)}if(!t.length)return;TRC.pageManager.storeValue(e,JSON.stringify(t)),u()}catch(o){__trcWarn(`failed to save Google Topics at local storage: ${o.message}`)}}function c(){let o,t;try{if((t=(o=TRC.pageManager.getValue(e))?JSON.parse(o):null)&&t.length>0)return t}catch(o){__trcWarn(`failed to read Google Topics from local storage: ${o.message}`)}}function l(){window.addEventListener("message",o=>{if(o.origin!==t&&o.origin!==i)return;const e=o.data;e.error&&__trcWarn(`Error in browsing top

Chrome Cache Entry: 954

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=YWQzYjJlMzYtMDg4My0yMWI2LWRiN2QtNWRjNTZhYzZmM2Nj
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 955

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 956

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkbyHWbE5Eu0hIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 957

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (328), with no line terminators
Category:	downloaded
Size (bytes):	328
Entropy (8bit):	5.059118830641499
Encrypted:	false
SSDEEP:	6:NS1BlC+qSEpzMdIz1vI0R4wdxpFwb1p3256dyuq/d3efeQ6gyM1D:Y1BsLWI9R4wdxbw1t24dy7du2Q6hMZ
MD5:	C43277B67A0D078A879B74947251DE3C
SHA1:	1A731F9751A6361329164595D2446714F5C57F42
SHA-256:	972A8C860066A9EF9B89D7C55C1484B8845E9CCA97B95E7A620FE7A6654EAC7E
SHA-512:	0DA9C75531AA76AE25E69DFC710C2604C681524F4133F47AA624EB76065DD14DDF8949D71EE7AFA65E91269738EE655C3AAE9F313420E96B2DB0C6F8764EF8CF
Malicious:	false
Reputation:	low
URL:	https://router.infolinks.com/gsd?evt=afterGSD&pid=3320940&pdom=www.justjared.com&purl=https%3A%2F%2Fwww.justjared.com%2F&jsv=1928.005-3.034&_cb=17135323743620
Preview:	window.$ice.event.fire('afterGSD',{rid:'d999be2a-4144-4ba4-8d6a-4248dbda541d',rs:'rt3047.infolinks.com',makey:'4c455a454c455a41435a41465b454345474147464d43424c43415b69757670',ms:'4001',prs:'s,o,p,d,x,k',fbc:true,cks:{cuid:'b15ba36a-d001-43e3-a9a7-1bd658012841'},scl:false,wd:{contentWidth:800},cfg:{itl:0.1,xbtn:0.1},wsid:'1'});

Chrome Cache Entry: 958

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvTb97llC1CJPIaNdvhYu1ap_0J0FgT336AzkKYOZ51Ap-lj_oup0WYrMXJBO1rxW1zVKSlQ0PkyA0D9e5j8R1hQ3DwxZ9FDyI_Q7ZdBcSGhbOjUOKd7U5QGjIfoZQVUBoS9Ve1dhroG2mmm6Qr6n1UiCN48-jkEnY&sig=Cg0ArKJSzKgPywcmAHr1EAE&id=lidar2&mcvt=1477&p=817,276,907,1004&mtos=1477,1477,1477,1477,1477&tos=1477,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=1&vu=1&app=0&itpl=19&adk=1915671097&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=946517300&rst=1713532373697&rpt=149&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 959

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240417/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 960

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=f0v35ew&ttd_tpi=1&us_privacy=
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 961

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 962

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8573566563
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 963

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	4.762771713225458
Encrypted:	false
SSDEEP:	24:t0IL4SQDXEMLnrCSlgBgmKhOde/8q61cu4zIQ+Bi3+s1nkH8Q4h4yBEvU65ZvtlZ:+pSZcGzBgmCOdekvOX2Nm4uIZnDM6woN
MD5:	3643D340777CD5FB9A2FA7E8701FDCDB
SHA1:	64126ACC1DC7A894A9984613BEA432DE19C2D186
SHA-256:	60BCAFBD631F6FA0805E158CA3B235E76225350DB6FBB423596D4C4954B27573
SHA-512:	CCF3B75300726BB2785B78C6CB16931F01E042A0AE139B6F4C25498C71FF132A73492BD66A3F0CD74488DE115DF22542D0377D92FC662117250003B9451CF61E
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/flash/icon/adchoices_en.svg
Preview:	<svg id="privacy_svg" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 77 15" height="15" width="77">.<style>..bg{fill:#fff;opacity:0.6;}..icon{fill:#00aecd;}..text{font-family:Arial;font-size:11.5px;stroke:black;stroke-width:0.25;}.</style>.<path class="bg" d="M0 0L77 0L 77 15L 5 15A5 5 0 0 1 0 10"/>.<circle class="icon" transform="translate(58, 0)" r="0.75" cy="5.875" cx="8.75"/>.<path class="icon" transform="translate(58, 0)" d="M 5.3730468,1.0136718 C 4.6293185,1.0090776 4.1,1.3947866 4.1,2.5 4.100712,5.7520821 4.0996094,8.7129311 4.0996094,12 v 0.800781 h 0.013672 c -0.00328,0.03309 -0.00524,0.06633 -0.00586,0.09961 -4.7e-5,0.61699 0.447682,1.117187 1,1.117187 0.035907,-4.48e-4 0.071766,-0.0031 0.1074219,-0.0078 0.1364212,0.007 0.2721632,-0.02339 0.3925781,-0.08789 l 1.7871093,-0.917969 c 0.7171771,-0.35578 0.4527743,-1.437158 -0.3476562,-1.421875 -0.1186385,0.002 -0.2351089,0.03213 -0.3398438,0.08789 -0.103283,0.05499 -0.527302,0.28718 -0.7851561,-6e-6 C 5.8554801,11

Chrome Cache Entry: 964

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-sjc2.rubiconproject.com/beacon/d/5f4375f3-dfcd-4515-88f1-da167a55c33b?oo=0&accountId=19116&siteId=284872&zoneId=1431476&sizeId=15&e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
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 965

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	293448
Entropy (8bit):	5.570734267267108
Encrypted:	false
SSDEEP:	3072:1K4lgxAZVNSNcMzszFeIlk879CBPIrTWRsYESfhmpt2nBsLqlyZXDeltzvsAAohs:o42AFMgzFe9Y0fhmpt+aqlyZXDelJsAw
MD5:	67DAAA89224A94849C7CC5A4587AFDD5
SHA1:	FB44DA3CFE6F45C2C3A6769182486F3056151A5E
SHA-256:	321DDE3D5ED3C40C880E00039C6D37B25F1204AFC2B1FDC6B074E070DC45C6D4
SHA-512:	81EE2775641F5FCDEB2597FCA3AFB0A903CEF3217553CCCB0FFBF512944689C6056864FB27B57ADDDA4E0D4E8AE2C65F5B429B56D788C3434B0585EA41DC7288
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-TZN144ZY3T
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":13,"vtp_instanceDestinationId":"G-TZN144ZY3T","tag_id":25},{"function":"__set_product_settings","priority":12,"vtp_instanceDestinationId":"G-TZN144ZY3T","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":24},{"function":

Chrome Cache Entry: 966

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=17888&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 967

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ice.360yield.com/server_match?partner_id=1790&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dimprovedigital%26uid%3D%7BPUB_USER_ID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 968

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/rum?cm_dsp_id=51&external_user_id=58637582-4b7e-42fe-b59a-889f13122ef7&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 969

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=20986&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 970

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	966
Entropy (8bit):	5.311616749126625
Encrypted:	false
SSDEEP:	12:kxP5GQ0bAGtncDU9n+sUS+EhwtAoV0oARO+Eiudb0+sU3/11hb+sUjf2k:kb0bPcq/j+YwtnJ2uMUhjAfH
MD5:	04C87FE7EA2D7B6B29CBC7AFDF185202
SHA1:	2323F77F2CCD111B9779EAB55ECED4804F9A3FB2
SHA-256:	75A101A27FFBA73896C0AD4487FA49F4D0A3DD5FD8F633AB18F70AE00A4CD52C
SHA-512:	2014790DD9F3D2D0568C8B6440F22E04E23EAF5220B656EC38A010F8AA6208B2FF7666827AC05BB05511EE26ABBF72F1CD51E3115D0DB04B18603DBA3C1D9C20
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=36&gdpr=0&gdpr_consent=
Preview:	<html><head></head><body><img src="//ssp.api.tappx.com/cs/usync?idmn=45&id=1845939505169848484&gdpr=0&gdpr_consent=" />.<img src="https://c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=0&gdpr_consent=" />.<img src="https://secure.adnxs.com/getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent=" />.<img src="https://sync-tm.everesttech.net/upi/pid/gjIEMT18?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D94%26partneruserid%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 971

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	131422
Entropy (8bit):	5.295307813504528
Encrypted:	false
SSDEEP:	1536:CC70SwXd3deLYQaM75AxyxDm7ZepNdXj7x:aSwN3tI50SEe/dXvx
MD5:	0EC630ABC0613EF647EB0F3FBAF57D34
SHA1:	E22FAF53B01B1E0B12F19C4C22D9504F838B718D
SHA-256:	D2F4B534DF8B6EC297815AB09B98EC695EAAF9242D39E17C57825681B69977A1
SHA-512:	99DEACF44099814136644492297685ABEF7F6E366E6C1F13D8BB2EF5D072C5B192A5805976312C5A9D667D392B8C163831273D359CB4FBDEAEEB5A2F2931A055
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/unified/wrapperMessagingWithoutDetection.js
Preview:	!function(e){function t(t){for(var n,o,a=t[0],i=t[1],s=0,u=[];s<a.length;s++)o=a[s],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&u.push(r[o][0]),r[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(c&&c(t);u.length;)u.shift()()}var n={},r={7:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var a=new Promise((function(t,o){n=r[e]=[t,o]}));t.push(n[2]=a);var i,s=document.createElement("script");s.charset="utf-8",s.timeout=120,o.nc&&s.setAttribute("nonce",o.nc),s.src=function(e){return o.p+""+({0:"ccpa",1:"ccpa-gpp",2:"custom",3:"gdpr",4:"gdpr-tcf",5:"usnat",6:"usnat-uspapi"}[e]\|\|e)+"."+{0:"e4cc64d4573eb818690d",1:"65d1b35ff487d360208c",2:"1a28bbe027bd69b90733",3:"b8c526ee2cb071665a5d",4:"326dc0fcac2e9cce1493",5:"6df6ca45594f51824f67",6:"424a28a7602f5d18dde1"}[e]+".bundle.js"}(e);var c=new Error;i=function(t){s.

Chrome Cache Entry: 972

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1781
Entropy (8bit):	5.156279180502575
Encrypted:	false
SSDEEP:	48:Y2cBqfbYVB7fAuEYt5lUQyUQugFyUQjM7PI:bcf7Pt5lJyJugFyJjUPI
MD5:	901E1841EE01E62BEADC5D84A5BA0B3D
SHA1:	F2E2C539DE1240687235BBCC2B62F298A6397B98
SHA-256:	B73B8CFAA201483924E3BC0E0B04C61972CD1FCD3F501EA622E7C1331B64F01F
SHA-512:	452CEBBCDE2E9A402E3BD9658F0C8CA612C4BC1DAC26591D95F4D10558B29D650CF41DAD4FEDD4AE00A63C6A808EF5ED1E893B1E371813A6D3C57142B9586D46
Malicious:	false
Reputation:	low
Preview:	{"msg": "OK", "code": 0, "data": {"new_cid": 6036055, "obsolete": "387ad10ae4017f1bc328c9f359fef32633fcffe7", "episode_count": 78, "x_play_base": 0, "stat_cover_ext_color": true, "keywords": ["Music Interviews", "Music"], "cover_ext_color": "-15176278", "mongo_id": "604c178cd55e32a18945f314", "show_id": "604c178cd55e32a18945f314", "copyright": "Spout Podcast", "author": "Spout Podcast", "is_key_channel": false, "audiobook_categories": [], "comment_count": 0, "website": "http://www.spoutpodcast.com", "rss_url": "https://feeds.sounder.fm/11059/rss.xml", "description": "You know them for their songs, videos, and epic performances, but there is always something even their super fans don't know until now. This is the Spout Podcast, where famous people spout off about more than they're famous for.", "tags": ["from-itunes", "from-google"], "editable": true, "play_count": 1345479, "link": "http://www.spoutpodcast.com", "categories": [10071, 10009, 10074], "x_subs_base": 0, "small_cover_url": "

Chrome Cache Entry: 973

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	4.724649190606844
Encrypted:	false
SSDEEP:	3:YRMZXKOLz59ifHtKfnS3uWwMLjSnBMB3RYAs2HJHdLUfNVJpPdFH/JJVrmV:Y+T98NruW3LunAYlGdLUfNVJpPDfJJVU
MD5:	72EE6B03CD3D70450D566B2E66E8992F
SHA1:	9AF52020A954D60319878A881B741BAE8A3B93C5
SHA-256:	71F0C958E33905CB028DFD76FF7FCFFA9D57A260845594E84D116530E3F80A36
SHA-512:	D21327FED8735C7C1A636A1784A19A07F40E0F155C58483147745B2D2936D000C4F5CCD0B8E6E7B5298C362508102235343B0A7D9D927BF4A88F012D714636F8
Malicious:	false
Reputation:	low
URL:	https://proc.ad.cpe.dotomi.com/cvx/client/direct/launcher?version=1.1.1&lid=681
Preview:	{"tid":681,"solution":[{"name":"publink","src":"https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js","configName":"publink_options","config":{"pubcid":{},"loadAts":false}}]}

Chrome Cache Entry: 974

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 975

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1829
Entropy (8bit):	5.458111260761834
Encrypted:	false
SSDEEP:	48:Yj6k2mBy/bGO9FDBdz6GOBfbZ2jjSZx1GO5XjGO+mrOGOtNdNbHGOWhn:xCRSBH9PsxkfbEkDbm5n
MD5:	5085C90EF93602B299E16EB2E779FDEB
SHA1:	25777AB7E3DD8320C24D6EB7C54628D7D8D31BC7
SHA-256:	0EAF9782F8E2CFCDA4146593A20BE217E21D6DB6C65009A8532B6D02529542BC
SHA-512:	DBC25177831086CD6F218D61CCF903D12C4ECC5E61FF531E332D4EB25F273EC6BC39423CB1789A08C51DE4F0CC33AE686973CC43DC41B090EEDBA0FE4744E69A
Malicious:	false
Reputation:	low
Preview:	{"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://sync-tm.everesttech.net/upi/pid/URnmbSKM?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Datm%26i%3D%24%7BTM_USER_ID%7D&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=","t":"i"},{"u":"https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv","t":"f"},{"u":"https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID","t":"i"},{"u":"https://match.justpremium.com/match/gg?ex_uid=u_bd73a985-3ef7-4416-a679-3a9309181613","t":"i"},{"u":"https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum

Chrome Cache Entry: 976

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 191x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5784
Entropy (8bit):	7.964239408317459
Encrypted:	false
SSDEEP:	96:vUfsCjjNLFK9TLjH30scRHqFO9Wio000ZkAQTk0dHp6dg8awMvUdWhRLpC8h:CNJK5T4oFOtwIQ6e8awMvUdI
MD5:	7847B2BC204C74F8490F233E7392C75F
SHA1:	0238E8F22E01FC33F62DAB7D3816EEBADE735642
SHA-256:	AC2542D35FAA1CFA0439D932CC54702FFB5C347A20414C8256854F3368270E2C
SHA-512:	A83C1BA54E6E2F7AD7838FD390A23DF8B8EEBF88E63D70787B7628F35A4A17CD8C9B13FB9AD85291D7C82170328686C805C0BCA6EEAED1C6D4450789C62A918D
Malicious:	false
Reputation:	low
URL:	https://imageproxy.us.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=40380&q=80&r=0&u=https%3A%2F%2Fimage.s5a.com%2Fis%2Fimage%2Fsaks%2F0400017770478_ANTIQUEROSE_486x684.jpg&v=3&w=400&rid=6&s=1dLZShjwmO9JI4zJ_HS_kNrc&b=400
Preview:	RIFF....WEBPVP8 .....n.......>m0.H$".!&.J....gn.pn..X~..o.....\....=L.....E.?..F.....g.......w..u.t.....8.9.=...gc.c...\.^....#....zb.........(f,>.}.......\|.Z... ..=F...q..@.2.....ihn.........B,t.p@. ...i j.<...OO........Q.L.G.Y....z-........<.vd.j.&..2[z..U.C.V.).F.E..Uv.^...9.q%.4...,].8(j)o.....Jf...g.`...#..-i.Z/.5X.....".#H.........]..}.g...S_.xg.nG5....\....R..S.+..!.h.Q]/..I.av..:.5-+>.,.k.9..y.....'..37..X.j...@./..0\|3.Q...94.rR.%FW.g..^.....9.La..T.7..V..T...%.p..R..Nj..U.....P...\$.~....+.q.L.1.Oh8..J8!.\|3...nn...5L.-...w....H..l.1....p.V.......Jn....V.4....\....<_...G...`.D.r....sl<.l..Rk..[.....j.B._..].a.}.......f............'h.....-..d.A..eM...:{.>......^...+.............G...y.3...8..0"J..i.\.j,..d...tHV.....$../..\|..r...F..pt.s......o..5.5E.2y.A....\|...\|..Y.v..Q..$I.A.an.......G...3C..B!..c.s,....q.-.......N...q. ....f..6....0..>b...\|.K..p.(c9SX.JdL...$........L,..d.Jh./.....8.....3,.l~c9.\|......6.^_)..\

Chrome Cache Entry: 977

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:IvOKPUe:IvNUe
MD5:	53FAB767ECBD3BF07990B10246BEFBD4
SHA1:	49044085BB137D175D261B5FB9617C6F0F302C49
SHA-256:	BDEED1E1C0751610C8F3DC2A5C78C93F841C366B36A7F7A54F5E6752C2656C05
SHA-512:	B77C74696CD64C96E177CC32890BA8B666E13578C038BE4E4E5D4AB0438CB8E2B7B3539AD4089F9AD987C1BD53926B279EF7ADD30C690DC2592C5C4239465559
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/skeleton.js?adslot=hluad_728x90_
Preview:	"ad placeholder";

Chrome Cache Entry: 978

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3244), with no line terminators
Category:	downloaded
Size (bytes):	3244
Entropy (8bit):	5.270999983001462
Encrypted:	false
SSDEEP:	48:q6uJMlTKQKMx1hL0W+mqIPSUomzvzhpnc2oL9EuODEVoQ/aC/Zn5Xdv7B:q6uulTZ57+/IaUbo2a9E5EhCcNjB
MD5:	96168F6199E6C869630832A1BB3BE2ED
SHA1:	69F7707886CDCC00D1D671E5A19EC8CDCC11FABF
SHA-256:	BBCC885AEF18F58BA59925462CCEAE1B6CFD49719BEA6595157881DFE124D07E
SHA-512:	316CF13100B68BE95BBDF699898DA5F161E2C74756684210F900866603FB406AA88F9FB62F2435519CC7FD1D86F8A787F5CE3F8D59D7AA55ED190EC0F34D5C0F
Malicious:	false
Reputation:	low
URL:	https://cdn.sided.co/embed-assets/load.min.js
Preview:	function loadSidedScripts(){var e=!(!window.sidedEmbed\|\|!window.sidedEmbed.forceLoad);document.querySelector(".sided-widget-script")\|\|(document.querySelector(".sided-widget")\|\|e)&&document.querySelectorAll(".sided-widget").forEach(function(d){new IntersectionObserver(function(){if(!d.hasAttribute("data-v-app")&&d.offsetTop-800<window.scrollY+window.innerHeight){const t=Array.from(document.querySelectorAll("script")).find(function(e){return-1!==e.src.indexOf("sided.co/embed-assets/load")}).src.split("/load")[0]+"/";var e=document.createElement("link");e.setAttribute("rel","stylesheet"),e.setAttribute("href",t+"css/style.0733394657b1cc66.css"),document.head.appendChild(e),window.loadSidedJs=function(e,t){var d=document.createElement("script");d.setAttribute("src",e),d.setAttribute("async",!0),d.setAttribute("type","text/javascript"),d.classList.add("sided-widget-script"),document.head.appendChild(d),d.addEventListener("load",function(){t&&t()})},window.loadSidedJs(t+"client.js",function(

Chrome Cache Entry: 979

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	4.958576798571546
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBGKQmd6E+1dTMqfLpFGH+Bhn:8WiIUemo/H1fCYKbY4DCVeGKGv4qfnGk
MD5:	BC4962E8ABDB544D6525C8DC6E86CBA2
SHA1:	B6D50FD4D19E7AB3557EC69417B40248FDDB4ACA
SHA-256:	064C43072C2A5508D49B2EBB979E6EBFFF88F9347D64818CCF05120788121DA1
SHA-512:	7510A0236BE6D2A202619B9AD19E182F33BCAB8FA97634270CD186F8F2C9015C799DB273B0A56329BC5BB853425D4BD107EB7B88D9F0C08FAEC4F148D33F7658
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=4&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22home_Top_728x90%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Ftop%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%7D%2C%22vendors%22%3A%7B%22arcspan%22%3A%7B%22data%22%3A%7B%22default%22%3A%7B%22site%22%3A%7B%22name%22%3A%22arcspan%22%2C%22cat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22sectioncat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22pagecat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22keywords%22%3A%22Outlander%20(TV%20series)%2CTony%20DiNozzo%20and%20Ziva%20David%2CJamie%20Fraser%20(character)%2CClaire%20Fraser%20(character)%2CEntertainment%2CTelevision%2CDiana%20Gabaldon%2CRichard%20Lewis%20(comedian)%2CavM7hHWe%2C8FWC3Bns%22%2C%22content%22%3A%7B%22data%22%3A%5B%7B%22name%22%3A%22arcspan%22%2C%22segment%22%3A%5B%7B%22id%22%3A%22640%22%7D%2C%7B%22id%22%3A%22432%22%7D%5D%2C%22ext%22%3A%7B%22segtax%22%3A6%7D%7D%5D%7D%2C%22domain%22%3A%22www.justjared.com%22%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22ref%22%3A%22%22%7D%7D%7D%7D%7D%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-minuteMedia_pm-db5_n-Ogury_ppt_snb_cnv_n-nativo","cb":"4"})

Chrome Cache Entry: 980

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=0&gpp=&gpp_sid=&google_gid=CAESELL55Lb_r68ETm1PZvTsUw8&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 981

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssYXwpUmGxE6IG7EiwGNuDrPOPI17ZkJUSElII_8A9k2UEZVUVxueYj5YMmKhQVAcVSqou6RgngCnTGj1lBU8aV7JAC00MGIgu5E9vrttsVfLiLAexv11CbsSvux2Ze9YCtEFzCH2B5o8mx122JpyUoDkzBsL6zwms&sig=Cg0ArKJSzG2zrxTymKnsEAE&id=lidartos&mcvt=0&p=1246,309,1496,609&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20240417&bin=7&avms=nio&bs=1280,907&mc=0&vu=1&app=0&itpl=19&adk=737501260&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=946520000&rst=1713532400642&rpt=132&isd=0&lsd=0&ec=1&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 982

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	"https://ids.ad.gt/api/v1/g_match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&google_gid=CAESEDVRfbnB3sBtm8cOOwXsULM&google_cver=1&google_ula=450542624,0"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 983

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46630
Entropy (8bit):	5.990683244439685
Encrypted:	false
SSDEEP:	768:oQ+AC7+Clpxixm7VaHkuoa9tqIv8Cxt+HTUVgOpVCzlx9t0two6d/pomRzzII+dx:ZR3YoVBC5x9t0tsd/pXS
MD5:	6FB37AC1457A9A87F8AFE1485C57AAF1
SHA1:	BA8521965787E92B4321B5E219F758C4D8E8B0C1
SHA-256:	114958F34055F3AE09EBFE48B78794F4FC9AB66578AA816B1D6FA51D229B9B72
SHA-512:	7E673395FBBFF6B67FA4CCB4956A30269CF78F60913A42F8A41F9E0E548E3E455BABD35E11359318420D9C69CBEF9E9CD3EDD67A1ADCE08AE02F98E8DA62124E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1961765009388584&correlator=2920935011648889&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cincontent%2Chome%2C1&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=300x250&ifi=7&didk=3656293417&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532356746&lmt=1713532038&adxs=309&adys=1231&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=5&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=610x-1&msz=300x-1&fws=516&ohw=1280&psts=AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR%2CAOrYGslC9W3W_3AujtsHnyKtJMzQcYpr29r_5ZsX6pG6_BNMAK-nIoeky6P_RVwjaPSfPclOilDIK7goP-od-fRqMNHEBgF2Smxd6_f4hUde5MH9o3CL%2CAOrYGsnbkBJrfC_SMFmhI3gHn7Jbpoegxe5Tygpb8xpqz8X_Ccj3kILwyL1gliBCXmc5cwrDFAzR2NL0OvXhP2KjkGmw83sDL02mdFW4VBm1WIr2pwyN%2CAOrYGsnsJAV7ez72LGmmn6d2Ht2A1Jn70sMm93fMBjaT35p272D3_9exGuvZfel5_89_mevwxZnFTZISElsmYFWRA8HzuOEWjshP8ez0zEdgLw%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_InContent1%26pos%3Dhome_InContent1%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=3508217207&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ-
Preview:	{"/21854935662/justjared/desktop/incontent/home/1":["html",1,null,null,1,250,300,0,0,null,null,null,1,null,[138467780849],[6530590001],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslregH8m33151vWWC7D4Rvn983iFcPFWuZWCrwAU1TPh6mxxmg9WYDeZtvtKYM9Hp3z3T7PomhWtAjIo6mjk6L2ixyWnn8zRJShdK6s_4k8Nseg","CO_OqbytzoUDFXH9KAUddqIODQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"7",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240417" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Clos

Chrome Cache Entry: 984

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 985

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12673), with no line terminators
Category:	downloaded
Size (bytes):	12673
Entropy (8bit):	5.340730421110194
Encrypted:	false
SSDEEP:	384:aiCLp3UyC/ibiu18sSjC3l9z+VcqoGbG74mPg:aiC5o/ibiu18sRn+VcUbD
MD5:	E488B9732D7D13F50743325BC71371C3
SHA1:	3BF389D3CA9E634393F664F11373CA61EC9C0822
SHA-256:	A2E14A498CFCC1B6920F069A9D657AD3C6FBBE217DD26DBFE54815DB5107FED6
SHA-512:	C65F2D3835604ACB17A3F00CF3A1998B54A7D35E367827D56F5BFB5EC43E61F2E7B7EF93FC79DC0FCB29D1C6782B73E5AF4769040FD5AB293A991CC1B41BF936
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/animejs/animejs.js
Preview:	window.animejs=function(n){var P,u={update:void 0,begin:void 0,run:void 0,complete:void 0,loop:1,direction:"normal",autoplay:!0,offset:0},c={duration:1e3,delay:0,easing:"easeOutElastic",elasticity:500,round:0},r=["translateX","translateY","translateZ","rotate","rotateX","rotateY","rotateZ","scale","scaleX","scaleY","scaleZ","skewX","skewY","perspective"];function l(t,n){return-1<t.indexOf(n)}var d={arr:function(t){return Array.isArray(t)},obj:function(t){return l(Object.prototype.toString.call(t),"Object")},pth:function(t){return d.obj(t)&&t.hasOwnProperty("totalLength")},svg:function(t){return t instanceof SVGElement},dom:function(t){return t.nodeType\|\|d.svg(t)},str:function(t){return"string"==typeof t},fnc:function(t){return"function"==typeof t},und:function(t){return void 0===t},hex:function(t){return/(^#[0-9A-F]{6}$)\|(^#[0-9A-F]{3}$)/i.test(t)},rgb:function(t){return/^rgb/.test(t)},hsl:function(t){return/^hsl/.test(t)},cssPredefinedColors:["black","white","red","blue","green","yell

Chrome Cache Entry: 986

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	4.895837648995688
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4D/YVvTMqfLpFGH+nM:8WiIUemo/H1fCYKbY4DAv4qfnGH+nM
MD5:	CEA9A914BAEB0A2647147B850882BC09
SHA1:	7540BC747640C9D64D774B9EBE46B4B096F5483A
SHA-256:	642F5DCDCE7E7915876DD5AE2306046D796D9A27638AE83F67333C836D0CD905
SHA-512:	685BE5AE8B45EDA8FF72A17C4DA62C315F49129D372EF0680CCED3767DDF6B202E3CCB852F12D8D44E231EA0E0760F14DBBB7492ECA8227BBC750AACC0B22945
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hb2PxCzr4qEBR&cb=1&ws=0x0&v=24.305.1002&t=2000&slots=%5B%7B%22id%22%3A%22JustJared_OutStream%22%2C%22mt%22%3A%22v%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&cfgv=1&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22id5%22%3A%22ID5*uZhNJeNQBgx87sMx90lL2EXw57w4zb_3KDcx5Av_vnyWd_VuPqYemxgG9Sy2QvRz%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_n-Ogury_ppt_snb_cnv_n-nativo","cb":"1"})

Chrome Cache Entry: 987

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=15927&puuid=Vz%2FbJWYibdPMu3ZvZk8k2Q%3D%3D&us_privacy=&_rand=1713532408924.2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 988

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=131&external_user_id=18072662074279703536
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 989

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (354)
Category:	downloaded
Size (bytes):	5157
Entropy (8bit):	4.47080590136423
Encrypted:	false
SSDEEP:	96:Tq6D+4Yx63UgBt9xbHo961+3TGM8Hqxu3pAyaf:BK4YEf3bI961KT38Hqxu3pof
MD5:	B8F0EF29CA2A86358DE0AD2FA8CA6C73
SHA1:	831AA08F2026D27C7CAE0BD4696FC575B937AD2A
SHA-256:	875730A829A38CB2B8F8A866C60E4635BC26C4BBABD6A8051CDD403CFAE198EF
SHA-512:	B9C66AFD6A27B09A6A4B24EC0E8AE55B461CE809B9B401F4E27A197345E18A85B8BA1F73452CE81145326BC1813935C3FD186A9347DFBF0124A434E5C85AAA38
Malicious:	false
Reputation:	low
URL:	https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1
Preview:	<!DOCTYPE html><html lang="en"><head>. <title>Notice Message App</title>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no,viewport-fit=cover">. <meta name="mobile-web-app-capable" content="yes">. <meta name="apple-mobile-web-app-capable" content="yes">. <link rel="manifest" href="/manifest.json">. <style>body,html{font:14px/1.21 Helvetica Neue, arial, sans-serif;font-weight:400;margin:0;padding:0;min-height:100%;}</style>. <link href="/Notice.c6498.css" rel="preload" as="style"><style>body,html{font:14px/1.21 Helvetica Neue,arial,sans-serif;font-weight:400;margin:0;padding:0;height:100%;min-height:100%;text-size-adjust:none;-webkit-text-size-adjust:none;-moz-text-size-adjust:none;-ms-text-size-adjust:none;}body:not(.user-is-tabbing) :focus{outline:none;}</style></head>. <body>. <script type="__PREACT_CLI_DATA__">. {"preRenderData":{"url":"/"}}. </script>. <script>. i

Chrome Cache Entry: 990

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.051768688736887
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFFFlpimp:6v/lhPfZMysO82FFlpimp
MD5:	35800716E266902E4FE68AB558D981FB
SHA1:	245821672E258A57FE6024ECFEA06B61A52999CE
SHA-256:	44D5041F007D30A9B7079BD3A42EF6DA96C4CDA10A25B1BCC5A0A6F92B0AADCC
SHA-512:	7FC8C5198762183076272E8B878B97E3577703C974A8A5F1496096D4990360A25954D9C3A0D0CD22620FCF4C710B4B92645C139C711466E7DAB5F6E14790642A
Malicious:	false
Reputation:	low
URL:	"https://silo40.p7cloud.net/p.png?visit=prebid&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed=setprebid:{%22tpc%22:1,%22eng%22:40,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22sd%22:%22NaN%22,%22loc%22:{%22Country%22:%22US%22,%22CountryRegion%22:%22GA%22,%22City%22:%22Atlanta%22,%22PostalCode%22:%2230301%22,%22MetroCode%22:%22524%22},%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22a2%22:[],%22clicks%22:1,%22vi%22:0,%22p%22:%22https://www.justjared.com/%22}&cb=1713532405033"
Preview:	.PNG........IHDR....................IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 991

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1461
Entropy (8bit):	6.7208619205274704
Encrypted:	false
SSDEEP:	24:2aTjH5UayHrg4NiL2uueqiIz0gqZFXogi8Xl/lC9:2Kj5UayLg4sLXueqi6xqbYgZK9
MD5:	0B75F9D407F7447C0EDF988DFF95C3A4
SHA1:	0CED9AB401855469D7A0E2E21B881D9FCBCC96EE
SHA-256:	C19BE565A18EA79B8B7A3D565C928E582E6AB2AF3A6B299477E91AF605544AB9
SHA-512:	B2BEB0E8A44F1A12C88C0D5216429F68878C7E9FF7A6B70F317313866FE044EA6886886FAE58251CD15033F35D7BA65591ED895BF69E156ADF45BF0B15F19DE1
Malicious:	false
Reputation:	low
URL:	https://s3.castbox.fm/webstatic/images/logo_gray.0b75f9d4.png
Preview:	.PNG........IHDR...,...2.............PLTE.........UUU...fffUUUIII```UUUFFFNNNIIIDDDPPPKKKCCCMMMIIICCCJJJGGGEEEIIIFFFDDDBBBHHHFFFDDDGGGEEECCCAAAFFFDDDCCCAAADDDCCCAAAEEEBBBAAAEEECCCBBBAAADDDCCCBBBAAADDDCCCAAADDDBBBBBBAAACCCAAACCCBBBBBBAAAAAACCC@@@CCCAAACCCBBBAAA@@@BBBAAABBBBBB@@@BBBAAA@@@BBBAAABBBAAABBBAAAAAA@@@AAA@@@BBBAAAAAAAAA@@@BBBAAABBBAAABBBAAA@@@@@@AAAAAA@@@AAAAAA@@@AAA@@@AAAAAAAAAAAAAAAAAA@@@AAA@@@@@@@@@AAAAAAAAAAAA@@@@@@@@@AAAAAAAAA@@@AAA@@@@@@AAA@@@@@@AAA@@@@@@AAA@@@AAA@@@@@@AAAAAA@@@AAA@@@AAAAAA@@@AAAAAA@@@@@@AAAAAA@@@@@@AAAAAA@@@@@@AAAAAA@@@AAAAAA@@@@@@AAAAAA@@@@@@........tRNS........................... !"$%&'()+-./023456789:;<=?@BFGHKLMQRSTWXZ\]^_abdegijklnpqtuz{}........................................................................................F..=....IDATH..._Kq....6.J-!!.T...R.E)D.%..K.K.~)..K...n..e.^....KM;.....e....=...9.3...\....R...6..0v1...N._..M..z\|.i..Z...C....?.0qu......l..;...{. 4.r.....UX\|W..6g....`.&f...N.[q.4.....g.....r.......W....._...p!

Chrome Cache Entry: 992

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 993

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	193452
Entropy (8bit):	5.32686031764812
Encrypted:	false
SSDEEP:	3072:n1idq9Gw/AdDvisqgElowInbrdsYvm7MSk:n1XGw4dDBqgqInbrd/vm7Mb
MD5:	373BEE09DBF3C8981A4561E3E280CDDA
SHA1:	89A3EB5C5EF85C6851B591EFFF8F89ABA36E002F
SHA-256:	3B7C674A82F8A947FC5A891870AA6E78930E7FE3533793921AF870854BC0BF00
SHA-512:	B221C775B83744EBE7C4C8168F1301F0528AB7CE60341FD1E204B65EBC10920551CCC3DE7FF6A9A4B6B9904E1EAAACD949C3E4962224DDE58C080722072E9243
Malicious:	false
Reputation:	low
URL:	https://resources.infolinks.com/js/1928.005-3.034/ice.js
Preview:	var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};function _defineProperty(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}!function(){"use strict";try{var appNamespace="$ice",what,$extend,$fn,$create,$root,$infolinks,loggly,event,utils,comm,shared,products,autoPlacement,externalTags,updater,inplayer;window[appNamespace]?window[appNamespace].event.fire("checkQueue"):(what=function(e){return null==e?"undefined":{}.toString.call(e).match(/\s([a-z\|A-Z]+)/)[1].toLowerCase()},$extend=function(e){if("object"==this.$root.what(e)){for(var t in e)this[t]=e[t];return this}this.$root.logger.warn("source is not an object",this)},$fn=function(e,t){this&&this!=window&&("function"!=this.$root.what(t)?this.$root.logger.warn(e+" is not a function",this):((this[e]=t).$id=e,t.$parent

Chrome Cache Entry: 994

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/server_match?partner_id=1669&r=https%3A%2F%2Fpixel.s3xified.com%2Fdspsync%2F%3Fpid%3D1667%26buid%3D%7BPUB_USER_ID%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 995

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (327)
Category:	downloaded
Size (bytes):	3673
Entropy (8bit):	5.446539446708674
Encrypted:	false
SSDEEP:	96:FaaOBmd4oD4CZHGYPUNx/fif4mkrnqh03Rv4FI4u+4Jxh:FafDZuj+yf4Frqu3y9cp
MD5:	47E18F077A26CEBC5D0C6165B4A817AB
SHA1:	3812AB330868379EE1A0E0F95A4C698558266C02
SHA-256:	D275BCFC15A6981E8A6BC55D6295F5406042B7ED19C299B8B000EE8DF3A6E077
SHA-512:	9752AB19002D39D3BC721F547039DFCE0852B12E0744F5CB8A6DAFF0A3EFF3A30304B5F5FD2FE9ED778F00ECD370C385AD6F78D2FB9D0F8319B12DD4DBBBE49E
Malicious:	false
Reputation:	low
URL:	https://cookies.nextmillmedia.com/sync?gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&redirect=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D1060%26type%3Diframe%26id%3D%5BNMUID%5D%26auxuid%3D
Preview:	<iframe width=1 height=1 src="https://ssp.api.tappx.com/cs/usync?idmn=1060&type=iframe&id=&auxuid="></iframe>..<iframe width=1 height=1 src="https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&ru=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3D33across%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D33XUSERID33X&id=zzz000000000002zzz"></iframe>..<iframe width=1 height=1 src="https://prebid.a-mo.net/cchain/0?gdpr=0&gdpr_consent=&us_privacy={{US_PRIVACY}}&gpp=&gpp_sid=&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D%24UID"></iframe>..<iframe width=1 height=1 src="https://ib.adnxs.com/getuid?https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dappnexus%26nmuid%3D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%7B%7BUS_PRIVACY%7D%7D%26uid%3D%24UID"></iframe>..<iframe width=1 height=1 s

Chrome Cache Entry: 996

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=3&external_user_id=58876622-6dd1-4d00-bd2b-ad74dd749760&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 997

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	4.1345195377278445
Encrypted:	false
SSDEEP:	3:YWQRAA2nvX0LKRFSABHY:YWQmvv/dxY
MD5:	C466BD434DB29CF02793F8522FDE5F3A
SHA1:	F39A01BB0264479DBE9A4BFB0B80AE0B3B0E8154
SHA-256:	D0D2E098CD489EF7BC528C86DE8AB5C51B5D6CDF9B76A8B08766036992F0D2F4
SHA-512:	81EEC1FC87BBC2A95B34AFF28CBBC6D13EC6C9E78BF76DD6C586ADB48D4E01533D97F1A56BBCC60BC386DF78F6A85252BECD71A945B6AA014A7717EA61CB8087
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/ppid?pid=0015a0000344WLkAAM&ver=1.9.0&us_privacy=1YNN
Preview:	{"succeeded":false,"error":"Country not allowed"}

Chrome Cache Entry: 998

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56423)
Category:	downloaded
Size (bytes):	56424
Entropy (8bit):	5.406089109166372
Encrypted:	false
SSDEEP:	768:bemBuCcWa5a+eJVofy1a7eaU4wXNWqIzi6W94Ndx6EdG2LQWNWXtIL9AAkXPSbux:zurJKiia7eagGtx68IQ9AAkXoW
MD5:	C415DE3F8A5777CD4F6B69FDF25F5560
SHA1:	96B90E46FA7957C6CF338E8D94021509DA3243B9
SHA-256:	8B1FFBD651B4E3674A6B368E6F35692A0F1F0DE11101847833F4F3A79A626158
SHA-512:	CF0F80EE67AA628C11488309FD67FD76DD0604B7044D644105A91E03C61B4CBA1429EF0A393564A43A0C816535E8DEA51FA65104139590886A51BF9157FB0D42
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?h=mediatradecraft-com&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 999

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://measurement-api.criteo.com/register-source?impressionId=66226e1072c769f074dfe92d46a8fff1&partner_domain=regrowhairformula.com&external_uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff&partner_id=91644&source_type=event&campaign_id=429940&marketing_objective_type=0
Preview:	OK

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 15:12:23.465548992 CEST	192.168.2.5	1.1.1.1	0xf13b	Standard query (0)	www.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:23.465724945 CEST	192.168.2.5	1.1.1.1	0x6ec8	Standard query (0)	www.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:23.577800989 CEST	192.168.2.5	1.1.1.1	0x2a4b	Standard query (0)	www.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:23.577959061 CEST	192.168.2.5	1.1.1.1	0x2b2f	Standard query (0)	www.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:24.373188019 CEST	192.168.2.5	1.1.1.1	0x5659	Standard query (0)	d188m5xxcpvuue.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.373370886 CEST	192.168.2.5	1.1.1.1	0xdbd	Standard query (0)	d188m5xxcpvuue.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:24.384701014 CEST	192.168.2.5	1.1.1.1	0xf4d3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.384865999 CEST	192.168.2.5	1.1.1.1	0xf8e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:24.387098074 CEST	192.168.2.5	1.1.1.1	0x37f4	Standard query (0)	cdn01.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.387327909 CEST	192.168.2.5	1.1.1.1	0x9bc1	Standard query (0)	cdn01.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:24.999699116 CEST	192.168.2.5	1.1.1.1	0xb694	Standard query (0)	cdn01.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.999870062 CEST	192.168.2.5	1.1.1.1	0x90fb	Standard query (0)	cdn01.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.367901087 CEST	192.168.2.5	1.1.1.1	0x70e9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.368474007 CEST	192.168.2.5	1.1.1.1	0xeff5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.685333967 CEST	192.168.2.5	1.1.1.1	0x2399	Standard query (0)	s.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.686115980 CEST	192.168.2.5	1.1.1.1	0x1982	Standard query (0)	s.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.763175011 CEST	192.168.2.5	1.1.1.1	0x6924	Standard query (0)	cdn.privacy-mgmt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.763314962 CEST	192.168.2.5	1.1.1.1	0x4785	Standard query (0)	cdn.privacy-mgmt.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.764169931 CEST	192.168.2.5	1.1.1.1	0x7c78	Standard query (0)	01.cdn.mediatradecraft.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.764331102 CEST	192.168.2.5	1.1.1.1	0x1b10	Standard query (0)	01.cdn.mediatradecraft.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.764972925 CEST	192.168.2.5	1.1.1.1	0x5623	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.765130043 CEST	192.168.2.5	1.1.1.1	0x91a7	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.765471935 CEST	192.168.2.5	1.1.1.1	0x5cf3	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.765701056 CEST	192.168.2.5	1.1.1.1	0xed8	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.766093969 CEST	192.168.2.5	1.1.1.1	0xd87	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.766238928 CEST	192.168.2.5	1.1.1.1	0xa085	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:25.768125057 CEST	192.168.2.5	1.1.1.1	0x3d95	Standard query (0)	cdn.sided.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.768301964 CEST	192.168.2.5	1.1.1.1	0x3e58	Standard query (0)	cdn.sided.co	65	IN (0x0001)	false
Apr 19, 2024 15:12:26.373471022 CEST	192.168.2.5	1.1.1.1	0x5f5b	Standard query (0)	castbox.fm	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:26.374092102 CEST	192.168.2.5	1.1.1.1	0x4d49	Standard query (0)	castbox.fm	65	IN (0x0001)	false
Apr 19, 2024 15:12:26.376621008 CEST	192.168.2.5	1.1.1.1	0xda2a	Standard query (0)	mediatradecraft-com.videoplayerhub.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:26.377126932 CEST	192.168.2.5	1.1.1.1	0x4a99	Standard query (0)	mediatradecraft-com.videoplayerhub.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:27.329607010 CEST	192.168.2.5	1.1.1.1	0x4122	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:27.330095053 CEST	192.168.2.5	1.1.1.1	0x94c2	Standard query (0)	btloader.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:28.333741903 CEST	192.168.2.5	1.1.1.1	0x728a	Standard query (0)	r.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.334268093 CEST	192.168.2.5	1.1.1.1	0xb81a	Standard query (0)	r.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:28.352435112 CEST	192.168.2.5	1.1.1.1	0xc21f	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.352435112 CEST	192.168.2.5	1.1.1.1	0x7cf1	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 15:12:28.354562998 CEST	192.168.2.5	1.1.1.1	0xa572	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.354562998 CEST	192.168.2.5	1.1.1.1	0x24	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:28.355142117 CEST	192.168.2.5	1.1.1.1	0x17eb	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.355271101 CEST	192.168.2.5	1.1.1.1	0x6670	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:28.356390953 CEST	192.168.2.5	1.1.1.1	0x3352	Standard query (0)	cdn01.justjaredjr.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.356930017 CEST	192.168.2.5	1.1.1.1	0x8c16	Standard query (0)	cdn01.justjaredjr.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.045701981 CEST	192.168.2.5	1.1.1.1	0xcd6e	Standard query (0)	s3.castbox.fm	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.045795918 CEST	192.168.2.5	1.1.1.1	0x612	Standard query (0)	s3.castbox.fm	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.127934933 CEST	192.168.2.5	1.1.1.1	0x4416	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.128549099 CEST	192.168.2.5	1.1.1.1	0xbb16	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.167516947 CEST	192.168.2.5	1.1.1.1	0xf838	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.168123007 CEST	192.168.2.5	1.1.1.1	0x65d2	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.187304974 CEST	192.168.2.5	1.1.1.1	0x4d88	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.187776089 CEST	192.168.2.5	1.1.1.1	0x2db2	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.219697952 CEST	192.168.2.5	1.1.1.1	0x5f1b	Standard query (0)	js.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.219847918 CEST	192.168.2.5	1.1.1.1	0x1590	Standard query (0)	js.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.220921993 CEST	192.168.2.5	1.1.1.1	0x7df7	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.221570015 CEST	192.168.2.5	1.1.1.1	0x46be	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.260133982 CEST	192.168.2.5	1.1.1.1	0x2110	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.260551929 CEST	192.168.2.5	1.1.1.1	0x5156	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.295253038 CEST	192.168.2.5	1.1.1.1	0xf32	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.295653105 CEST	192.168.2.5	1.1.1.1	0x365a	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.297122002 CEST	192.168.2.5	1.1.1.1	0x6395	Standard query (0)	aacdn.nagich.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.297525883 CEST	192.168.2.5	1.1.1.1	0xa0fe	Standard query (0)	aacdn.nagich.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.374495029 CEST	192.168.2.5	1.1.1.1	0xf7b0	Standard query (0)	www.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.374495029 CEST	192.168.2.5	1.1.1.1	0x8403	Standard query (0)	www.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.390472889 CEST	192.168.2.5	1.1.1.1	0xfd34	Standard query (0)	r.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.392124891 CEST	192.168.2.5	1.1.1.1	0x1cb8	Standard query (0)	r.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.394345045 CEST	192.168.2.5	1.1.1.1	0x6c75	Standard query (0)	cdn.privacy-mgmt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.394345045 CEST	192.168.2.5	1.1.1.1	0xcc38	Standard query (0)	cdn.privacy-mgmt.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.400345087 CEST	192.168.2.5	1.1.1.1	0xd19d	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.400738001 CEST	192.168.2.5	1.1.1.1	0x4cae	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.403165102 CEST	192.168.2.5	1.1.1.1	0xb234	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.403445005 CEST	192.168.2.5	1.1.1.1	0x7a46	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.410830975 CEST	192.168.2.5	1.1.1.1	0xdc39	Standard query (0)	cdn01.justjaredjr.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.411098957 CEST	192.168.2.5	1.1.1.1	0xa041	Standard query (0)	cdn01.justjaredjr.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.641407013 CEST	192.168.2.5	1.1.1.1	0xcb09	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.641880035 CEST	192.168.2.5	1.1.1.1	0x8cb0	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.784512997 CEST	192.168.2.5	1.1.1.1	0xe746	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.785348892 CEST	192.168.2.5	1.1.1.1	0x157	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.913376093 CEST	192.168.2.5	1.1.1.1	0x8ed1	Standard query (0)	api2.sided.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.913376093 CEST	192.168.2.5	1.1.1.1	0x11bc	Standard query (0)	api2.sided.co	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.957063913 CEST	192.168.2.5	1.1.1.1	0x8b6f	Standard query (0)	t.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.957356930 CEST	192.168.2.5	1.1.1.1	0x8764	Standard query (0)	t.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:29.975243092 CEST	192.168.2.5	1.1.1.1	0xc4e1	Standard query (0)	p.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.975878954 CEST	192.168.2.5	1.1.1.1	0xc0b3	Standard query (0)	p.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.077687979 CEST	192.168.2.5	1.1.1.1	0x7a2f	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.077883959 CEST	192.168.2.5	1.1.1.1	0xeafc	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.110727072 CEST	192.168.2.5	1.1.1.1	0xfc55	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.110727072 CEST	192.168.2.5	1.1.1.1	0xecab	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.113095045 CEST	192.168.2.5	1.1.1.1	0x39da	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.113301039 CEST	192.168.2.5	1.1.1.1	0xd892	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.767021894 CEST	192.168.2.5	1.1.1.1	0x4e65	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.767488003 CEST	192.168.2.5	1.1.1.1	0x9111	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.769952059 CEST	192.168.2.5	1.1.1.1	0xf28b	Standard query (0)	aba.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.777365923 CEST	192.168.2.5	1.1.1.1	0x3651	Standard query (0)	aba.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.777530909 CEST	192.168.2.5	1.1.1.1	0xc32	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.777939081 CEST	192.168.2.5	1.1.1.1	0x8487	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.887778997 CEST	192.168.2.5	1.1.1.1	0x9850	Standard query (0)	gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.887968063 CEST	192.168.2.5	1.1.1.1	0x3fec	Standard query (0)	gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:30.889506102 CEST	192.168.2.5	1.1.1.1	0xa85f	Standard query (0)	c.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.889885902 CEST	192.168.2.5	1.1.1.1	0x2dcc	Standard query (0)	c.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.010529995 CEST	192.168.2.5	1.1.1.1	0xbdab	Standard query (0)	cdn.privacy-mgmt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.010879040 CEST	192.168.2.5	1.1.1.1	0x3996	Standard query (0)	cdn.privacy-mgmt.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.028059959 CEST	192.168.2.5	1.1.1.1	0xfcfe	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.028316021 CEST	192.168.2.5	1.1.1.1	0xacc7	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.029098034 CEST	192.168.2.5	1.1.1.1	0xc534	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.029372931 CEST	192.168.2.5	1.1.1.1	0x21b	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.457619905 CEST	192.168.2.5	1.1.1.1	0x6471	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.460146904 CEST	192.168.2.5	1.1.1.1	0xdfd3	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.516288042 CEST	192.168.2.5	1.1.1.1	0x7f9d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.516707897 CEST	192.168.2.5	1.1.1.1	0x496d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.537838936 CEST	192.168.2.5	1.1.1.1	0x48d4	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.537991047 CEST	192.168.2.5	1.1.1.1	0x39f5	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.538604975 CEST	192.168.2.5	1.1.1.1	0x86e0	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.538909912 CEST	192.168.2.5	1.1.1.1	0x44b6	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.539211988 CEST	192.168.2.5	1.1.1.1	0x5d1f	Standard query (0)	silo40.p7cloud.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.539330959 CEST	192.168.2.5	1.1.1.1	0x310a	Standard query (0)	silo40.p7cloud.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.539690018 CEST	192.168.2.5	1.1.1.1	0x8b9f	Standard query (0)	cadmus.script.ac	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.539849997 CEST	192.168.2.5	1.1.1.1	0xe8b7	Standard query (0)	cadmus.script.ac	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.540242910 CEST	192.168.2.5	1.1.1.1	0xc263	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.540385008 CEST	192.168.2.5	1.1.1.1	0x4c79	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.542741060 CEST	192.168.2.5	1.1.1.1	0xc741	Standard query (0)	baitbaseball.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.542951107 CEST	192.168.2.5	1.1.1.1	0xafb5	Standard query (0)	baitbaseball.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.569941044 CEST	192.168.2.5	1.1.1.1	0xe3bd	Standard query (0)	tag.bounceexchange.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.570483923 CEST	192.168.2.5	1.1.1.1	0x7a98	Standard query (0)	tag.bounceexchange.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.606764078 CEST	192.168.2.5	1.1.1.1	0xf7b0	Standard query (0)	ats.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.606914043 CEST	192.168.2.5	1.1.1.1	0x4a48	Standard query (0)	ats.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.716504097 CEST	192.168.2.5	1.1.1.1	0x6b31	Standard query (0)	micro.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.716785908 CEST	192.168.2.5	1.1.1.1	0x58cc	Standard query (0)	micro.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.733802080 CEST	192.168.2.5	1.1.1.1	0x5766	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.734081984 CEST	192.168.2.5	1.1.1.1	0x42e1	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.735354900 CEST	192.168.2.5	1.1.1.1	0x1859	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.735414028 CEST	192.168.2.5	1.1.1.1	0xe482	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.831552982 CEST	192.168.2.5	1.1.1.1	0x4c7d	Standard query (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.831809044 CEST	192.168.2.5	1.1.1.1	0xe54c	Standard query (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.890916109 CEST	192.168.2.5	1.1.1.1	0xba18	Standard query (0)	everest.castbox.fm	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.891345024 CEST	192.168.2.5	1.1.1.1	0x6f86	Standard query (0)	everest.castbox.fm	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.972016096 CEST	192.168.2.5	1.1.1.1	0x2ee7	Standard query (0)	t.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.972362041 CEST	192.168.2.5	1.1.1.1	0x5577	Standard query (0)	t.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.974772930 CEST	192.168.2.5	1.1.1.1	0x1060	Standard query (0)	p.skimresources.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.975038052 CEST	192.168.2.5	1.1.1.1	0xa3a4	Standard query (0)	p.skimresources.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.979173899 CEST	192.168.2.5	1.1.1.1	0xcf56	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.979263067 CEST	192.168.2.5	1.1.1.1	0xbc97	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.982121944 CEST	192.168.2.5	1.1.1.1	0x83a3	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.982229948 CEST	192.168.2.5	1.1.1.1	0x30e7	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.983449936 CEST	192.168.2.5	1.1.1.1	0x961d	Standard query (0)	api2.sided.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.983812094 CEST	192.168.2.5	1.1.1.1	0x5001	Standard query (0)	api2.sided.co	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.985344887 CEST	192.168.2.5	1.1.1.1	0xbdca	Standard query (0)	aacdn.nagich.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.985675097 CEST	192.168.2.5	1.1.1.1	0xd2a	Standard query (0)	aacdn.nagich.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:31.987337112 CEST	192.168.2.5	1.1.1.1	0x3de8	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.987490892 CEST	192.168.2.5	1.1.1.1	0x30ce	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.000916004 CEST	192.168.2.5	1.1.1.1	0x921c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.001091003 CEST	192.168.2.5	1.1.1.1	0x286c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.488327980 CEST	192.168.2.5	1.1.1.1	0xacca	Standard query (0)	assets.bounceexchange.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.488714933 CEST	192.168.2.5	1.1.1.1	0xcc02	Standard query (0)	assets.bounceexchange.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.489131927 CEST	192.168.2.5	1.1.1.1	0x4cea	Standard query (0)	events.bouncex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.491828918 CEST	192.168.2.5	1.1.1.1	0x4dca	Standard query (0)	events.bouncex.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.493736029 CEST	192.168.2.5	1.1.1.1	0x891f	Standard query (0)	data.cdnbasket.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.493855953 CEST	192.168.2.5	1.1.1.1	0xb483	Standard query (0)	data.cdnbasket.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.787617922 CEST	192.168.2.5	1.1.1.1	0x442b	Standard query (0)	pd.cdnwidget.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.787734032 CEST	192.168.2.5	1.1.1.1	0x49c2	Standard query (0)	pd.cdnwidget.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.788728952 CEST	192.168.2.5	1.1.1.1	0x97a3	Standard query (0)	api.bounceexchange.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.789119959 CEST	192.168.2.5	1.1.1.1	0x1618	Standard query (0)	api.bounceexchange.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.789582014 CEST	192.168.2.5	1.1.1.1	0x472a	Standard query (0)	pix.cdnwidget.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.789830923 CEST	192.168.2.5	1.1.1.1	0x2f5d	Standard query (0)	pix.cdnwidget.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.905873060 CEST	192.168.2.5	1.1.1.1	0xce9c	Standard query (0)	ids.cdnwidget.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.906299114 CEST	192.168.2.5	1.1.1.1	0x39ab	Standard query (0)	ids.cdnwidget.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.908356905 CEST	192.168.2.5	1.1.1.1	0xe533	Standard query (0)	view.cdnbasket.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.908518076 CEST	192.168.2.5	1.1.1.1	0x980f	Standard query (0)	view.cdnbasket.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.910118103 CEST	192.168.2.5	1.1.1.1	0xc4b5	Standard query (0)	page.cdnbasket.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.911093950 CEST	192.168.2.5	1.1.1.1	0xca4b	Standard query (0)	page.cdnbasket.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:32.949567080 CEST	192.168.2.5	1.1.1.1	0x7c97	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.949901104 CEST	192.168.2.5	1.1.1.1	0x3134	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:33.632854939 CEST	192.168.2.5	1.1.1.1	0x5cd7	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.633131027 CEST	192.168.2.5	1.1.1.1	0x1a3a	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.239414930 CEST	192.168.2.5	1.1.1.1	0x7450	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.239759922 CEST	192.168.2.5	1.1.1.1	0x2769	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.240411043 CEST	192.168.2.5	1.1.1.1	0x7780	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.240712881 CEST	192.168.2.5	1.1.1.1	0x87	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.241094112 CEST	192.168.2.5	1.1.1.1	0x7b92	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.241246939 CEST	192.168.2.5	1.1.1.1	0x5fde	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.241679907 CEST	192.168.2.5	1.1.1.1	0x1df0	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.241679907 CEST	192.168.2.5	1.1.1.1	0x513f	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.242189884 CEST	192.168.2.5	1.1.1.1	0x4339	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.242189884 CEST	192.168.2.5	1.1.1.1	0x3203	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.314995050 CEST	192.168.2.5	1.1.1.1	0xbc53	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.315440893 CEST	192.168.2.5	1.1.1.1	0x3bc6	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.373090029 CEST	192.168.2.5	1.1.1.1	0xbf7	Standard query (0)	silo40.p7cloud.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.373277903 CEST	192.168.2.5	1.1.1.1	0x3457	Standard query (0)	silo40.p7cloud.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.462630987 CEST	192.168.2.5	1.1.1.1	0x98ab	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.462845087 CEST	192.168.2.5	1.1.1.1	0x8b89	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.469125032 CEST	192.168.2.5	1.1.1.1	0x68b0	Standard query (0)	exchange.kueezrtb.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.469274998 CEST	192.168.2.5	1.1.1.1	0xad85	Standard query (0)	exchange.kueezrtb.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.510617971 CEST	192.168.2.5	1.1.1.1	0xbe92	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.510937929 CEST	192.168.2.5	1.1.1.1	0x2a86	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.517884016 CEST	192.168.2.5	1.1.1.1	0x4446	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.518182993 CEST	192.168.2.5	1.1.1.1	0xc491	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.521881104 CEST	192.168.2.5	1.1.1.1	0x8005	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.522012949 CEST	192.168.2.5	1.1.1.1	0x83b9	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.525073051 CEST	192.168.2.5	1.1.1.1	0xc534	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.525314093 CEST	192.168.2.5	1.1.1.1	0xa160	Standard query (0)	a.teads.tv	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.536874056 CEST	192.168.2.5	1.1.1.1	0x87dd	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.537302971 CEST	192.168.2.5	1.1.1.1	0x9536	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.541587114 CEST	192.168.2.5	1.1.1.1	0xf9d8	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.541867971 CEST	192.168.2.5	1.1.1.1	0x56bc	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.550784111 CEST	192.168.2.5	1.1.1.1	0x24f4	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.550982952 CEST	192.168.2.5	1.1.1.1	0xf9e2	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.554574966 CEST	192.168.2.5	1.1.1.1	0xa7be	Standard query (0)	pre.ads.justpremium.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.554574966 CEST	192.168.2.5	1.1.1.1	0xde4b	Standard query (0)	pre.ads.justpremium.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.765012980 CEST	192.168.2.5	1.1.1.1	0x3fb8	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.765181065 CEST	192.168.2.5	1.1.1.1	0xbf6a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.766983986 CEST	192.168.2.5	1.1.1.1	0x5fb2	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.767146111 CEST	192.168.2.5	1.1.1.1	0x6d83	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.777657032 CEST	192.168.2.5	1.1.1.1	0x54ea	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.777913094 CEST	192.168.2.5	1.1.1.1	0x9f02	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:34.804441929 CEST	192.168.2.5	1.1.1.1	0x4599	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.804658890 CEST	192.168.2.5	1.1.1.1	0x7569	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:35.323055029 CEST	192.168.2.5	1.1.1.1	0x6519	Standard query (0)	prebid.cootlogix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.323240995 CEST	192.168.2.5	1.1.1.1	0xc52d	Standard query (0)	prebid.cootlogix.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:35.369236946 CEST	192.168.2.5	1.1.1.1	0xac9e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.369493961 CEST	192.168.2.5	1.1.1.1	0xffbe	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:35.395396948 CEST	192.168.2.5	1.1.1.1	0x8bac	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.395554066 CEST	192.168.2.5	1.1.1.1	0xdda2	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:36.847687960 CEST	192.168.2.5	1.1.1.1	0x59f8	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:36.848119020 CEST	192.168.2.5	1.1.1.1	0xb23c	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:36.974114895 CEST	192.168.2.5	1.1.1.1	0x3718	Standard query (0)	prebid-a.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:36.975006104 CEST	192.168.2.5	1.1.1.1	0x6b89	Standard query (0)	prebid-a.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:37.087275982 CEST	192.168.2.5	1.1.1.1	0x7378	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.087577105 CEST	192.168.2.5	1.1.1.1	0xb48a	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:37.251828909 CEST	192.168.2.5	1.1.1.1	0x2451	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.252326012 CEST	192.168.2.5	1.1.1.1	0xce34	Standard query (0)	resources.infolinks.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:37.426624060 CEST	192.168.2.5	1.1.1.1	0x7e7e	Standard query (0)	d3lcz8vpax4lo2.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.427064896 CEST	192.168.2.5	1.1.1.1	0xdd6e	Standard query (0)	d3lcz8vpax4lo2.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:37.536624908 CEST	192.168.2.5	1.1.1.1	0xd483	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.536773920 CEST	192.168.2.5	1.1.1.1	0xff74	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:38.128002882 CEST	192.168.2.5	1.1.1.1	0xa528	Standard query (0)	check.analytics.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.128365993 CEST	192.168.2.5	1.1.1.1	0xc658	Standard query (0)	check.analytics.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:38.132960081 CEST	192.168.2.5	1.1.1.1	0x4eac	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.133508921 CEST	192.168.2.5	1.1.1.1	0x320e	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.123296022 CEST	192.168.2.5	1.1.1.1	0x596c	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.124538898 CEST	192.168.2.5	1.1.1.1	0xad50	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.126192093 CEST	192.168.2.5	1.1.1.1	0xeccb	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.126418114 CEST	192.168.2.5	1.1.1.1	0xf749	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.484128952 CEST	192.168.2.5	1.1.1.1	0xdd0b	Standard query (0)	sync.kueezrtb.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.484539032 CEST	192.168.2.5	1.1.1.1	0xf3dd	Standard query (0)	sync.kueezrtb.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.485673904 CEST	192.168.2.5	1.1.1.1	0xc14	Standard query (0)	sync.cootlogix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.486360073 CEST	192.168.2.5	1.1.1.1	0xcf89	Standard query (0)	sync.cootlogix.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.487163067 CEST	192.168.2.5	1.1.1.1	0x11e3	Standard query (0)	cs.ingage.tech	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.487478971 CEST	192.168.2.5	1.1.1.1	0xfe67	Standard query (0)	cs.ingage.tech	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.492564917 CEST	192.168.2.5	1.1.1.1	0x52fe	Standard query (0)	cs.seedtag.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.493067980 CEST	192.168.2.5	1.1.1.1	0x13e5	Standard query (0)	cs.seedtag.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.494287014 CEST	192.168.2.5	1.1.1.1	0xe995	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.494642973 CEST	192.168.2.5	1.1.1.1	0xfd1e	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.495940924 CEST	192.168.2.5	1.1.1.1	0x5f13	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.496412039 CEST	192.168.2.5	1.1.1.1	0xb692	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.497312069 CEST	192.168.2.5	1.1.1.1	0xfbf6	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.509660959 CEST	192.168.2.5	1.1.1.1	0xfbeb	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.510659933 CEST	192.168.2.5	1.1.1.1	0x3a	Standard query (0)	pre.ads.justpremium.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.511229992 CEST	192.168.2.5	1.1.1.1	0x3640	Standard query (0)	pre.ads.justpremium.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.512216091 CEST	192.168.2.5	1.1.1.1	0xc716	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.513412952 CEST	192.168.2.5	1.1.1.1	0xc13	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.515481949 CEST	192.168.2.5	1.1.1.1	0xe008	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.515974045 CEST	192.168.2.5	1.1.1.1	0xbb67	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.516647100 CEST	192.168.2.5	1.1.1.1	0x150f	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.516788960 CEST	192.168.2.5	1.1.1.1	0x96a6	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.517332077 CEST	192.168.2.5	1.1.1.1	0x89b	Standard query (0)	cs-tam.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.517621994 CEST	192.168.2.5	1.1.1.1	0x9c45	Standard query (0)	cs-tam.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.521846056 CEST	192.168.2.5	1.1.1.1	0xf24a	Standard query (0)	ms-cookie-sync.presage.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.522609949 CEST	192.168.2.5	1.1.1.1	0x6d90	Standard query (0)	ms-cookie-sync.presage.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.523617029 CEST	192.168.2.5	1.1.1.1	0x7669	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.524424076 CEST	192.168.2.5	1.1.1.1	0x1118	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.525281906 CEST	192.168.2.5	1.1.1.1	0x84ff	Standard query (0)	ssbsync-us.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.525650024 CEST	192.168.2.5	1.1.1.1	0xaafa	Standard query (0)	ssbsync-us.smartadserver.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.526364088 CEST	192.168.2.5	1.1.1.1	0x2ead	Standard query (0)	ssp.api.tappx.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.526643038 CEST	192.168.2.5	1.1.1.1	0x5160	Standard query (0)	ssp.api.tappx.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.527416945 CEST	192.168.2.5	1.1.1.1	0xaa	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.527802944 CEST	192.168.2.5	1.1.1.1	0x2096	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.528568983 CEST	192.168.2.5	1.1.1.1	0x4526	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.528708935 CEST	192.168.2.5	1.1.1.1	0x5aaf	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.530558109 CEST	192.168.2.5	1.1.1.1	0x96b8	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.532027960 CEST	192.168.2.5	1.1.1.1	0x233f	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.533435106 CEST	192.168.2.5	1.1.1.1	0x2716	Standard query (0)	syncaps.cootlogix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.533876896 CEST	192.168.2.5	1.1.1.1	0x30f1	Standard query (0)	syncaps.cootlogix.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.534692049 CEST	192.168.2.5	1.1.1.1	0xfdc3	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.535145044 CEST	192.168.2.5	1.1.1.1	0xaa5	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.538042068 CEST	192.168.2.5	1.1.1.1	0x34cb	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.538435936 CEST	192.168.2.5	1.1.1.1	0xe685	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.540213108 CEST	192.168.2.5	1.1.1.1	0x8f76	Standard query (0)	cs-tam.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.540561914 CEST	192.168.2.5	1.1.1.1	0xbb3f	Standard query (0)	cs-tam.yellowblue.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.542763948 CEST	192.168.2.5	1.1.1.1	0x1b15	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.543212891 CEST	192.168.2.5	1.1.1.1	0x477d	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.547091961 CEST	192.168.2.5	1.1.1.1	0xe572	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.547539949 CEST	192.168.2.5	1.1.1.1	0x99b7	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.548927069 CEST	192.168.2.5	1.1.1.1	0x1fe7	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.549204111 CEST	192.168.2.5	1.1.1.1	0xcb2f	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.550357103 CEST	192.168.2.5	1.1.1.1	0xa337	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.550800085 CEST	192.168.2.5	1.1.1.1	0x179c	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.555942059 CEST	192.168.2.5	1.1.1.1	0x883d	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.556289911 CEST	192.168.2.5	1.1.1.1	0x36d3	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.556607962 CEST	192.168.2.5	1.1.1.1	0xfeb	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.557426929 CEST	192.168.2.5	1.1.1.1	0x27d9	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.558505058 CEST	192.168.2.5	1.1.1.1	0xc0f2	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.559132099 CEST	192.168.2.5	1.1.1.1	0x242b	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.559952021 CEST	192.168.2.5	1.1.1.1	0x7753	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.560283899 CEST	192.168.2.5	1.1.1.1	0x8d02	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.561877966 CEST	192.168.2.5	1.1.1.1	0xd438	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.562249899 CEST	192.168.2.5	1.1.1.1	0x8a79	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.603986979 CEST	192.168.2.5	1.1.1.1	0xc6ec	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.604269028 CEST	192.168.2.5	1.1.1.1	0x846e	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.605063915 CEST	192.168.2.5	1.1.1.1	0xf326	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.605339050 CEST	192.168.2.5	1.1.1.1	0x1d57	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.606705904 CEST	192.168.2.5	1.1.1.1	0x9d45	Standard query (0)	s3.castbox.fm	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.612776995 CEST	192.168.2.5	1.1.1.1	0x51d9	Standard query (0)	s3.castbox.fm	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.613316059 CEST	192.168.2.5	1.1.1.1	0xd182	Standard query (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.613713980 CEST	192.168.2.5	1.1.1.1	0x4600	Standard query (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.614376068 CEST	192.168.2.5	1.1.1.1	0x4d9c	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.614703894 CEST	192.168.2.5	1.1.1.1	0x580b	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.615098953 CEST	192.168.2.5	1.1.1.1	0x74b4	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.615576982 CEST	192.168.2.5	1.1.1.1	0xf9ec	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.617511988 CEST	192.168.2.5	1.1.1.1	0x2527	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.619321108 CEST	192.168.2.5	1.1.1.1	0x8942	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.623038054 CEST	192.168.2.5	1.1.1.1	0x9588	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.623718023 CEST	192.168.2.5	1.1.1.1	0x6352	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:39.624233961 CEST	192.168.2.5	1.1.1.1	0x402b	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.479147911 CEST	192.168.2.5	1.1.1.1	0x5570	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.481017113 CEST	192.168.2.5	1.1.1.1	0xcefd	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.481232882 CEST	192.168.2.5	1.1.1.1	0xed75	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.489209890 CEST	192.168.2.5	1.1.1.1	0x8a58	Standard query (0)	pre.ads.justpremium.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.489343882 CEST	192.168.2.5	1.1.1.1	0xd203	Standard query (0)	pre.ads.justpremium.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.489984035 CEST	192.168.2.5	1.1.1.1	0x1e04	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.530915976 CEST	192.168.2.5	1.1.1.1	0xf37a	Standard query (0)	auth.instiengage.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.531637907 CEST	192.168.2.5	1.1.1.1	0xa5e8	Standard query (0)	auth.instiengage.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.532901049 CEST	192.168.2.5	1.1.1.1	0x1e0c	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.533241034 CEST	192.168.2.5	1.1.1.1	0x1f62	Standard query (0)	everest.castbox.fm	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.534008980 CEST	192.168.2.5	1.1.1.1	0xf958	Standard query (0)	everest.castbox.fm	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.534451008 CEST	192.168.2.5	1.1.1.1	0x17e2	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.535368919 CEST	192.168.2.5	1.1.1.1	0xfe6a	Standard query (0)	a.teads.tv	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.536015034 CEST	192.168.2.5	1.1.1.1	0x6015	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.537643909 CEST	192.168.2.5	1.1.1.1	0x259a	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.537978888 CEST	192.168.2.5	1.1.1.1	0x6fb7	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.538180113 CEST	192.168.2.5	1.1.1.1	0x9c78	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.538851023 CEST	192.168.2.5	1.1.1.1	0xdcf7	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.540240049 CEST	192.168.2.5	1.1.1.1	0x6c34	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.541127920 CEST	192.168.2.5	1.1.1.1	0x6f20	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.541441917 CEST	192.168.2.5	1.1.1.1	0xd7b5	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.542154074 CEST	192.168.2.5	1.1.1.1	0xfb45	Standard query (0)	geoip.instiengage.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.542767048 CEST	192.168.2.5	1.1.1.1	0x7dfa	Standard query (0)	geoip.instiengage.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:40.543423891 CEST	192.168.2.5	1.1.1.1	0x64f6	Standard query (0)	d3t3ozftmdmh3i.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.543895006 CEST	192.168.2.5	1.1.1.1	0x8e93	Standard query (0)	d3t3ozftmdmh3i.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:42.413557053 CEST	192.168.2.5	1.1.1.1	0x1cac	Standard query (0)	event.insticator.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:42.413741112 CEST	192.168.2.5	1.1.1.1	0x3ca5	Standard query (0)	event.insticator.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.174004078 CEST	192.168.2.5	1.1.1.1	0xf133	Standard query (0)	geoip.insticator.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.174232960 CEST	192.168.2.5	1.1.1.1	0x861d	Standard query (0)	geoip.insticator.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.307014942 CEST	192.168.2.5	1.1.1.1	0xf280	Standard query (0)	adserver.adtech.advertising.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.307275057 CEST	192.168.2.5	1.1.1.1	0xf6ae	Standard query (0)	adserver.adtech.advertising.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.317190886 CEST	192.168.2.5	1.1.1.1	0x7720	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.317341089 CEST	192.168.2.5	1.1.1.1	0x1467	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.322063923 CEST	192.168.2.5	1.1.1.1	0x25bf	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.322279930 CEST	192.168.2.5	1.1.1.1	0x9b37	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.324423075 CEST	192.168.2.5	1.1.1.1	0x1a00	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.324799061 CEST	192.168.2.5	1.1.1.1	0xfb11	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.619100094 CEST	192.168.2.5	1.1.1.1	0xd80c	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.619385004 CEST	192.168.2.5	1.1.1.1	0x6bf6	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.627902031 CEST	192.168.2.5	1.1.1.1	0xd876	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.628211021 CEST	192.168.2.5	1.1.1.1	0xf2f8	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.724338055 CEST	192.168.2.5	1.1.1.1	0x2ee3	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.724589109 CEST	192.168.2.5	1.1.1.1	0x9d4d	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.725291967 CEST	192.168.2.5	1.1.1.1	0x3a4	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.790488958 CEST	192.168.2.5	1.1.1.1	0xa842	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.797574043 CEST	192.168.2.5	1.1.1.1	0xbf0	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.797825098 CEST	192.168.2.5	1.1.1.1	0xfd4f	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.799016953 CEST	192.168.2.5	1.1.1.1	0xffcc	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.799175978 CEST	192.168.2.5	1.1.1.1	0x2260	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:44.800215960 CEST	192.168.2.5	1.1.1.1	0xd159	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.800473928 CEST	192.168.2.5	1.1.1.1	0xe05a	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.140592098 CEST	192.168.2.5	1.1.1.1	0xb0c2	Standard query (0)	cdn.undertone.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.184629917 CEST	192.168.2.5	1.1.1.1	0x9d9	Standard query (0)	cdn.undertone.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.200753927 CEST	192.168.2.5	1.1.1.1	0xe825	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.200997114 CEST	192.168.2.5	1.1.1.1	0xfee0	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.217253923 CEST	192.168.2.5	1.1.1.1	0x514d	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.217391014 CEST	192.168.2.5	1.1.1.1	0xf1a4	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.581309080 CEST	192.168.2.5	1.1.1.1	0xb376	Standard query (0)	hb.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.582039118 CEST	192.168.2.5	1.1.1.1	0x2233	Standard query (0)	hb.yellowblue.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.629951954 CEST	192.168.2.5	1.1.1.1	0xbdc	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.630511999 CEST	192.168.2.5	1.1.1.1	0x4fc3	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.766228914 CEST	192.168.2.5	1.1.1.1	0x9e96	Standard query (0)	hb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.766444921 CEST	192.168.2.5	1.1.1.1	0xd198	Standard query (0)	hb.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.773515940 CEST	192.168.2.5	1.1.1.1	0xd3cf	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.773947001 CEST	192.168.2.5	1.1.1.1	0x6b9e	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.775685072 CEST	192.168.2.5	1.1.1.1	0xbc0b	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.775865078 CEST	192.168.2.5	1.1.1.1	0x4af2	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.777688026 CEST	192.168.2.5	1.1.1.1	0xf063	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.778000116 CEST	192.168.2.5	1.1.1.1	0x9bfa	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.780376911 CEST	192.168.2.5	1.1.1.1	0xd4e2	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.781711102 CEST	192.168.2.5	1.1.1.1	0x8b56	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.782435894 CEST	192.168.2.5	1.1.1.1	0x4af5	Standard query (0)	ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.782850027 CEST	192.168.2.5	1.1.1.1	0xcf53	Standard query (0)	ssc.33across.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.788772106 CEST	192.168.2.5	1.1.1.1	0xf131	Standard query (0)	mp.4dex.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.789064884 CEST	192.168.2.5	1.1.1.1	0xad6f	Standard query (0)	mp.4dex.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.816870928 CEST	192.168.2.5	1.1.1.1	0xf782	Standard query (0)	apex.go.sonobi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.817090034 CEST	192.168.2.5	1.1.1.1	0x1060	Standard query (0)	apex.go.sonobi.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.839071035 CEST	192.168.2.5	1.1.1.1	0x357d	Standard query (0)	r.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.839457035 CEST	192.168.2.5	1.1.1.1	0x5476	Standard query (0)	r.bidswitch.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:45.919696093 CEST	192.168.2.5	1.1.1.1	0x5a65	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.919868946 CEST	192.168.2.5	1.1.1.1	0x49a7	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.076026917 CEST	192.168.2.5	1.1.1.1	0xd5fe	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.076266050 CEST	192.168.2.5	1.1.1.1	0x5da0	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.217214108 CEST	192.168.2.5	1.1.1.1	0x3fc	Standard query (0)	google-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.217520952 CEST	192.168.2.5	1.1.1.1	0x5de9	Standard query (0)	google-bidout-d.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.321633101 CEST	192.168.2.5	1.1.1.1	0xb775	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.321826935 CEST	192.168.2.5	1.1.1.1	0xbd8b	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.428715944 CEST	192.168.2.5	1.1.1.1	0x4079	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.429018974 CEST	192.168.2.5	1.1.1.1	0x4d15	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.525202036 CEST	192.168.2.5	1.1.1.1	0xaebb	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.525454044 CEST	192.168.2.5	1.1.1.1	0xd6d2	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.525773048 CEST	192.168.2.5	1.1.1.1	0x2a42	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.525922060 CEST	192.168.2.5	1.1.1.1	0xe46b	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.896567106 CEST	192.168.2.5	1.1.1.1	0x82a1	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.896703005 CEST	192.168.2.5	1.1.1.1	0xd37b	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.901643038 CEST	192.168.2.5	1.1.1.1	0xe6f4	Standard query (0)	cdn.hadronid.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.901912928 CEST	192.168.2.5	1.1.1.1	0x368f	Standard query (0)	cdn.hadronid.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.902324915 CEST	192.168.2.5	1.1.1.1	0x68f6	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.902565956 CEST	192.168.2.5	1.1.1.1	0xce5e	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:46.903472900 CEST	192.168.2.5	1.1.1.1	0x5020	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.903614044 CEST	192.168.2.5	1.1.1.1	0x23a0	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:47.513993025 CEST	192.168.2.5	1.1.1.1	0xb83d	Standard query (0)	privacy.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.514188051 CEST	192.168.2.5	1.1.1.1	0x83ba	Standard query (0)	privacy.crwdcntrl.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:47.553484917 CEST	192.168.2.5	1.1.1.1	0x805c	Standard query (0)	id.hadron.ad.gt	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.555126905 CEST	192.168.2.5	1.1.1.1	0x74dc	Standard query (0)	id.hadron.ad.gt	65	IN (0x0001)	false
Apr 19, 2024 15:12:47.931473970 CEST	192.168.2.5	1.1.1.1	0x1488	Standard query (0)	va-lb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.931885004 CEST	192.168.2.5	1.1.1.1	0xfd8d	Standard query (0)	va-lb.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:47.963634968 CEST	192.168.2.5	1.1.1.1	0xbb4	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.963875055 CEST	192.168.2.5	1.1.1.1	0x8ce7	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:47.965234995 CEST	192.168.2.5	1.1.1.1	0x7172	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.965476036 CEST	192.168.2.5	1.1.1.1	0x829e	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:47.966826916 CEST	192.168.2.5	1.1.1.1	0xd622	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.966952085 CEST	192.168.2.5	1.1.1.1	0x3082	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.012938976 CEST	192.168.2.5	1.1.1.1	0xfceb	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.013142109 CEST	192.168.2.5	1.1.1.1	0x289d	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.023508072 CEST	192.168.2.5	1.1.1.1	0x9ecb	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.023844004 CEST	192.168.2.5	1.1.1.1	0xfb92	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.025652885 CEST	192.168.2.5	1.1.1.1	0x38ae	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.025868893 CEST	192.168.2.5	1.1.1.1	0xcf9c	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.027914047 CEST	192.168.2.5	1.1.1.1	0x3055	Standard query (0)	s.c.appier.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.028198004 CEST	192.168.2.5	1.1.1.1	0x9e31	Standard query (0)	s.c.appier.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.030294895 CEST	192.168.2.5	1.1.1.1	0x5e5c	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.030508995 CEST	192.168.2.5	1.1.1.1	0x22a6	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.031056881 CEST	192.168.2.5	1.1.1.1	0x44a0	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.031204939 CEST	192.168.2.5	1.1.1.1	0x93b6	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.046169043 CEST	192.168.2.5	1.1.1.1	0xf718	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.046322107 CEST	192.168.2.5	1.1.1.1	0x62c	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.084815979 CEST	192.168.2.5	1.1.1.1	0xfeef	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.084953070 CEST	192.168.2.5	1.1.1.1	0xa5d8	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.085863113 CEST	192.168.2.5	1.1.1.1	0x8a85	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.086024046 CEST	192.168.2.5	1.1.1.1	0x68e8	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.086541891 CEST	192.168.2.5	1.1.1.1	0xe48d	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.086918116 CEST	192.168.2.5	1.1.1.1	0x9eba	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.087379932 CEST	192.168.2.5	1.1.1.1	0xc037	Standard query (0)	match.justpremium.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.087724924 CEST	192.168.2.5	1.1.1.1	0xcc3	Standard query (0)	match.justpremium.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.088234901 CEST	192.168.2.5	1.1.1.1	0x5170	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.088489056 CEST	192.168.2.5	1.1.1.1	0xaaa8	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.088932037 CEST	192.168.2.5	1.1.1.1	0x33a2	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.089194059 CEST	192.168.2.5	1.1.1.1	0x54ef	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.516814947 CEST	192.168.2.5	1.1.1.1	0x310f	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.516962051 CEST	192.168.2.5	1.1.1.1	0xb140	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.518824100 CEST	192.168.2.5	1.1.1.1	0xb71c	Standard query (0)	pixel.s3xified.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.518973112 CEST	192.168.2.5	1.1.1.1	0x10df	Standard query (0)	pixel.s3xified.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.519934893 CEST	192.168.2.5	1.1.1.1	0x278a	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.520172119 CEST	192.168.2.5	1.1.1.1	0x9767	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.545497894 CEST	192.168.2.5	1.1.1.1	0x1527	Standard query (0)	sync-amz.ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.545815945 CEST	192.168.2.5	1.1.1.1	0x7092	Standard query (0)	sync-amz.ads.yieldmo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.551337004 CEST	192.168.2.5	1.1.1.1	0x9036	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.551520109 CEST	192.168.2.5	1.1.1.1	0xb7f6	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.559848070 CEST	192.168.2.5	1.1.1.1	0x811a	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.560173035 CEST	192.168.2.5	1.1.1.1	0x3c1d	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.561465025 CEST	192.168.2.5	1.1.1.1	0xd10	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.561986923 CEST	192.168.2.5	1.1.1.1	0x35fd	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.563213110 CEST	192.168.2.5	1.1.1.1	0x5e3c	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.563492060 CEST	192.168.2.5	1.1.1.1	0x18b5	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.622062922 CEST	192.168.2.5	1.1.1.1	0x759e	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.624898911 CEST	192.168.2.5	1.1.1.1	0xfbbe	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.625375032 CEST	192.168.2.5	1.1.1.1	0x698d	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.625751019 CEST	192.168.2.5	1.1.1.1	0xebe1	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.633106947 CEST	192.168.2.5	1.1.1.1	0xbc25	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.637392998 CEST	192.168.2.5	1.1.1.1	0x2ddb	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.638690948 CEST	192.168.2.5	1.1.1.1	0x8091	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.638834953 CEST	192.168.2.5	1.1.1.1	0x460c	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.648276091 CEST	192.168.2.5	1.1.1.1	0xe4ef	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.648495913 CEST	192.168.2.5	1.1.1.1	0xb46	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.653064013 CEST	192.168.2.5	1.1.1.1	0xbb6a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.653634071 CEST	192.168.2.5	1.1.1.1	0xb812	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.983567953 CEST	192.168.2.5	1.1.1.1	0x896d	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.984225035 CEST	192.168.2.5	1.1.1.1	0xa807	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.985250950 CEST	192.168.2.5	1.1.1.1	0xb375	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.985455036 CEST	192.168.2.5	1.1.1.1	0xcae8	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:48.987313032 CEST	192.168.2.5	1.1.1.1	0x6fd1	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.987627983 CEST	192.168.2.5	1.1.1.1	0x8b5f	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:49.139960051 CEST	192.168.2.5	1.1.1.1	0x5a10	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.140305042 CEST	192.168.2.5	1.1.1.1	0x63e6	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.272239923 CEST	192.168.2.5	1.1.1.1	0xc91e	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.307241917 CEST	192.168.2.5	1.1.1.1	0x320a	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.682328939 CEST	192.168.2.5	1.1.1.1	0xcd4e	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.682564974 CEST	192.168.2.5	1.1.1.1	0xbfed	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.691520929 CEST	192.168.2.5	1.1.1.1	0x6c16	Standard query (0)	id.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.691730022 CEST	192.168.2.5	1.1.1.1	0xf09d	Standard query (0)	id.crwdcntrl.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.789678097 CEST	192.168.2.5	1.1.1.1	0x2c85	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.789810896 CEST	192.168.2.5	1.1.1.1	0xf11d	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.790569067 CEST	192.168.2.5	1.1.1.1	0x7618	Standard query (0)	insticator-d.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.790725946 CEST	192.168.2.5	1.1.1.1	0xfb23	Standard query (0)	insticator-d.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.898708105 CEST	192.168.2.5	1.1.1.1	0x92a8	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.899080038 CEST	192.168.2.5	1.1.1.1	0x30e	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.927558899 CEST	192.168.2.5	1.1.1.1	0x372b	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.927690983 CEST	192.168.2.5	1.1.1.1	0x26e6	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.929383993 CEST	192.168.2.5	1.1.1.1	0x76ac	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.929667950 CEST	192.168.2.5	1.1.1.1	0xaffa	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.931947947 CEST	192.168.2.5	1.1.1.1	0xe9de	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.932096004 CEST	192.168.2.5	1.1.1.1	0x9084	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.974193096 CEST	192.168.2.5	1.1.1.1	0x52a9	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.974392891 CEST	192.168.2.5	1.1.1.1	0xf5df	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:50.974978924 CEST	192.168.2.5	1.1.1.1	0x2574	Standard query (0)	cd.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.975223064 CEST	192.168.2.5	1.1.1.1	0xaf05	Standard query (0)	cd.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.059324980 CEST	192.168.2.5	1.1.1.1	0xc4f6	Standard query (0)	us.shb-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.059465885 CEST	192.168.2.5	1.1.1.1	0x2955	Standard query (0)	us.shb-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.070857048 CEST	192.168.2.5	1.1.1.1	0x1284	Standard query (0)	a.ad.gt	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.071017981 CEST	192.168.2.5	1.1.1.1	0xaf34	Standard query (0)	a.ad.gt	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.190984011 CEST	192.168.2.5	1.1.1.1	0x8b53	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.190984011 CEST	192.168.2.5	1.1.1.1	0x18d6	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.291465044 CEST	192.168.2.5	1.1.1.1	0x1ef2	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.291707993 CEST	192.168.2.5	1.1.1.1	0x5086	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.338161945 CEST	192.168.2.5	1.1.1.1	0x50a1	Standard query (0)	vop.sundaysky.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.338316917 CEST	192.168.2.5	1.1.1.1	0xee34	Standard query (0)	vop.sundaysky.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.475850105 CEST	192.168.2.5	1.1.1.1	0x69cc	Standard query (0)	product.instiengage.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.476367950 CEST	192.168.2.5	1.1.1.1	0x61bc	Standard query (0)	product.instiengage.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.578258991 CEST	192.168.2.5	1.1.1.1	0x1827	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.578710079 CEST	192.168.2.5	1.1.1.1	0x3a8	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.579502106 CEST	192.168.2.5	1.1.1.1	0x1b19	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.580018997 CEST	192.168.2.5	1.1.1.1	0x2834	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.580018997 CEST	192.168.2.5	1.1.1.1	0xcee1	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.580261946 CEST	192.168.2.5	1.1.1.1	0x4f51	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.602411985 CEST	192.168.2.5	1.1.1.1	0x6dfd	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.602411985 CEST	192.168.2.5	1.1.1.1	0xf3cd	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.624701977 CEST	192.168.2.5	1.1.1.1	0xe230	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.624779940 CEST	192.168.2.5	1.1.1.1	0x5baf	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.711417913 CEST	192.168.2.5	1.1.1.1	0x9a40	Standard query (0)	ow.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.711770058 CEST	192.168.2.5	1.1.1.1	0xb571	Standard query (0)	ow.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.777848005 CEST	192.168.2.5	1.1.1.1	0xf657	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.778079033 CEST	192.168.2.5	1.1.1.1	0x1caa	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:51.781296015 CEST	192.168.2.5	1.1.1.1	0xf13e	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.781510115 CEST	192.168.2.5	1.1.1.1	0xc063	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.005284071 CEST	192.168.2.5	1.1.1.1	0x9672	Standard query (0)	csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.005445957 CEST	192.168.2.5	1.1.1.1	0xb040	Standard query (0)	csync.smartadserver.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.093116999 CEST	192.168.2.5	1.1.1.1	0x209f	Standard query (0)	p.ad.gt	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.093450069 CEST	192.168.2.5	1.1.1.1	0x3fd9	Standard query (0)	p.ad.gt	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.102910995 CEST	192.168.2.5	1.1.1.1	0xe870	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.103056908 CEST	192.168.2.5	1.1.1.1	0x94d5	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.103709936 CEST	192.168.2.5	1.1.1.1	0xab17	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.103709936 CEST	192.168.2.5	1.1.1.1	0x228c	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.104855061 CEST	192.168.2.5	1.1.1.1	0x355f	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.105228901 CEST	192.168.2.5	1.1.1.1	0x5a77	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.106147051 CEST	192.168.2.5	1.1.1.1	0x66c1	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.106147051 CEST	192.168.2.5	1.1.1.1	0xc841	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.106836081 CEST	192.168.2.5	1.1.1.1	0xc49f	Standard query (0)	ids.ad.gt	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.106837034 CEST	192.168.2.5	1.1.1.1	0xaf11	Standard query (0)	ids.ad.gt	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.840944052 CEST	192.168.2.5	1.1.1.1	0xe583	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.841348886 CEST	192.168.2.5	1.1.1.1	0x35ea	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.908687115 CEST	192.168.2.5	1.1.1.1	0x24cb	Standard query (0)	ua.p7cloud.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.908885002 CEST	192.168.2.5	1.1.1.1	0x8eeb	Standard query (0)	ua.p7cloud.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.911514997 CEST	192.168.2.5	1.1.1.1	0xc8a2	Standard query (0)	d2tbszkvx1p56e.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.911794901 CEST	192.168.2.5	1.1.1.1	0xb813	Standard query (0)	d2tbszkvx1p56e.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.913908005 CEST	192.168.2.5	1.1.1.1	0xfa6f	Standard query (0)	location.p7cloud.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.914153099 CEST	192.168.2.5	1.1.1.1	0x75a2	Standard query (0)	location.p7cloud.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.936197042 CEST	192.168.2.5	1.1.1.1	0x9ae8	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.936342955 CEST	192.168.2.5	1.1.1.1	0x486d	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.937678099 CEST	192.168.2.5	1.1.1.1	0x6b9f	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.938251972 CEST	192.168.2.5	1.1.1.1	0x9473	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:52.950984001 CEST	192.168.2.5	1.1.1.1	0xa086	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.951160908 CEST	192.168.2.5	1.1.1.1	0x209a	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Apr 19, 2024 15:12:53.049163103 CEST	192.168.2.5	1.1.1.1	0xe602	Standard query (0)	cdn.confiant-integrations.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.049323082 CEST	192.168.2.5	1.1.1.1	0xb89f	Standard query (0)	cdn.confiant-integrations.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:53.089287043 CEST	192.168.2.5	1.1.1.1	0x2fbf	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.089440107 CEST	192.168.2.5	1.1.1.1	0xddbe	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:53.101260900 CEST	192.168.2.5	1.1.1.1	0x6b38	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.101777077 CEST	192.168.2.5	1.1.1.1	0x2f37	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:53.866039991 CEST	192.168.2.5	1.1.1.1	0x429b	Standard query (0)	1x1.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.866367102 CEST	192.168.2.5	1.1.1.1	0x6b89	Standard query (0)	1x1.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:53.867007971 CEST	192.168.2.5	1.1.1.1	0xcd3f	Standard query (0)	merequartz.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.868561983 CEST	192.168.2.5	1.1.1.1	0xcf5	Standard query (0)	merequartz.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:53.983180046 CEST	192.168.2.5	1.1.1.1	0x2c92	Standard query (0)	script.4dex.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.983180046 CEST	192.168.2.5	1.1.1.1	0xd9d7	Standard query (0)	script.4dex.io	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.008166075 CEST	192.168.2.5	1.1.1.1	0xf724	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.008429050 CEST	192.168.2.5	1.1.1.1	0xea43	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.010272026 CEST	192.168.2.5	1.1.1.1	0x7675	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.011115074 CEST	192.168.2.5	1.1.1.1	0x6672	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.076473951 CEST	192.168.2.5	1.1.1.1	0x9c5d	Standard query (0)	seg.ad.gt	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.076807976 CEST	192.168.2.5	1.1.1.1	0xa4aa	Standard query (0)	seg.ad.gt	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.077338934 CEST	192.168.2.5	1.1.1.1	0x21bc	Standard query (0)	pixels.ad.gt	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.077531099 CEST	192.168.2.5	1.1.1.1	0x8e8a	Standard query (0)	pixels.ad.gt	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.202820063 CEST	192.168.2.5	1.1.1.1	0xf6df	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.202964067 CEST	192.168.2.5	1.1.1.1	0x33b1	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.290868998 CEST	192.168.2.5	1.1.1.1	0xb2fd	Standard query (0)	cdn.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.291146040 CEST	192.168.2.5	1.1.1.1	0x7694	Standard query (0)	cdn.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.367214918 CEST	192.168.2.5	1.1.1.1	0xae3b	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.367393970 CEST	192.168.2.5	1.1.1.1	0xcead	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.449383020 CEST	192.168.2.5	1.1.1.1	0xff07	Standard query (0)	cds.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.449655056 CEST	192.168.2.5	1.1.1.1	0xe845	Standard query (0)	cds.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.472436905 CEST	192.168.2.5	1.1.1.1	0xc70d	Standard query (0)	sync.richaudience.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.472600937 CEST	192.168.2.5	1.1.1.1	0x15db	Standard query (0)	sync.richaudience.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:54.592256069 CEST	192.168.2.5	1.1.1.1	0x8abd	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.592413902 CEST	192.168.2.5	1.1.1.1	0xc17	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:55.155258894 CEST	192.168.2.5	1.1.1.1	0x8aa0	Standard query (0)	proc.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.155422926 CEST	192.168.2.5	1.1.1.1	0xdc6b	Standard query (0)	proc.ad.cpe.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:55.488864899 CEST	192.168.2.5	1.1.1.1	0x61d3	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.489000082 CEST	192.168.2.5	1.1.1.1	0xf656	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:55.672122002 CEST	192.168.2.5	1.1.1.1	0x726d	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.672274113 CEST	192.168.2.5	1.1.1.1	0xac91	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:55.800332069 CEST	192.168.2.5	1.1.1.1	0x6f33	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.800556898 CEST	192.168.2.5	1.1.1.1	0x7c1	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:56.753647089 CEST	192.168.2.5	1.1.1.1	0x7228	Standard query (0)	pxl.iqm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.754029989 CEST	192.168.2.5	1.1.1.1	0x5976	Standard query (0)	pxl.iqm.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:56.783469915 CEST	192.168.2.5	1.1.1.1	0x443f	Standard query (0)	33across-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.784559965 CEST	192.168.2.5	1.1.1.1	0x8ff1	Standard query (0)	33across-match.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:56.840456009 CEST	192.168.2.5	1.1.1.1	0xe63f	Standard query (0)	ads.us.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.840651989 CEST	192.168.2.5	1.1.1.1	0x1e5	Standard query (0)	ads.us.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:57.338232040 CEST	192.168.2.5	1.1.1.1	0x41c1	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.343271017 CEST	192.168.2.5	1.1.1.1	0xb6d3	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:57.596395969 CEST	192.168.2.5	1.1.1.1	0x514f	Standard query (0)	pixel.advertising.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.596599102 CEST	192.168.2.5	1.1.1.1	0x5068	Standard query (0)	pixel.advertising.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:57.677018881 CEST	192.168.2.5	1.1.1.1	0x8619	Standard query (0)	rt3047.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.677359104 CEST	192.168.2.5	1.1.1.1	0x36a3	Standard query (0)	rt3047.infolinks.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:57.780422926 CEST	192.168.2.5	1.1.1.1	0x7470	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.780631065 CEST	192.168.2.5	1.1.1.1	0x36fe	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.365794897 CEST	192.168.2.5	1.1.1.1	0x2eb3	Standard query (0)	assets.bounceexchange.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.366286039 CEST	192.168.2.5	1.1.1.1	0x7035	Standard query (0)	assets.bounceexchange.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.367324114 CEST	192.168.2.5	1.1.1.1	0x4f1	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.367863894 CEST	192.168.2.5	1.1.1.1	0xf938	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.428858042 CEST	192.168.2.5	1.1.1.1	0x726a	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.429183006 CEST	192.168.2.5	1.1.1.1	0x57b0	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.532459021 CEST	192.168.2.5	1.1.1.1	0x13d	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.532670975 CEST	192.168.2.5	1.1.1.1	0x1156	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.534137011 CEST	192.168.2.5	1.1.1.1	0xf5f2	Standard query (0)	cat.us5.us.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.534276009 CEST	192.168.2.5	1.1.1.1	0xe7fe	Standard query (0)	cat.us5.us.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.534626007 CEST	192.168.2.5	1.1.1.1	0x3faa	Standard query (0)	metrics.getrockerbox.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.534729958 CEST	192.168.2.5	1.1.1.1	0xc252	Standard query (0)	metrics.getrockerbox.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.535088062 CEST	192.168.2.5	1.1.1.1	0xb5b7	Standard query (0)	measurement-api.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.535339117 CEST	192.168.2.5	1.1.1.1	0x8f4c	Standard query (0)	measurement-api.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.698771000 CEST	192.168.2.5	1.1.1.1	0x7e79	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.699014902 CEST	192.168.2.5	1.1.1.1	0x18de	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.744147062 CEST	192.168.2.5	1.1.1.1	0x6780	Standard query (0)	csm.us.criteo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.744466066 CEST	192.168.2.5	1.1.1.1	0x647b	Standard query (0)	csm.us.criteo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:58.744864941 CEST	192.168.2.5	1.1.1.1	0x2a42	Standard query (0)	imageproxy.us.criteo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.745023966 CEST	192.168.2.5	1.1.1.1	0x5841	Standard query (0)	imageproxy.us.criteo.net	65	IN (0x0001)	false
Apr 19, 2024 15:12:59.009501934 CEST	192.168.2.5	1.1.1.1	0xa38b	Standard query (0)	d-code.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.009886980 CEST	192.168.2.5	1.1.1.1	0x1fef	Standard query (0)	d-code.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:59.103415012 CEST	192.168.2.5	1.1.1.1	0x4795	Standard query (0)	resources.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.103549004 CEST	192.168.2.5	1.1.1.1	0x2b0c	Standard query (0)	resources.infolinks.com	65	IN (0x0001)	false
Apr 19, 2024 15:12:59.325596094 CEST	192.168.2.5	1.1.1.1	0xc058	Standard query (0)	u.4dex.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.325730085 CEST	192.168.2.5	1.1.1.1	0x91ef	Standard query (0)	u.4dex.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:00.276724100 CEST	192.168.2.5	1.1.1.1	0xab78	Standard query (0)	cm-x.mgid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.277108908 CEST	192.168.2.5	1.1.1.1	0x29a	Standard query (0)	cm-x.mgid.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:00.281864882 CEST	192.168.2.5	1.1.1.1	0x3070	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.282105923 CEST	192.168.2.5	1.1.1.1	0x9e79	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:00.472423077 CEST	192.168.2.5	1.1.1.1	0x592f	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.472966909 CEST	192.168.2.5	1.1.1.1	0x5223	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:00.559310913 CEST	192.168.2.5	1.1.1.1	0xcec4	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.559457064 CEST	192.168.2.5	1.1.1.1	0x2a58	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:00.560590029 CEST	192.168.2.5	1.1.1.1	0x1a76	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.560808897 CEST	192.168.2.5	1.1.1.1	0x4389	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.025342941 CEST	192.168.2.5	1.1.1.1	0xb857	Standard query (0)	rtb.us5.us.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.025716066 CEST	192.168.2.5	1.1.1.1	0xdc4d	Standard query (0)	rtb.us5.us.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.051553965 CEST	192.168.2.5	1.1.1.1	0x1d4a	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.051709890 CEST	192.168.2.5	1.1.1.1	0x22b0	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.181550026 CEST	192.168.2.5	1.1.1.1	0x1b0b	Standard query (0)	pixel-us-west.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.181739092 CEST	192.168.2.5	1.1.1.1	0x8f6f	Standard query (0)	pixel-us-west.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.271519899 CEST	192.168.2.5	1.1.1.1	0x81ce	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.271919966 CEST	192.168.2.5	1.1.1.1	0x4ae8	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.690642118 CEST	192.168.2.5	1.1.1.1	0xb7dd	Standard query (0)	vid.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.690803051 CEST	192.168.2.5	1.1.1.1	0xb226	Standard query (0)	vid.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.692552090 CEST	192.168.2.5	1.1.1.1	0x69f7	Standard query (0)	lit.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.692914009 CEST	192.168.2.5	1.1.1.1	0x5833	Standard query (0)	lit.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.693377972 CEST	192.168.2.5	1.1.1.1	0x64e8	Standard query (0)	ins.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.693520069 CEST	192.168.2.5	1.1.1.1	0x8e8b	Standard query (0)	ins.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:01.695920944 CEST	192.168.2.5	1.1.1.1	0xc69e	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.696136951 CEST	192.168.2.5	1.1.1.1	0x2e0e	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.027754068 CEST	192.168.2.5	1.1.1.1	0xf910	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.027889013 CEST	192.168.2.5	1.1.1.1	0xe6a0	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.030838966 CEST	192.168.2.5	1.1.1.1	0x2857	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.031001091 CEST	192.168.2.5	1.1.1.1	0x2228	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.111587048 CEST	192.168.2.5	1.1.1.1	0x33d4	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.111816883 CEST	192.168.2.5	1.1.1.1	0xb537	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.117094040 CEST	192.168.2.5	1.1.1.1	0xf3c6	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.117508888 CEST	192.168.2.5	1.1.1.1	0x3bf3	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.119307041 CEST	192.168.2.5	1.1.1.1	0x3006	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.119618893 CEST	192.168.2.5	1.1.1.1	0x2991	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.154690981 CEST	192.168.2.5	1.1.1.1	0xb98e	Standard query (0)	cs-server-s2s.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.155025005 CEST	192.168.2.5	1.1.1.1	0xa49b	Standard query (0)	cs-server-s2s.yellowblue.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.613660097 CEST	192.168.2.5	1.1.1.1	0xe2ff	Standard query (0)	sync2.resetdigital.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.615825891 CEST	192.168.2.5	1.1.1.1	0x26bb	Standard query (0)	sync2.resetdigital.co	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.659545898 CEST	192.168.2.5	1.1.1.1	0xa869	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.659782887 CEST	192.168.2.5	1.1.1.1	0x13b3	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:02.761789083 CEST	192.168.2.5	1.1.1.1	0xbe35	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.762000084 CEST	192.168.2.5	1.1.1.1	0xe50e	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:03.017501116 CEST	192.168.2.5	1.1.1.1	0x58d3	Standard query (0)	u.4dex.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:03.017666101 CEST	192.168.2.5	1.1.1.1	0x919	Standard query (0)	u.4dex.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:03.860586882 CEST	192.168.2.5	1.1.1.1	0x52e	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:03.860873938 CEST	192.168.2.5	1.1.1.1	0x6003	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:03.902261019 CEST	192.168.2.5	1.1.1.1	0x37a1	Standard query (0)	cks.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:03.902476072 CEST	192.168.2.5	1.1.1.1	0x9d3f	Standard query (0)	cks.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:06.190915108 CEST	192.168.2.5	1.1.1.1	0x97a9	Standard query (0)	visitor-33across.omnitagjs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.191056013 CEST	192.168.2.5	1.1.1.1	0x77d5	Standard query (0)	visitor-33across.omnitagjs.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:06.229793072 CEST	192.168.2.5	1.1.1.1	0x697e	Standard query (0)	cks.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.229924917 CEST	192.168.2.5	1.1.1.1	0x2036	Standard query (0)	cks.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:06.243170977 CEST	192.168.2.5	1.1.1.1	0xd8cf	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.243369102 CEST	192.168.2.5	1.1.1.1	0x28f8	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:06.244173050 CEST	192.168.2.5	1.1.1.1	0x9484	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.244311094 CEST	192.168.2.5	1.1.1.1	0x54e6	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:06.262845039 CEST	192.168.2.5	1.1.1.1	0x836e	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.262974024 CEST	192.168.2.5	1.1.1.1	0xcbc2	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.111248970 CEST	192.168.2.5	1.1.1.1	0x5ba5	Standard query (0)	i.ctnsnet.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.116674900 CEST	192.168.2.5	1.1.1.1	0xf2b0	Standard query (0)	i.ctnsnet.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.117254972 CEST	192.168.2.5	1.1.1.1	0xa81c	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.117623091 CEST	192.168.2.5	1.1.1.1	0xee2f	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.118351936 CEST	192.168.2.5	1.1.1.1	0x164c	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.118524075 CEST	192.168.2.5	1.1.1.1	0xd17e	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.276519060 CEST	192.168.2.5	1.1.1.1	0x7b25	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.276670933 CEST	192.168.2.5	1.1.1.1	0x49e0	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.277801991 CEST	192.168.2.5	1.1.1.1	0x95fd	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.277939081 CEST	192.168.2.5	1.1.1.1	0x74f8	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.624599934 CEST	192.168.2.5	1.1.1.1	0x66c9	Standard query (0)	openrtb-us-east-1.axonix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.624903917 CEST	192.168.2.5	1.1.1.1	0x7c1c	Standard query (0)	openrtb-us-east-1.axonix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.749820948 CEST	192.168.2.5	1.1.1.1	0x5f92	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.750070095 CEST	192.168.2.5	1.1.1.1	0xa224	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.750726938 CEST	192.168.2.5	1.1.1.1	0xb7e0	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.750983953 CEST	192.168.2.5	1.1.1.1	0x5612	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.801465034 CEST	192.168.2.5	1.1.1.1	0xbe01	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.801863909 CEST	192.168.2.5	1.1.1.1	0x3c3d	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:07.901722908 CEST	192.168.2.5	1.1.1.1	0xe54a	Standard query (0)	connatix-supply-partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.901865959 CEST	192.168.2.5	1.1.1.1	0x3cd5	Standard query (0)	connatix-supply-partners.tremorhub.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.100687027 CEST	192.168.2.5	1.1.1.1	0xa2a0	Standard query (0)	c0.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.101011992 CEST	192.168.2.5	1.1.1.1	0xe6b4	Standard query (0)	c0.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.101433992 CEST	192.168.2.5	1.1.1.1	0xa6d3	Standard query (0)	c1.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.101581097 CEST	192.168.2.5	1.1.1.1	0xc2d	Standard query (0)	c1.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.102073908 CEST	192.168.2.5	1.1.1.1	0xce63	Standard query (0)	c2.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.102210999 CEST	192.168.2.5	1.1.1.1	0xfe47	Standard query (0)	c2.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.102618933 CEST	192.168.2.5	1.1.1.1	0xbb4f	Standard query (0)	c3.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.102755070 CEST	192.168.2.5	1.1.1.1	0xc64d	Standard query (0)	c3.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.103192091 CEST	192.168.2.5	1.1.1.1	0xc7c2	Standard query (0)	c4.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.103343964 CEST	192.168.2.5	1.1.1.1	0xfb8f	Standard query (0)	c4.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.103816032 CEST	192.168.2.5	1.1.1.1	0xbbcf	Standard query (0)	c5.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.104003906 CEST	192.168.2.5	1.1.1.1	0xd2bc	Standard query (0)	c5.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.104352951 CEST	192.168.2.5	1.1.1.1	0xd5e2	Standard query (0)	c6.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.104516029 CEST	192.168.2.5	1.1.1.1	0x8c67	Standard query (0)	c6.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.104948997 CEST	192.168.2.5	1.1.1.1	0x8242	Standard query (0)	c7.eu-3-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.105088949 CEST	192.168.2.5	1.1.1.1	0xc2ad	Standard query (0)	c7.eu-3-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.105459929 CEST	192.168.2.5	1.1.1.1	0x95b9	Standard query (0)	c0.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.105596066 CEST	192.168.2.5	1.1.1.1	0x9569	Standard query (0)	c0.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.106089115 CEST	192.168.2.5	1.1.1.1	0x8d4a	Standard query (0)	c1.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.106312990 CEST	192.168.2.5	1.1.1.1	0x5828	Standard query (0)	c1.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.106683016 CEST	192.168.2.5	1.1.1.1	0x481b	Standard query (0)	c2.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.106817961 CEST	192.168.2.5	1.1.1.1	0x15d7	Standard query (0)	c2.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.107310057 CEST	192.168.2.5	1.1.1.1	0x987f	Standard query (0)	c3.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.107517958 CEST	192.168.2.5	1.1.1.1	0xa6a4	Standard query (0)	c3.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.108468056 CEST	192.168.2.5	1.1.1.1	0x29f4	Standard query (0)	c4.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.108700037 CEST	192.168.2.5	1.1.1.1	0x5d19	Standard query (0)	c4.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.109365940 CEST	192.168.2.5	1.1.1.1	0x6a36	Standard query (0)	c5.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.109560013 CEST	192.168.2.5	1.1.1.1	0xa9cd	Standard query (0)	c5.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.110080957 CEST	192.168.2.5	1.1.1.1	0xc4eb	Standard query (0)	c6.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.110220909 CEST	192.168.2.5	1.1.1.1	0xf211	Standard query (0)	c6.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.110604048 CEST	192.168.2.5	1.1.1.1	0x471e	Standard query (0)	c7.eu-4-id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.110841036 CEST	192.168.2.5	1.1.1.1	0x2334	Standard query (0)	c7.eu-4-id5-sync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.227890968 CEST	192.168.2.5	1.1.1.1	0x3dff	Standard query (0)	st.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.228024006 CEST	192.168.2.5	1.1.1.1	0x73b2	Standard query (0)	st.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.228499889 CEST	192.168.2.5	1.1.1.1	0x26d5	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.228705883 CEST	192.168.2.5	1.1.1.1	0xe081	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.281836033 CEST	192.168.2.5	1.1.1.1	0x8956	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.281969070 CEST	192.168.2.5	1.1.1.1	0x5	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:08.922317982 CEST	192.168.2.5	1.1.1.1	0xc01	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.922477961 CEST	192.168.2.5	1.1.1.1	0x7282	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.024262905 CEST	192.168.2.5	1.1.1.1	0x638f	Standard query (0)	ced-ns.sascdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.024406910 CEST	192.168.2.5	1.1.1.1	0x723	Standard query (0)	ced-ns.sascdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.168028116 CEST	192.168.2.5	1.1.1.1	0xd40a	Standard query (0)	x.dlx.addthis.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.168267012 CEST	192.168.2.5	1.1.1.1	0xe20c	Standard query (0)	x.dlx.addthis.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.186918020 CEST	192.168.2.5	1.1.1.1	0x5c84	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.187062025 CEST	192.168.2.5	1.1.1.1	0x59aa	Standard query (0)	casale-match.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.191557884 CEST	192.168.2.5	1.1.1.1	0x722	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.192181110 CEST	192.168.2.5	1.1.1.1	0x7298	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.319509029 CEST	192.168.2.5	1.1.1.1	0x7f39	Standard query (0)	sync.resetdigital.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.319989920 CEST	192.168.2.5	1.1.1.1	0x7127	Standard query (0)	sync.resetdigital.co	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.414788961 CEST	192.168.2.5	1.1.1.1	0xcbc7	Standard query (0)	e.serverbid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.415307045 CEST	192.168.2.5	1.1.1.1	0xe882	Standard query (0)	e.serverbid.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.417196989 CEST	192.168.2.5	1.1.1.1	0xef9e	Standard query (0)	openrtb-us-east-1.axonix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.417587996 CEST	192.168.2.5	1.1.1.1	0x8076	Standard query (0)	openrtb-us-east-1.axonix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.418232918 CEST	192.168.2.5	1.1.1.1	0x2c59	Standard query (0)	cs.emxdgt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.418545961 CEST	192.168.2.5	1.1.1.1	0x458e	Standard query (0)	cs.emxdgt.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.532409906 CEST	192.168.2.5	1.1.1.1	0x7ac7	Standard query (0)	vop.sundaysky.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.532555103 CEST	192.168.2.5	1.1.1.1	0xba6b	Standard query (0)	vop.sundaysky.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.533067942 CEST	192.168.2.5	1.1.1.1	0xff91	Standard query (0)	xsync.iqzone.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.533200026 CEST	192.168.2.5	1.1.1.1	0xee72	Standard query (0)	xsync.iqzone.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.655004978 CEST	192.168.2.5	1.1.1.1	0x81b7	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.655142069 CEST	192.168.2.5	1.1.1.1	0x3073	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.773022890 CEST	192.168.2.5	1.1.1.1	0x81be	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.773242950 CEST	192.168.2.5	1.1.1.1	0xc6f6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.776541948 CEST	192.168.2.5	1.1.1.1	0xb171	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.776704073 CEST	192.168.2.5	1.1.1.1	0x9a98	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.845386982 CEST	192.168.2.5	1.1.1.1	0x8cdc	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.845694065 CEST	192.168.2.5	1.1.1.1	0x35b8	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:09.859399080 CEST	192.168.2.5	1.1.1.1	0x2c04	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.859707117 CEST	192.168.2.5	1.1.1.1	0xeb32	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:10.044121027 CEST	192.168.2.5	1.1.1.1	0xd755	Standard query (0)	ck.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.044331074 CEST	192.168.2.5	1.1.1.1	0xf35b	Standard query (0)	ck.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:10.169348955 CEST	192.168.2.5	1.1.1.1	0x84bc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.169713974 CEST	192.168.2.5	1.1.1.1	0x5f2	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:10.870018959 CEST	192.168.2.5	1.1.1.1	0x87c4	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.870239019 CEST	192.168.2.5	1.1.1.1	0xc04d	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:10.870857954 CEST	192.168.2.5	1.1.1.1	0x9c0a	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.871125937 CEST	192.168.2.5	1.1.1.1	0x10d5	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:10.871625900 CEST	192.168.2.5	1.1.1.1	0x1be7	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.871835947 CEST	192.168.2.5	1.1.1.1	0x91d5	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:11.160875082 CEST	192.168.2.5	1.1.1.1	0x4770	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.161199093 CEST	192.168.2.5	1.1.1.1	0x6b94	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:11.595509052 CEST	192.168.2.5	1.1.1.1	0x9208	Standard query (0)	cs.mobfox.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.595642090 CEST	192.168.2.5	1.1.1.1	0x627c	Standard query (0)	cs.mobfox.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:11.596062899 CEST	192.168.2.5	1.1.1.1	0xaa28	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.596215963 CEST	192.168.2.5	1.1.1.1	0xd1e2	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:11.950186968 CEST	192.168.2.5	1.1.1.1	0x7e4b	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.950350046 CEST	192.168.2.5	1.1.1.1	0xf277	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:12.057282925 CEST	192.168.2.5	1.1.1.1	0x377	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.276346922 CEST	192.168.2.5	1.1.1.1	0xc26	Standard query (0)	sync.resetdigital.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.276904106 CEST	192.168.2.5	1.1.1.1	0x7755	Standard query (0)	sync.resetdigital.co	65	IN (0x0001)	false
Apr 19, 2024 15:13:12.918303013 CEST	192.168.2.5	1.1.1.1	0xbd9d	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.918437958 CEST	192.168.2.5	1.1.1.1	0x9c4a	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:12.919146061 CEST	192.168.2.5	1.1.1.1	0x2791	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.919383049 CEST	192.168.2.5	1.1.1.1	0x5ee	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:13.031981945 CEST	192.168.2.5	1.1.1.1	0x43c4	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.032130957 CEST	192.168.2.5	1.1.1.1	0x1c92	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:13.049454927 CEST	192.168.2.5	1.1.1.1	0xdd32	Standard query (0)	api-2-0.spot.im	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.049787998 CEST	192.168.2.5	1.1.1.1	0x8bd8	Standard query (0)	api-2-0.spot.im	65	IN (0x0001)	false
Apr 19, 2024 15:13:13.454906940 CEST	192.168.2.5	1.1.1.1	0xc8f3	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.455104113 CEST	192.168.2.5	1.1.1.1	0x2332	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:13.653734922 CEST	192.168.2.5	1.1.1.1	0xd754	Standard query (0)	public.servenobid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.653944969 CEST	192.168.2.5	1.1.1.1	0x4fc0	Standard query (0)	public.servenobid.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:14.050659895 CEST	192.168.2.5	1.1.1.1	0xb4cc	Standard query (0)	e.cdnwidget.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:14.050833941 CEST	192.168.2.5	1.1.1.1	0x5615	Standard query (0)	e.cdnwidget.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:15.153042078 CEST	192.168.2.5	1.1.1.1	0x6472	Standard query (0)	usr.undertone.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:15.153172970 CEST	192.168.2.5	1.1.1.1	0x869b	Standard query (0)	usr.undertone.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:17.735160112 CEST	192.168.2.5	1.1.1.1	0x840d	Standard query (0)	c.4dex.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.735606909 CEST	192.168.2.5	1.1.1.1	0xe0cb	Standard query (0)	c.4dex.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:17.736155987 CEST	192.168.2.5	1.1.1.1	0xdcb1	Standard query (0)	beacon-sjc2.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.736313105 CEST	192.168.2.5	1.1.1.1	0x5a18	Standard query (0)	beacon-sjc2.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:17.795619965 CEST	192.168.2.5	1.1.1.1	0xc888	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.795784950 CEST	192.168.2.5	1.1.1.1	0x62d7	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:17.967664003 CEST	192.168.2.5	1.1.1.1	0xef64	Standard query (0)	cat.us5.us.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.967876911 CEST	192.168.2.5	1.1.1.1	0x2519	Standard query (0)	cat.us5.us.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:18.103439093 CEST	192.168.2.5	1.1.1.1	0xb1e9	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.103924990 CEST	192.168.2.5	1.1.1.1	0xbd1d	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:18.104419947 CEST	192.168.2.5	1.1.1.1	0xfa4f	Standard query (0)	widget.us5.us.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.104790926 CEST	192.168.2.5	1.1.1.1	0x6486	Standard query (0)	widget.us5.us.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:18.105408907 CEST	192.168.2.5	1.1.1.1	0x179	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.105613947 CEST	192.168.2.5	1.1.1.1	0x4d7d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.283271074 CEST	192.168.2.5	1.1.1.1	0x912d	Standard query (0)	aax-us-east.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.283420086 CEST	192.168.2.5	1.1.1.1	0xf398	Standard query (0)	aax-us-east.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.296406031 CEST	192.168.2.5	1.1.1.1	0x114a	Standard query (0)	ad-cdn.technoratimedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.296632051 CEST	192.168.2.5	1.1.1.1	0x6c2c	Standard query (0)	ad-cdn.technoratimedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.297544956 CEST	192.168.2.5	1.1.1.1	0x79d6	Standard query (0)	synacor-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.298068047 CEST	192.168.2.5	1.1.1.1	0xa871	Standard query (0)	synacor-match.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.383434057 CEST	192.168.2.5	1.1.1.1	0x2ed2	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.383872032 CEST	192.168.2.5	1.1.1.1	0x2656	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.889652967 CEST	192.168.2.5	1.1.1.1	0x1b1b	Standard query (0)	partner.mediawallahscript.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.890342951 CEST	192.168.2.5	1.1.1.1	0x21e7	Standard query (0)	partner.mediawallahscript.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.892064095 CEST	192.168.2.5	1.1.1.1	0xceb1	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.892643929 CEST	192.168.2.5	1.1.1.1	0x74a8	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.893311977 CEST	192.168.2.5	1.1.1.1	0x4355	Standard query (0)	sync-t1.taboola.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.893493891 CEST	192.168.2.5	1.1.1.1	0xb147	Standard query (0)	sync-t1.taboola.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:19.996275902 CEST	192.168.2.5	1.1.1.1	0x6cae	Standard query (0)	dis.eu.criteo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996535063 CEST	192.168.2.5	1.1.1.1	0xcbd9	Standard query (0)	dis.eu.criteo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:20.362338066 CEST	192.168.2.5	1.1.1.1	0xdaf0	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:20.362572908 CEST	192.168.2.5	1.1.1.1	0x2780	Standard query (0)	d.adroll.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:20.369462013 CEST	192.168.2.5	1.1.1.1	0x37fa	Standard query (0)	dmp.brand-display.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:20.369597912 CEST	192.168.2.5	1.1.1.1	0x89b3	Standard query (0)	dmp.brand-display.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:21.357630968 CEST	192.168.2.5	1.1.1.1	0xc660	Standard query (0)	cs-rtb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.357975960 CEST	192.168.2.5	1.1.1.1	0xac93	Standard query (0)	cs-rtb.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:21.416014910 CEST	192.168.2.5	1.1.1.1	0xa001	Standard query (0)	criteo-sync.teads.tv	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.416639090 CEST	192.168.2.5	1.1.1.1	0x710e	Standard query (0)	criteo-sync.teads.tv	65	IN (0x0001)	false
Apr 19, 2024 15:13:21.701133966 CEST	192.168.2.5	1.1.1.1	0xf44b	Standard query (0)	m.media-amazon.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.701280117 CEST	192.168.2.5	1.1.1.1	0xd4a8	Standard query (0)	m.media-amazon.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:21.701683044 CEST	192.168.2.5	1.1.1.1	0x7cb4	Standard query (0)	images-na.ssl-images-amazon.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.702409983 CEST	192.168.2.5	1.1.1.1	0x7b66	Standard query (0)	images-na.ssl-images-amazon.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:21.702900887 CEST	192.168.2.5	1.1.1.1	0x79a0	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.703182936 CEST	192.168.2.5	1.1.1.1	0x9239	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:21.936351061 CEST	192.168.2.5	1.1.1.1	0xef2c	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.936738968 CEST	192.168.2.5	1.1.1.1	0xb749	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.276683092 CEST	192.168.2.5	1.1.1.1	0x9467	Standard query (0)	ts.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.276962996 CEST	192.168.2.5	1.1.1.1	0xe132	Standard query (0)	ts.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.296297073 CEST	192.168.2.5	1.1.1.1	0x804f	Standard query (0)	um4.eqads.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.296582937 CEST	192.168.2.5	1.1.1.1	0xeede	Standard query (0)	um4.eqads.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.298671007 CEST	192.168.2.5	1.1.1.1	0xba98	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.299104929 CEST	192.168.2.5	1.1.1.1	0x49fc	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.606432915 CEST	192.168.2.5	1.1.1.1	0x6d10	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.607260942 CEST	192.168.2.5	1.1.1.1	0x9dad	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.608670950 CEST	192.168.2.5	1.1.1.1	0x8610	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.609493971 CEST	192.168.2.5	1.1.1.1	0xa8e9	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.622306108 CEST	192.168.2.5	1.1.1.1	0x4880	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.639930964 CEST	192.168.2.5	1.1.1.1	0x8774	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.640186071 CEST	192.168.2.5	1.1.1.1	0x1d8b	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.706456900 CEST	192.168.2.5	1.1.1.1	0x2e7e	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.706645966 CEST	192.168.2.5	1.1.1.1	0xd8a3	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:26.015748978 CEST	192.168.2.5	1.1.1.1	0x1280	Standard query (0)	s.update.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.016237020 CEST	192.168.2.5	1.1.1.1	0xf9ec	Standard query (0)	s.update.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:26.016719103 CEST	192.168.2.5	1.1.1.1	0x76ef	Standard query (0)	beacon-nf.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.016946077 CEST	192.168.2.5	1.1.1.1	0xe4fc	Standard query (0)	beacon-nf.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:26.017278910 CEST	192.168.2.5	1.1.1.1	0x2599	Standard query (0)	protected-by.clarium.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.017460108 CEST	192.168.2.5	1.1.1.1	0xb1c0	Standard query (0)	protected-by.clarium.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:26.019445896 CEST	192.168.2.5	1.1.1.1	0x4ea3	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.019561052 CEST	192.168.2.5	1.1.1.1	0x33ca	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.267410040 CEST	192.168.2.5	1.1.1.1	0xe14a	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.267627954 CEST	192.168.2.5	1.1.1.1	0x5467	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.269280910 CEST	192.168.2.5	1.1.1.1	0x1015	Standard query (0)	b.admedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.269825935 CEST	192.168.2.5	1.1.1.1	0xb509	Standard query (0)	b.admedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.282452106 CEST	192.168.2.5	1.1.1.1	0xcfaa	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.282605886 CEST	192.168.2.5	1.1.1.1	0xa75e	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.282926083 CEST	192.168.2.5	1.1.1.1	0xc9c7	Standard query (0)	vid.vidoomy.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.283198118 CEST	192.168.2.5	1.1.1.1	0x3885	Standard query (0)	vid.vidoomy.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.283626080 CEST	192.168.2.5	1.1.1.1	0xfbef	Standard query (0)	ads.us.e-planning.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.283720016 CEST	192.168.2.5	1.1.1.1	0x82a8	Standard query (0)	ads.us.e-planning.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.446758032 CEST	192.168.2.5	1.1.1.1	0x2737	Standard query (0)	visitor-us-west-2.omnitagjs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.446957111 CEST	192.168.2.5	1.1.1.1	0xa210	Standard query (0)	visitor-us-west-2.omnitagjs.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.464556932 CEST	192.168.2.5	1.1.1.1	0x1a4d	Standard query (0)	cw.addthis.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.464699984 CEST	192.168.2.5	1.1.1.1	0x85f8	Standard query (0)	cw.addthis.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.551122904 CEST	192.168.2.5	1.1.1.1	0xb59e	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551959038 CEST	192.168.2.5	1.1.1.1	0xd0a3	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.982362032 CEST	192.168.2.5	1.1.1.1	0x2c9b	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.982569933 CEST	192.168.2.5	1.1.1.1	0xbc22	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.983949900 CEST	192.168.2.5	1.1.1.1	0x291	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.984184980 CEST	192.168.2.5	1.1.1.1	0x2e2e	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:28.992177963 CEST	192.168.2.5	1.1.1.1	0xa64f	Standard query (0)	trends.revcontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.992326975 CEST	192.168.2.5	1.1.1.1	0xfdf7	Standard query (0)	trends.revcontent.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.092788935 CEST	192.168.2.5	1.1.1.1	0xb4cc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.092962027 CEST	192.168.2.5	1.1.1.1	0x8958	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.094327927 CEST	192.168.2.5	1.1.1.1	0x265f	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.094470978 CEST	192.168.2.5	1.1.1.1	0xaaf6	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.122386932 CEST	192.168.2.5	1.1.1.1	0x9cc8	Standard query (0)	map.go.affec.tv	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.122952938 CEST	192.168.2.5	1.1.1.1	0x8bb0	Standard query (0)	map.go.affec.tv	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.125009060 CEST	192.168.2.5	1.1.1.1	0xc9c2	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.125447035 CEST	192.168.2.5	1.1.1.1	0x1d38	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.126504898 CEST	192.168.2.5	1.1.1.1	0x3499	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.126857042 CEST	192.168.2.5	1.1.1.1	0xe595	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.128391981 CEST	192.168.2.5	1.1.1.1	0x8f1d	Standard query (0)	dp1.33across.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.128705025 CEST	192.168.2.5	1.1.1.1	0x5c9f	Standard query (0)	dp1.33across.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.142489910 CEST	192.168.2.5	1.1.1.1	0x80d9	Standard query (0)	contextual-analytics.wunderkind.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.143366098 CEST	192.168.2.5	1.1.1.1	0x3f3a	Standard query (0)	contextual-analytics.wunderkind.co	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.571845055 CEST	192.168.2.5	1.1.1.1	0x78b5	Standard query (0)	img.connatix.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.572009087 CEST	192.168.2.5	1.1.1.1	0x4793	Standard query (0)	img.connatix.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.575787067 CEST	192.168.2.5	1.1.1.1	0xd7e0	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.576088905 CEST	192.168.2.5	1.1.1.1	0x973a	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.577610970 CEST	192.168.2.5	1.1.1.1	0x544c	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.577763081 CEST	192.168.2.5	1.1.1.1	0xeeb9	Standard query (0)	beacon.krxd.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.605189085 CEST	192.168.2.5	1.1.1.1	0xab28	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.605365038 CEST	192.168.2.5	1.1.1.1	0x6687	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.773376942 CEST	192.168.2.5	1.1.1.1	0xa45c	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:33.991821051 CEST	192.168.2.5	1.1.1.1	0xd2f4	Standard query (0)	eua.instiengage.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:33.992002964 CEST	192.168.2.5	1.1.1.1	0x8821	Standard query (0)	eua.instiengage.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.237097979 CEST	192.168.2.5	1.1.1.1	0x750d	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.237582922 CEST	192.168.2.5	1.1.1.1	0x643	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.281537056 CEST	192.168.2.5	1.1.1.1	0x788	Standard query (0)	s2.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.281698942 CEST	192.168.2.5	1.1.1.1	0xb858	Standard query (0)	s2.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.281929016 CEST	192.168.2.5	1.1.1.1	0xc94a	Standard query (0)	d37unsldgykj8z.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.282058954 CEST	192.168.2.5	1.1.1.1	0xc474	Standard query (0)	d37unsldgykj8z.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.417042017 CEST	192.168.2.5	1.1.1.1	0xa7c6	Standard query (0)	silo40.p7cloud.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.417475939 CEST	192.168.2.5	1.1.1.1	0xd1c2	Standard query (0)	silo40.p7cloud.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.492407084 CEST	192.168.2.5	1.1.1.1	0xd14e	Standard query (0)	static.agkn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.492609978 CEST	192.168.2.5	1.1.1.1	0x1421	Standard query (0)	static.agkn.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.654180050 CEST	192.168.2.5	1.1.1.1	0xb0d5	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.654521942 CEST	192.168.2.5	1.1.1.1	0x3fe5	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.655886889 CEST	192.168.2.5	1.1.1.1	0xb920	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.656039953 CEST	192.168.2.5	1.1.1.1	0x13f0	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:35.980971098 CEST	192.168.2.5	1.1.1.1	0x1c38	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.981429100 CEST	192.168.2.5	1.1.1.1	0xb0f0	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:36.528456926 CEST	192.168.2.5	1.1.1.1	0x6944	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:36.528816938 CEST	192.168.2.5	1.1.1.1	0xbedc	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:37.032390118 CEST	192.168.2.5	1.1.1.1	0xab65	Standard query (0)	targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:37.032552004 CEST	192.168.2.5	1.1.1.1	0x15b1	Standard query (0)	targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:37.044054031 CEST	192.168.2.5	1.1.1.1	0x26bc	Standard query (0)	web.hb.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:37.044398069 CEST	192.168.2.5	1.1.1.1	0x8c26	Standard query (0)	web.hb.ad.cpe.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:37.045310020 CEST	192.168.2.5	1.1.1.1	0x5d73	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:37.045732021 CEST	192.168.2.5	1.1.1.1	0xcfe6	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:38.479901075 CEST	192.168.2.5	1.1.1.1	0x9d31	Standard query (0)	t.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:38.480684996 CEST	192.168.2.5	1.1.1.1	0xff16	Standard query (0)	t.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:39.242122889 CEST	192.168.2.5	1.1.1.1	0xe0d1	Standard query (0)	www.justjared.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:39.242278099 CEST	192.168.2.5	1.1.1.1	0x3c6e	Standard query (0)	www.justjared.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:39.256458998 CEST	192.168.2.5	1.1.1.1	0xfd16	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:39.256779909 CEST	192.168.2.5	1.1.1.1	0xf56	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.054990053 CEST	192.168.2.5	1.1.1.1	0x1b12	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.055383921 CEST	192.168.2.5	1.1.1.1	0x64c3	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.064316034 CEST	192.168.2.5	1.1.1.1	0x4328	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.064764977 CEST	192.168.2.5	1.1.1.1	0x86db	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.606342077 CEST	192.168.2.5	1.1.1.1	0xcf37	Standard query (0)	ssp.wknd.ai	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.606913090 CEST	192.168.2.5	1.1.1.1	0xc1b0	Standard query (0)	ssp.wknd.ai	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.648062944 CEST	192.168.2.5	1.1.1.1	0x68fd	Standard query (0)	as-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.648231030 CEST	192.168.2.5	1.1.1.1	0x2c3b	Standard query (0)	as-sec.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.650002956 CEST	192.168.2.5	1.1.1.1	0x57e0	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.650286913 CEST	192.168.2.5	1.1.1.1	0x372d	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.813683033 CEST	192.168.2.5	1.1.1.1	0x976d	Standard query (0)	amazon-tam-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.813956022 CEST	192.168.2.5	1.1.1.1	0xa93e	Standard query (0)	amazon-tam-match.dotomi.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.818286896 CEST	192.168.2.5	1.1.1.1	0xf720	Standard query (0)	ms-cookie-sync.presage.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.818665981 CEST	192.168.2.5	1.1.1.1	0xfc20	Standard query (0)	ms-cookie-sync.presage.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:43.983350039 CEST	192.168.2.5	1.1.1.1	0x1f03	Standard query (0)	sync.kueezrtb.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.983647108 CEST	192.168.2.5	1.1.1.1	0x9036	Standard query (0)	sync.kueezrtb.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:44.703000069 CEST	192.168.2.5	1.1.1.1	0x3d72	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.703206062 CEST	192.168.2.5	1.1.1.1	0x7013	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.293015003 CEST	192.168.2.5	1.1.1.1	0x2d60	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.293198109 CEST	192.168.2.5	1.1.1.1	0x7c8d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.293982029 CEST	192.168.2.5	1.1.1.1	0x921a	Standard query (0)	ssp.api.tappx.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.294117928 CEST	192.168.2.5	1.1.1.1	0x1760	Standard query (0)	ssp.api.tappx.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.302839041 CEST	192.168.2.5	1.1.1.1	0xd593	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.303006887 CEST	192.168.2.5	1.1.1.1	0x6bd5	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.303601980 CEST	192.168.2.5	1.1.1.1	0x8b32	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.303941965 CEST	192.168.2.5	1.1.1.1	0x19b7	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.315023899 CEST	192.168.2.5	1.1.1.1	0xae46	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.315217972 CEST	192.168.2.5	1.1.1.1	0xab8e	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.315850973 CEST	192.168.2.5	1.1.1.1	0x7af8	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.317784071 CEST	192.168.2.5	1.1.1.1	0x160b	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.398993969 CEST	192.168.2.5	1.1.1.1	0xff5e	Standard query (0)	ex.ingage.tech	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.399379969 CEST	192.168.2.5	1.1.1.1	0x102	Standard query (0)	ex.ingage.tech	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.417157888 CEST	192.168.2.5	1.1.1.1	0xb78b	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.417515993 CEST	192.168.2.5	1.1.1.1	0x7cc3	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.433631897 CEST	192.168.2.5	1.1.1.1	0x50da	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.434086084 CEST	192.168.2.5	1.1.1.1	0xce8c	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.444329023 CEST	192.168.2.5	1.1.1.1	0xb1c	Standard query (0)	hb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.446872950 CEST	192.168.2.5	1.1.1.1	0x6fdb	Standard query (0)	hb.minutemedia-prebid.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.450262070 CEST	192.168.2.5	1.1.1.1	0x6b85	Standard query (0)	mp.4dex.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.450531006 CEST	192.168.2.5	1.1.1.1	0xa2a6	Standard query (0)	mp.4dex.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.458869934 CEST	192.168.2.5	1.1.1.1	0x7c23	Standard query (0)	hb.yellowblue.io	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.459187031 CEST	192.168.2.5	1.1.1.1	0x6f14	Standard query (0)	hb.yellowblue.io	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.461199045 CEST	192.168.2.5	1.1.1.1	0x8642	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.461350918 CEST	192.168.2.5	1.1.1.1	0xa70d	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.705183029 CEST	192.168.2.5	1.1.1.1	0x95d7	Standard query (0)	ssp.wknd.ai	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.705569983 CEST	192.168.2.5	1.1.1.1	0x2903	Standard query (0)	ssp.wknd.ai	65	IN (0x0001)	false
Apr 19, 2024 15:13:48.717681885 CEST	192.168.2.5	1.1.1.1	0xafd2	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.718014956 CEST	192.168.2.5	1.1.1.1	0xd8ea	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:49.313096046 CEST	192.168.2.5	1.1.1.1	0x54e3	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:49.313096046 CEST	192.168.2.5	1.1.1.1	0xa051	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:49.315466881 CEST	192.168.2.5	1.1.1.1	0x6eca	Standard query (0)	crcldu.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:49.315466881 CEST	192.168.2.5	1.1.1.1	0x7670	Standard query (0)	crcldu.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:51.296777964 CEST	192.168.2.5	1.1.1.1	0xc89f	Standard query (0)	pbs.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:51.297390938 CEST	192.168.2.5	1.1.1.1	0x1665	Standard query (0)	pbs.nextmillmedia.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:51.746562004 CEST	192.168.2.5	1.1.1.1	0x98d7	Standard query (0)	sq-tungsten-ts.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:51.767651081 CEST	192.168.2.5	1.1.1.1	0xf849	Standard query (0)	sq-tungsten-ts.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:51.794764042 CEST	192.168.2.5	1.1.1.1	0x8211	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:51.794945002 CEST	192.168.2.5	1.1.1.1	0x2839	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:52.445727110 CEST	192.168.2.5	1.1.1.1	0x8137	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.445904016 CEST	192.168.2.5	1.1.1.1	0x885c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 15:13:52.732635021 CEST	192.168.2.5	1.1.1.1	0x9674	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.732759953 CEST	192.168.2.5	1.1.1.1	0xe0d4	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 19, 2024 15:13:53.304847956 CEST	192.168.2.5	1.1.1.1	0x38a6	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.304847956 CEST	192.168.2.5	1.1.1.1	0x49fa	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 19, 2024 15:13:53.625555038 CEST	192.168.2.5	1.1.1.1	0x82c8	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.625555038 CEST	192.168.2.5	1.1.1.1	0x22d3	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:54.567984104 CEST	192.168.2.5	1.1.1.1	0x549d	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.568144083 CEST	192.168.2.5	1.1.1.1	0xcff0	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:54.573168993 CEST	192.168.2.5	1.1.1.1	0x8995	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.573401928 CEST	192.168.2.5	1.1.1.1	0x3d8a	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:54.578275919 CEST	192.168.2.5	1.1.1.1	0x51be	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.578429937 CEST	192.168.2.5	1.1.1.1	0xa7dd	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:54.802468061 CEST	192.168.2.5	1.1.1.1	0xc8c8	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.802839041 CEST	192.168.2.5	1.1.1.1	0x9b52	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:55.358294010 CEST	192.168.2.5	1.1.1.1	0xc5ff	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:55.358454943 CEST	192.168.2.5	1.1.1.1	0xbf39	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:57.885693073 CEST	192.168.2.5	1.1.1.1	0x913d	Standard query (0)	vpaid.vidoomy.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:57.885852098 CEST	192.168.2.5	1.1.1.1	0xc99c	Standard query (0)	vpaid.vidoomy.com	65	IN (0x0001)	false
Apr 19, 2024 15:13:59.119179010 CEST	192.168.2.5	1.1.1.1	0x169b	Standard query (0)	a.vidoomy.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:59.119426966 CEST	192.168.2.5	1.1.1.1	0xc22e	Standard query (0)	a.vidoomy.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 15:12:23.573746920 CEST	1.1.1.1	192.168.2.5	0xf13b	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:23.574712992 CEST	1.1.1.1	192.168.2.5	0x6ec8	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:23.683583975 CEST	1.1.1.1	192.168.2.5	0x2b2f	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:23.685389996 CEST	1.1.1.1	192.168.2.5	0x2a4b	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:24.479751110 CEST	1.1.1.1	192.168.2.5	0x5659	No error (0)	d188m5xxcpvuue.cloudfront.net		108.138.64.51	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.479751110 CEST	1.1.1.1	192.168.2.5	0x5659	No error (0)	d188m5xxcpvuue.cloudfront.net		108.138.64.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.479751110 CEST	1.1.1.1	192.168.2.5	0x5659	No error (0)	d188m5xxcpvuue.cloudfront.net		108.138.64.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.479751110 CEST	1.1.1.1	192.168.2.5	0x5659	No error (0)	d188m5xxcpvuue.cloudfront.net		108.138.64.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489008904 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489008904 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489008904 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489008904 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489008904 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489008904 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:24.489197016 CEST	1.1.1.1	192.168.2.5	0xf8e9	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:24.492166996 CEST	1.1.1.1	192.168.2.5	0x37f4	No error (0)	cdn01.justjared.com	cdn01.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:24.495146990 CEST	1.1.1.1	192.168.2.5	0x9bc1	No error (0)	cdn01.justjared.com	cdn01.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.104974985 CEST	1.1.1.1	192.168.2.5	0x90fb	No error (0)	cdn01.justjared.com	cdn01.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.105052948 CEST	1.1.1.1	192.168.2.5	0xb694	No error (0)	cdn01.justjared.com	cdn01.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.472697973 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.472697973 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.472697973 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.472697973 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.472697973 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.472697973 CEST	1.1.1.1	192.168.2.5	0x70e9	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.473151922 CEST	1.1.1.1	192.168.2.5	0xeff5	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:25.790785074 CEST	1.1.1.1	192.168.2.5	0x1982	No error (0)	s.skimresources.com	f6.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.790801048 CEST	1.1.1.1	192.168.2.5	0x2399	No error (0)	s.skimresources.com	f6.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.867759943 CEST	1.1.1.1	192.168.2.5	0x6924	No error (0)	cdn.privacy-mgmt.com		13.32.230.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.867759943 CEST	1.1.1.1	192.168.2.5	0x6924	No error (0)	cdn.privacy-mgmt.com		13.32.230.36	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.867759943 CEST	1.1.1.1	192.168.2.5	0x6924	No error (0)	cdn.privacy-mgmt.com		13.32.230.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.867759943 CEST	1.1.1.1	192.168.2.5	0x6924	No error (0)	cdn.privacy-mgmt.com		13.32.230.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869416952 CEST	1.1.1.1	192.168.2.5	0x91a7	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:25.869455099 CEST	1.1.1.1	192.168.2.5	0x7c78	No error (0)	01.cdn.mediatradecraft.com	d188m5xxcpvuue.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869455099 CEST	1.1.1.1	192.168.2.5	0x7c78	No error (0)	d188m5xxcpvuue.cloudfront.net		18.64.155.89	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869455099 CEST	1.1.1.1	192.168.2.5	0x7c78	No error (0)	d188m5xxcpvuue.cloudfront.net		18.64.155.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869455099 CEST	1.1.1.1	192.168.2.5	0x7c78	No error (0)	d188m5xxcpvuue.cloudfront.net		18.64.155.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869455099 CEST	1.1.1.1	192.168.2.5	0x7c78	No error (0)	d188m5xxcpvuue.cloudfront.net		18.64.155.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869592905 CEST	1.1.1.1	192.168.2.5	0x5623	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869592905 CEST	1.1.1.1	192.168.2.5	0x5623	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.869654894 CEST	1.1.1.1	192.168.2.5	0x1b10	No error (0)	01.cdn.mediatradecraft.com	d188m5xxcpvuue.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.870261908 CEST	1.1.1.1	192.168.2.5	0xed8	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.870507002 CEST	1.1.1.1	192.168.2.5	0x5cf3	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.870507002 CEST	1.1.1.1	192.168.2.5	0x5cf3	No error (0)	d1ykf07e75w7ss.cloudfront.net		54.230.252.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.871035099 CEST	1.1.1.1	192.168.2.5	0xd87	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.871035099 CEST	1.1.1.1	192.168.2.5	0xd87	No error (0)	securepubads46.g.doubleclick.net		64.233.185.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.871035099 CEST	1.1.1.1	192.168.2.5	0xd87	No error (0)	securepubads46.g.doubleclick.net		64.233.185.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.871035099 CEST	1.1.1.1	192.168.2.5	0xd87	No error (0)	securepubads46.g.doubleclick.net		64.233.185.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.871035099 CEST	1.1.1.1	192.168.2.5	0xd87	No error (0)	securepubads46.g.doubleclick.net		64.233.185.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.871939898 CEST	1.1.1.1	192.168.2.5	0xa085	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.873323917 CEST	1.1.1.1	192.168.2.5	0x3d95	No error (0)	cdn.sided.co	d3d6yaw6jhuiv4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:25.873323917 CEST	1.1.1.1	192.168.2.5	0x3d95	No error (0)	d3d6yaw6jhuiv4.cloudfront.net		3.161.150.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.873323917 CEST	1.1.1.1	192.168.2.5	0x3d95	No error (0)	d3d6yaw6jhuiv4.cloudfront.net		3.161.150.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.873323917 CEST	1.1.1.1	192.168.2.5	0x3d95	No error (0)	d3d6yaw6jhuiv4.cloudfront.net		3.161.150.89	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.873323917 CEST	1.1.1.1	192.168.2.5	0x3d95	No error (0)	d3d6yaw6jhuiv4.cloudfront.net		3.161.150.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:25.875571012 CEST	1.1.1.1	192.168.2.5	0x3e58	No error (0)	cdn.sided.co	d3d6yaw6jhuiv4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:26.480340004 CEST	1.1.1.1	192.168.2.5	0x5f5b	No error (0)	castbox.fm		43.206.17.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:26.480340004 CEST	1.1.1.1	192.168.2.5	0x5f5b	No error (0)	castbox.fm		35.74.121.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:26.482105017 CEST	1.1.1.1	192.168.2.5	0x4a99	No error (0)	mediatradecraft-com.videoplayerhub.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:26.483726025 CEST	1.1.1.1	192.168.2.5	0xda2a	No error (0)	mediatradecraft-com.videoplayerhub.com		104.26.8.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:26.483726025 CEST	1.1.1.1	192.168.2.5	0xda2a	No error (0)	mediatradecraft-com.videoplayerhub.com		104.26.9.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:26.483726025 CEST	1.1.1.1	192.168.2.5	0xda2a	No error (0)	mediatradecraft-com.videoplayerhub.com		172.67.74.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:27.436264038 CEST	1.1.1.1	192.168.2.5	0x4122	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:27.436264038 CEST	1.1.1.1	192.168.2.5	0x4122	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:27.436264038 CEST	1.1.1.1	192.168.2.5	0x4122	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:27.436640978 CEST	1.1.1.1	192.168.2.5	0x94c2	No error (0)	btloader.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:28.438968897 CEST	1.1.1.1	192.168.2.5	0x728a	No error (0)	r.skimresources.com		35.190.59.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.457003117 CEST	1.1.1.1	192.168.2.5	0xc21f	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.457003117 CEST	1.1.1.1	192.168.2.5	0xc21f	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.457003117 CEST	1.1.1.1	192.168.2.5	0xc21f	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.457003117 CEST	1.1.1.1	192.168.2.5	0xc21f	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.458961964 CEST	1.1.1.1	192.168.2.5	0xa572	No error (0)	api.rlcdn.com		34.107.165.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		3.211.134.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		18.213.144.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		34.233.8.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		54.85.178.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		52.2.42.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		44.215.28.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		3.211.208.73	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.459852934 CEST	1.1.1.1	192.168.2.5	0x17eb	No error (0)	idx.cph.liveintent.com		3.81.182.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:28.465049028 CEST	1.1.1.1	192.168.2.5	0x8c16	No error (0)	cdn01.justjaredjr.com	cdn01.justjaredjr.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:28.465221882 CEST	1.1.1.1	192.168.2.5	0x3352	No error (0)	cdn01.justjaredjr.com	cdn01.justjaredjr.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:28.465544939 CEST	1.1.1.1	192.168.2.5	0x6670	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.164156914 CEST	1.1.1.1	192.168.2.5	0xcd6e	No error (0)	s3.castbox.fm	d1asnxkov2i2k7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.164156914 CEST	1.1.1.1	192.168.2.5	0xcd6e	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.164156914 CEST	1.1.1.1	192.168.2.5	0xcd6e	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.164156914 CEST	1.1.1.1	192.168.2.5	0xcd6e	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.164156914 CEST	1.1.1.1	192.168.2.5	0xcd6e	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.166201115 CEST	1.1.1.1	192.168.2.5	0x612	No error (0)	s3.castbox.fm	d1asnxkov2i2k7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.232273102 CEST	1.1.1.1	192.168.2.5	0x4416	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.232273102 CEST	1.1.1.1	192.168.2.5	0x4416	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.233201027 CEST	1.1.1.1	192.168.2.5	0xbb16	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:29.272142887 CEST	1.1.1.1	192.168.2.5	0xf838	No error (0)	sb.scorecardresearch.com		18.155.1.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.272142887 CEST	1.1.1.1	192.168.2.5	0xf838	No error (0)	sb.scorecardresearch.com		18.155.1.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.272142887 CEST	1.1.1.1	192.168.2.5	0xf838	No error (0)	sb.scorecardresearch.com		18.155.1.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.272142887 CEST	1.1.1.1	192.168.2.5	0xf838	No error (0)	sb.scorecardresearch.com		18.155.1.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	global.px.quantserve.com		192.184.67.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292323112 CEST	1.1.1.1	192.168.2.5	0x4d88	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292992115 CEST	1.1.1.1	192.168.2.5	0x2db2	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.292992115 CEST	1.1.1.1	192.168.2.5	0x2db2	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.325232983 CEST	1.1.1.1	192.168.2.5	0x5f1b	No error (0)	js.gumgum.com		18.64.236.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.325232983 CEST	1.1.1.1	192.168.2.5	0x5f1b	No error (0)	js.gumgum.com		18.64.236.121	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.325232983 CEST	1.1.1.1	192.168.2.5	0x5f1b	No error (0)	js.gumgum.com		18.64.236.86	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.325232983 CEST	1.1.1.1	192.168.2.5	0x5f1b	No error (0)	js.gumgum.com		18.64.236.129	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.325285912 CEST	1.1.1.1	192.168.2.5	0x7df7	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.325285912 CEST	1.1.1.1	192.168.2.5	0x7df7	No error (0)	platform.twitter.map.fastly.net		151.101.12.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.326155901 CEST	1.1.1.1	192.168.2.5	0x46be	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.326155901 CEST	1.1.1.1	192.168.2.5	0x46be	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.326155901 CEST	1.1.1.1	192.168.2.5	0x46be	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.326155901 CEST	1.1.1.1	192.168.2.5	0x46be	No error (0)	cs1-lb-us.8315.ecdns.net	cs491.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.364625931 CEST	1.1.1.1	192.168.2.5	0x2110	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.364625931 CEST	1.1.1.1	192.168.2.5	0x2110	No error (0)	scontent.xx.fbcdn.net		31.13.65.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.366185904 CEST	1.1.1.1	192.168.2.5	0x5156	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.400065899 CEST	1.1.1.1	192.168.2.5	0xf32	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.402651072 CEST	1.1.1.1	192.168.2.5	0x6395	No error (0)	aacdn.nagich.com		172.67.68.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.402651072 CEST	1.1.1.1	192.168.2.5	0x6395	No error (0)	aacdn.nagich.com		104.26.14.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.402651072 CEST	1.1.1.1	192.168.2.5	0x6395	No error (0)	aacdn.nagich.com		104.26.15.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.402786970 CEST	1.1.1.1	192.168.2.5	0xa0fe	No error (0)	aacdn.nagich.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:29.482559919 CEST	1.1.1.1	192.168.2.5	0x8403	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.482800961 CEST	1.1.1.1	192.168.2.5	0xf7b0	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.495110989 CEST	1.1.1.1	192.168.2.5	0xfd34	No error (0)	r.skimresources.com		35.190.59.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.498667002 CEST	1.1.1.1	192.168.2.5	0x6c75	No error (0)	cdn.privacy-mgmt.com		13.32.230.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.498667002 CEST	1.1.1.1	192.168.2.5	0x6c75	No error (0)	cdn.privacy-mgmt.com		13.32.230.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.498667002 CEST	1.1.1.1	192.168.2.5	0x6c75	No error (0)	cdn.privacy-mgmt.com		13.32.230.36	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.498667002 CEST	1.1.1.1	192.168.2.5	0x6c75	No error (0)	cdn.privacy-mgmt.com		13.32.230.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.504987001 CEST	1.1.1.1	192.168.2.5	0xd19d	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.504987001 CEST	1.1.1.1	192.168.2.5	0xd19d	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.504987001 CEST	1.1.1.1	192.168.2.5	0xd19d	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.504987001 CEST	1.1.1.1	192.168.2.5	0xd19d	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508007050 CEST	1.1.1.1	192.168.2.5	0x7a46	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		54.85.178.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		3.230.139.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		3.211.208.73	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		44.215.28.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		52.2.42.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		34.233.8.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		18.213.144.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.508477926 CEST	1.1.1.1	192.168.2.5	0xb234	No error (0)	idx.cph.liveintent.com		3.81.182.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.516598940 CEST	1.1.1.1	192.168.2.5	0xa041	No error (0)	cdn01.justjaredjr.com	cdn01.justjaredjr.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.521229029 CEST	1.1.1.1	192.168.2.5	0xdc39	No error (0)	cdn01.justjaredjr.com	cdn01.justjaredjr.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.747291088 CEST	1.1.1.1	192.168.2.5	0x8cb0	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.747303009 CEST	1.1.1.1	192.168.2.5	0xcb09	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:29.747303009 CEST	1.1.1.1	192.168.2.5	0xcb09	No error (0)	d1ykf07e75w7ss.cloudfront.net		54.230.252.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.890325069 CEST	1.1.1.1	192.168.2.5	0xe746	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.890325069 CEST	1.1.1.1	192.168.2.5	0xe746	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.890325069 CEST	1.1.1.1	192.168.2.5	0xe746	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.890325069 CEST	1.1.1.1	192.168.2.5	0xe746	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.890325069 CEST	1.1.1.1	192.168.2.5	0xe746	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.890325069 CEST	1.1.1.1	192.168.2.5	0xe746	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:29.891185999 CEST	1.1.1.1	192.168.2.5	0x157	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:30.018686056 CEST	1.1.1.1	192.168.2.5	0x8ed1	No error (0)	api2.sided.co		13.248.218.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.018686056 CEST	1.1.1.1	192.168.2.5	0x8ed1	No error (0)	api2.sided.co		76.223.94.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.061551094 CEST	1.1.1.1	192.168.2.5	0x8b6f	No error (0)	t.skimresources.com		35.201.67.47	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.081516027 CEST	1.1.1.1	192.168.2.5	0xc4e1	No error (0)	p.skimresources.com	p-kube.skimresources.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.081516027 CEST	1.1.1.1	192.168.2.5	0xc4e1	No error (0)	p-kube.skimresources.com		35.190.91.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.081527948 CEST	1.1.1.1	192.168.2.5	0xc0b3	No error (0)	p.skimresources.com	p-kube.skimresources.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182519913 CEST	1.1.1.1	192.168.2.5	0xeafc	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182519913 CEST	1.1.1.1	192.168.2.5	0xeafc	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182519913 CEST	1.1.1.1	192.168.2.5	0xeafc	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182519913 CEST	1.1.1.1	192.168.2.5	0xeafc	No error (0)	cs1-lb-us.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182790995 CEST	1.1.1.1	192.168.2.5	0x7a2f	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182790995 CEST	1.1.1.1	192.168.2.5	0x7a2f	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182790995 CEST	1.1.1.1	192.168.2.5	0x7a2f	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182790995 CEST	1.1.1.1	192.168.2.5	0x7a2f	No error (0)	cs1-lb-us.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:30.182790995 CEST	1.1.1.1	192.168.2.5	0x7a2f	No error (0)	cs41.wac.edgecastcdn.net		72.21.91.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.215145111 CEST	1.1.1.1	192.168.2.5	0xfc55	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.215145111 CEST	1.1.1.1	192.168.2.5	0xfc55	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.215145111 CEST	1.1.1.1	192.168.2.5	0xfc55	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.215184927 CEST	1.1.1.1	192.168.2.5	0xecab	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:30.217659950 CEST	1.1.1.1	192.168.2.5	0xd892	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:30.217911959 CEST	1.1.1.1	192.168.2.5	0x39da	No error (0)	ad.doubleclick.net		142.250.9.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.217911959 CEST	1.1.1.1	192.168.2.5	0x39da	No error (0)	ad.doubleclick.net		142.250.9.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.871838093 CEST	1.1.1.1	192.168.2.5	0x4e65	No error (0)	syndicatedsearch.goog		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.871838093 CEST	1.1.1.1	192.168.2.5	0x4e65	No error (0)	syndicatedsearch.goog		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.871838093 CEST	1.1.1.1	192.168.2.5	0x4e65	No error (0)	syndicatedsearch.goog		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.871838093 CEST	1.1.1.1	192.168.2.5	0x4e65	No error (0)	syndicatedsearch.goog		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.871838093 CEST	1.1.1.1	192.168.2.5	0x4e65	No error (0)	syndicatedsearch.goog		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.871838093 CEST	1.1.1.1	192.168.2.5	0x4e65	No error (0)	syndicatedsearch.goog		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.875968933 CEST	1.1.1.1	192.168.2.5	0xf28b	No error (0)	aba.gumgum.com		18.244.202.20	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.875968933 CEST	1.1.1.1	192.168.2.5	0xf28b	No error (0)	aba.gumgum.com		18.244.202.59	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.875968933 CEST	1.1.1.1	192.168.2.5	0xf28b	No error (0)	aba.gumgum.com		18.244.202.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.875968933 CEST	1.1.1.1	192.168.2.5	0xf28b	No error (0)	aba.gumgum.com		18.244.202.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		3.215.243.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		54.242.153.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		34.232.204.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		3.225.190.165	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		3.83.209.251	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		54.90.236.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		3.212.57.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.882047892 CEST	1.1.1.1	192.168.2.5	0xc32	No error (0)	g2.gumgum.com		3.92.97.42	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.992618084 CEST	1.1.1.1	192.168.2.5	0x9850	No error (0)	gumgum.com		18.155.1.6	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.992618084 CEST	1.1.1.1	192.168.2.5	0x9850	No error (0)	gumgum.com		18.155.1.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.992618084 CEST	1.1.1.1	192.168.2.5	0x9850	No error (0)	gumgum.com		18.155.1.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.992618084 CEST	1.1.1.1	192.168.2.5	0x9850	No error (0)	gumgum.com		18.155.1.47	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.994043112 CEST	1.1.1.1	192.168.2.5	0xa85f	No error (0)	c.gumgum.com		18.160.18.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.994043112 CEST	1.1.1.1	192.168.2.5	0xa85f	No error (0)	c.gumgum.com		18.160.18.81	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.994043112 CEST	1.1.1.1	192.168.2.5	0xa85f	No error (0)	c.gumgum.com		18.160.18.79	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:30.994043112 CEST	1.1.1.1	192.168.2.5	0xa85f	No error (0)	c.gumgum.com		18.160.18.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.114670992 CEST	1.1.1.1	192.168.2.5	0xbdab	No error (0)	cdn.privacy-mgmt.com		18.67.76.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.114670992 CEST	1.1.1.1	192.168.2.5	0xbdab	No error (0)	cdn.privacy-mgmt.com		18.67.76.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.114670992 CEST	1.1.1.1	192.168.2.5	0xbdab	No error (0)	cdn.privacy-mgmt.com		18.67.76.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.114670992 CEST	1.1.1.1	192.168.2.5	0xbdab	No error (0)	cdn.privacy-mgmt.com		18.67.76.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.132492065 CEST	1.1.1.1	192.168.2.5	0xfcfe	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.132492065 CEST	1.1.1.1	192.168.2.5	0xfcfe	No error (0)	scontent.xx.fbcdn.net		31.13.65.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.132824898 CEST	1.1.1.1	192.168.2.5	0xacc7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.133497000 CEST	1.1.1.1	192.168.2.5	0xc534	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.133497000 CEST	1.1.1.1	192.168.2.5	0xc534	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.133497000 CEST	1.1.1.1	192.168.2.5	0xc534	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.133497000 CEST	1.1.1.1	192.168.2.5	0xc534	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.133497000 CEST	1.1.1.1	192.168.2.5	0xc534	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.133688927 CEST	1.1.1.1	192.168.2.5	0x21b	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.562127113 CEST	1.1.1.1	192.168.2.5	0x6471	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.562127113 CEST	1.1.1.1	192.168.2.5	0x6471	No error (0)	d2fashanjl7d9f.cloudfront.net		3.161.136.75	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.562127113 CEST	1.1.1.1	192.168.2.5	0x6471	No error (0)	d2fashanjl7d9f.cloudfront.net		3.161.136.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.562127113 CEST	1.1.1.1	192.168.2.5	0x6471	No error (0)	d2fashanjl7d9f.cloudfront.net		3.161.136.43	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.562127113 CEST	1.1.1.1	192.168.2.5	0x6471	No error (0)	d2fashanjl7d9f.cloudfront.net		3.161.136.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.564605951 CEST	1.1.1.1	192.168.2.5	0xdfd3	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.620975018 CEST	1.1.1.1	192.168.2.5	0x496d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:31.621021032 CEST	1.1.1.1	192.168.2.5	0x7f9d	No error (0)	googleads.g.doubleclick.net		142.250.9.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.621021032 CEST	1.1.1.1	192.168.2.5	0x7f9d	No error (0)	googleads.g.doubleclick.net		142.250.9.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.621021032 CEST	1.1.1.1	192.168.2.5	0x7f9d	No error (0)	googleads.g.doubleclick.net		142.250.9.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.621021032 CEST	1.1.1.1	192.168.2.5	0x7f9d	No error (0)	googleads.g.doubleclick.net		142.250.9.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.642371893 CEST	1.1.1.1	192.168.2.5	0x48d4	No error (0)	config.aps.amazon-adsystem.com		13.33.4.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.642371893 CEST	1.1.1.1	192.168.2.5	0x48d4	No error (0)	config.aps.amazon-adsystem.com		13.33.4.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.642371893 CEST	1.1.1.1	192.168.2.5	0x48d4	No error (0)	config.aps.amazon-adsystem.com		13.33.4.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.642371893 CEST	1.1.1.1	192.168.2.5	0x48d4	No error (0)	config.aps.amazon-adsystem.com		13.33.4.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.642652988 CEST	1.1.1.1	192.168.2.5	0x86e0	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.643920898 CEST	1.1.1.1	192.168.2.5	0x44b6	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645252943 CEST	1.1.1.1	192.168.2.5	0x8b9f	No error (0)	cadmus.script.ac		104.18.22.145	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645252943 CEST	1.1.1.1	192.168.2.5	0x8b9f	No error (0)	cadmus.script.ac		104.18.23.145	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645270109 CEST	1.1.1.1	192.168.2.5	0x4c79	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645839930 CEST	1.1.1.1	192.168.2.5	0xc263	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645839930 CEST	1.1.1.1	192.168.2.5	0xc263	No error (0)	securepubads46.g.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645839930 CEST	1.1.1.1	192.168.2.5	0xc263	No error (0)	securepubads46.g.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645839930 CEST	1.1.1.1	192.168.2.5	0xc263	No error (0)	securepubads46.g.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.645839930 CEST	1.1.1.1	192.168.2.5	0xc263	No error (0)	securepubads46.g.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.648356915 CEST	1.1.1.1	192.168.2.5	0xe8b7	No error (0)	cadmus.script.ac			65	IN (0x0001)	false
Apr 19, 2024 15:12:31.649750948 CEST	1.1.1.1	192.168.2.5	0xc741	No error (0)	baitbaseball.com		34.160.169.226	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.658565044 CEST	1.1.1.1	192.168.2.5	0x310a	No error (0)	silo40.p7cloud.net	du8ztun1tankm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.659497023 CEST	1.1.1.1	192.168.2.5	0x5d1f	No error (0)	silo40.p7cloud.net	du8ztun1tankm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.659497023 CEST	1.1.1.1	192.168.2.5	0x5d1f	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.60	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.659497023 CEST	1.1.1.1	192.168.2.5	0x5d1f	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.659497023 CEST	1.1.1.1	192.168.2.5	0x5d1f	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.659497023 CEST	1.1.1.1	192.168.2.5	0x5d1f	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.674740076 CEST	1.1.1.1	192.168.2.5	0x7a98	No error (0)	tag.bounceexchange.com	tag.bouncex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.674823046 CEST	1.1.1.1	192.168.2.5	0xe3bd	No error (0)	tag.bounceexchange.com	tag.bouncex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.674823046 CEST	1.1.1.1	192.168.2.5	0xe3bd	No error (0)	tag.bouncex.net		34.120.253.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.712582111 CEST	1.1.1.1	192.168.2.5	0xf7b0	No error (0)	ats.rlcdn.com		3.162.125.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.712582111 CEST	1.1.1.1	192.168.2.5	0xf7b0	No error (0)	ats.rlcdn.com		3.162.125.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.712582111 CEST	1.1.1.1	192.168.2.5	0xf7b0	No error (0)	ats.rlcdn.com		3.162.125.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.712582111 CEST	1.1.1.1	192.168.2.5	0xf7b0	No error (0)	ats.rlcdn.com		3.162.125.125	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.820974112 CEST	1.1.1.1	192.168.2.5	0x6b31	No error (0)	micro.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.821585894 CEST	1.1.1.1	192.168.2.5	0x58cc	No error (0)	micro.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:31.838223934 CEST	1.1.1.1	192.168.2.5	0x5766	No error (0)	tags.crwdcntrl.net		18.165.116.47	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.838223934 CEST	1.1.1.1	192.168.2.5	0x5766	No error (0)	tags.crwdcntrl.net		18.165.116.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.838223934 CEST	1.1.1.1	192.168.2.5	0x5766	No error (0)	tags.crwdcntrl.net		18.165.116.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.838223934 CEST	1.1.1.1	192.168.2.5	0x5766	No error (0)	tags.crwdcntrl.net		18.165.116.6	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		100.24.226.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		3.227.94.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.839554071 CEST	1.1.1.1	192.168.2.5	0x1859	No error (0)	bcp.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.936979055 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev		54.236.155.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.936979055 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev		23.20.111.240	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.936979055 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev		44.216.159.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.998311043 CEST	1.1.1.1	192.168.2.5	0xba18	No error (0)	everest.castbox.fm		54.65.26.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:31.998311043 CEST	1.1.1.1	192.168.2.5	0xba18	No error (0)	everest.castbox.fm		54.199.208.110	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.080234051 CEST	1.1.1.1	192.168.2.5	0xa3a4	No error (0)	p.skimresources.com	p-kube.skimresources.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.080382109 CEST	1.1.1.1	192.168.2.5	0x1060	No error (0)	p.skimresources.com	p-kube.skimresources.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.080382109 CEST	1.1.1.1	192.168.2.5	0x1060	No error (0)	p-kube.skimresources.com		35.190.91.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.083513975 CEST	1.1.1.1	192.168.2.5	0xbc97	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:32.084145069 CEST	1.1.1.1	192.168.2.5	0xcf56	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.084145069 CEST	1.1.1.1	192.168.2.5	0xcf56	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.084145069 CEST	1.1.1.1	192.168.2.5	0xcf56	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.086694002 CEST	1.1.1.1	192.168.2.5	0x83a3	No error (0)	ad.doubleclick.net		172.217.215.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.086694002 CEST	1.1.1.1	192.168.2.5	0x83a3	No error (0)	ad.doubleclick.net		172.217.215.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.087903976 CEST	1.1.1.1	192.168.2.5	0x30e7	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:32.090719938 CEST	1.1.1.1	192.168.2.5	0xbdca	No error (0)	aacdn.nagich.com		104.26.15.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.090719938 CEST	1.1.1.1	192.168.2.5	0xbdca	No error (0)	aacdn.nagich.com		172.67.68.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.090719938 CEST	1.1.1.1	192.168.2.5	0xbdca	No error (0)	aacdn.nagich.com		104.26.14.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.090787888 CEST	1.1.1.1	192.168.2.5	0xd2a	No error (0)	aacdn.nagich.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:32.091466904 CEST	1.1.1.1	192.168.2.5	0x961d	No error (0)	api2.sided.co		76.223.94.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091466904 CEST	1.1.1.1	192.168.2.5	0x961d	No error (0)	api2.sided.co		13.248.218.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		34.232.204.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		3.212.57.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		3.89.151.86	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		54.90.236.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		3.225.190.165	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		3.228.82.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		34.226.54.46	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.091649055 CEST	1.1.1.1	192.168.2.5	0x3de8	No error (0)	g2.gumgum.com		34.199.236.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.102099895 CEST	1.1.1.1	192.168.2.5	0x2ee7	No error (0)	t.skimresources.com		35.201.67.47	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.105293036 CEST	1.1.1.1	192.168.2.5	0x921c	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.105293036 CEST	1.1.1.1	192.168.2.5	0x921c	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.105293036 CEST	1.1.1.1	192.168.2.5	0x921c	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.105293036 CEST	1.1.1.1	192.168.2.5	0x921c	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.592956066 CEST	1.1.1.1	192.168.2.5	0xacca	No error (0)	assets.bounceexchange.com	static.bounceexchange.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.592956066 CEST	1.1.1.1	192.168.2.5	0xacca	No error (0)	static.bounceexchange.com		34.98.72.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.592971087 CEST	1.1.1.1	192.168.2.5	0xcc02	No error (0)	assets.bounceexchange.com	static.bounceexchange.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.594189882 CEST	1.1.1.1	192.168.2.5	0x4cea	No error (0)	events.bouncex.net	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.594189882 CEST	1.1.1.1	192.168.2.5	0x4cea	No error (0)	nginx-ingress.wunderkind.co		34.111.8.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.596088886 CEST	1.1.1.1	192.168.2.5	0x4dca	No error (0)	events.bouncex.net	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.598162889 CEST	1.1.1.1	192.168.2.5	0x891f	No error (0)	data.cdnbasket.net		34.120.126.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.893001080 CEST	1.1.1.1	192.168.2.5	0x442b	No error (0)	pd.cdnwidget.com		34.149.130.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.893533945 CEST	1.1.1.1	192.168.2.5	0x97a3	No error (0)	api.bounceexchange.com	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.893533945 CEST	1.1.1.1	192.168.2.5	0x97a3	No error (0)	nginx-ingress.wunderkind.co		34.111.8.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:32.893631935 CEST	1.1.1.1	192.168.2.5	0x1618	No error (0)	api.bounceexchange.com	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:32.894577980 CEST	1.1.1.1	192.168.2.5	0x472a	No error (0)	pix.cdnwidget.com		34.149.254.212	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.010135889 CEST	1.1.1.1	192.168.2.5	0xce9c	No error (0)	ids.cdnwidget.com		34.160.20.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.012989998 CEST	1.1.1.1	192.168.2.5	0xe533	No error (0)	view.cdnbasket.net		34.149.158.238	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.015229940 CEST	1.1.1.1	192.168.2.5	0xc4b5	No error (0)	page.cdnbasket.net		34.117.175.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054209948 CEST	1.1.1.1	192.168.2.5	0x3134	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054209948 CEST	1.1.1.1	192.168.2.5	0x3134	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054209948 CEST	1.1.1.1	192.168.2.5	0x3134	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054337025 CEST	1.1.1.1	192.168.2.5	0x7c97	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054337025 CEST	1.1.1.1	192.168.2.5	0x7c97	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054337025 CEST	1.1.1.1	192.168.2.5	0x7c97	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.054337025 CEST	1.1.1.1	192.168.2.5	0x7c97	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.164.81.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.737103939 CEST	1.1.1.1	192.168.2.5	0x5cd7	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:33.737103939 CEST	1.1.1.1	192.168.2.5	0x5cd7	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.81	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.737103939 CEST	1.1.1.1	192.168.2.5	0x5cd7	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.737103939 CEST	1.1.1.1	192.168.2.5	0x5cd7	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.737103939 CEST	1.1.1.1	192.168.2.5	0x5cd7	No error (0)	d162h6x3rxav67.cloudfront.net		13.32.230.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:33.737998009 CEST	1.1.1.1	192.168.2.5	0x1a3a	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.343796015 CEST	1.1.1.1	192.168.2.5	0x7450	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.343796015 CEST	1.1.1.1	192.168.2.5	0x7450	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.343796015 CEST	1.1.1.1	192.168.2.5	0x7450	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345000982 CEST	1.1.1.1	192.168.2.5	0x87	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345056057 CEST	1.1.1.1	192.168.2.5	0x7780	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345092058 CEST	1.1.1.1	192.168.2.5	0x2769	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345092058 CEST	1.1.1.1	192.168.2.5	0x2769	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345092058 CEST	1.1.1.1	192.168.2.5	0x2769	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345577002 CEST	1.1.1.1	192.168.2.5	0x7b92	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345577002 CEST	1.1.1.1	192.168.2.5	0x7b92	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345577002 CEST	1.1.1.1	192.168.2.5	0x7b92	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.345577002 CEST	1.1.1.1	192.168.2.5	0x7b92	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.346093893 CEST	1.1.1.1	192.168.2.5	0x513f	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.346205950 CEST	1.1.1.1	192.168.2.5	0x1df0	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.346704960 CEST	1.1.1.1	192.168.2.5	0x4339	No error (0)	cm.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.346704960 CEST	1.1.1.1	192.168.2.5	0x4339	No error (0)	cm.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.346704960 CEST	1.1.1.1	192.168.2.5	0x4339	No error (0)	cm.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.346704960 CEST	1.1.1.1	192.168.2.5	0x4339	No error (0)	cm.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.369961023 CEST	1.1.1.1	192.168.2.5	0xcfdc	No error (0)	pagead-googlehosted.l.google.com		172.217.215.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.419496059 CEST	1.1.1.1	192.168.2.5	0xbc53	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.480329037 CEST	1.1.1.1	192.168.2.5	0x3457	No error (0)	silo40.p7cloud.net	du8ztun1tankm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.507035971 CEST	1.1.1.1	192.168.2.5	0xbf7	No error (0)	silo40.p7cloud.net	du8ztun1tankm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.507035971 CEST	1.1.1.1	192.168.2.5	0xbf7	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.60	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.507035971 CEST	1.1.1.1	192.168.2.5	0xbf7	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.507035971 CEST	1.1.1.1	192.168.2.5	0xbf7	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.507035971 CEST	1.1.1.1	192.168.2.5	0xbf7	No error (0)	du8ztun1tankm.cloudfront.net		3.161.150.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567315102 CEST	1.1.1.1	192.168.2.5	0x98ab	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567315102 CEST	1.1.1.1	192.168.2.5	0x98ab	No error (0)	us-east-tlx.3lift.com		3.222.148.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567315102 CEST	1.1.1.1	192.168.2.5	0x98ab	No error (0)	us-east-tlx.3lift.com		3.218.122.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567315102 CEST	1.1.1.1	192.168.2.5	0x98ab	No error (0)	us-east-tlx.3lift.com		107.22.180.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567315102 CEST	1.1.1.1	192.168.2.5	0x98ab	No error (0)	us-east-tlx.3lift.com		3.233.183.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567315102 CEST	1.1.1.1	192.168.2.5	0x98ab	No error (0)	us-east-tlx.3lift.com		34.206.91.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.567398071 CEST	1.1.1.1	192.168.2.5	0x8b89	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573427916 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	exchange.kueezrtb.com	exchangekueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573427916 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	exchangekueez.cootlogix.com	asw8zbfaxs.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573427916 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	asw8zbfaxs.puzztake.com	hob9zeclb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573427916 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	hob9zeclb.puzztake.com		157.245.86.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573427916 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	hob9zeclb.puzztake.com		134.209.212.239	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573839903 CEST	1.1.1.1	192.168.2.5	0xad85	No error (0)	exchange.kueezrtb.com	exchangekueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573839903 CEST	1.1.1.1	192.168.2.5	0xad85	No error (0)	exchangekueez.cootlogix.com	asw8zbfaxs.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.573839903 CEST	1.1.1.1	192.168.2.5	0xad85	No error (0)	asw8zbfaxs.puzztake.com	hob9zeclb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.615036011 CEST	1.1.1.1	192.168.2.5	0xbe92	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.615036011 CEST	1.1.1.1	192.168.2.5	0xbe92	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.615036011 CEST	1.1.1.1	192.168.2.5	0xbe92	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.615564108 CEST	1.1.1.1	192.168.2.5	0x2a86	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.615564108 CEST	1.1.1.1	192.168.2.5	0x2a86	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.623397112 CEST	1.1.1.1	192.168.2.5	0xc491	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Apr 19, 2024 15:12:34.623632908 CEST	1.1.1.1	192.168.2.5	0x4446	No error (0)	ex.ingage.tech		104.18.27.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.623632908 CEST	1.1.1.1	192.168.2.5	0x4446	No error (0)	ex.ingage.tech		104.18.26.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.629014015 CEST	1.1.1.1	192.168.2.5	0x8005	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.632281065 CEST	1.1.1.1	192.168.2.5	0xa160	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.632565975 CEST	1.1.1.1	192.168.2.5	0xc534	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.644254923 CEST	1.1.1.1	192.168.2.5	0x87dd	No error (0)	bidder.criteo.com	bidder.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.644254923 CEST	1.1.1.1	192.168.2.5	0x87dd	No error (0)	bidder.us5.vip.prod.criteo.com		74.119.117.6	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.644404888 CEST	1.1.1.1	192.168.2.5	0x9536	No error (0)	bidder.criteo.com	bidder.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.648518085 CEST	1.1.1.1	192.168.2.5	0xf9d8	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.648518085 CEST	1.1.1.1	192.168.2.5	0xf9d8	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.648518085 CEST	1.1.1.1	192.168.2.5	0xf9d8	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.648518085 CEST	1.1.1.1	192.168.2.5	0xf9d8	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.648658037 CEST	1.1.1.1	192.168.2.5	0x56bc	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		3.211.198.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		54.235.229.237	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		3.224.173.241	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		3.214.248.167	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		34.205.44.85	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		23.23.249.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		3.222.156.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655678988 CEST	1.1.1.1	192.168.2.5	0x24f4	No error (0)	na-ice.360yield.com		44.218.50.193	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655791044 CEST	1.1.1.1	192.168.2.5	0xf9e2	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.655791044 CEST	1.1.1.1	192.168.2.5	0xf9e2	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.658845901 CEST	1.1.1.1	192.168.2.5	0xde4b	No error (0)	pre.ads.justpremium.com	pre2.ads.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.658845901 CEST	1.1.1.1	192.168.2.5	0xde4b	No error (0)	pre2.ads.justpremium.com	bidder-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.659670115 CEST	1.1.1.1	192.168.2.5	0xa7be	No error (0)	pre.ads.justpremium.com	pre2.ads.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.659670115 CEST	1.1.1.1	192.168.2.5	0xa7be	No error (0)	pre2.ads.justpremium.com	bidder-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.659670115 CEST	1.1.1.1	192.168.2.5	0xa7be	No error (0)	bidder-us-east-1.prod.justpremium.com		54.175.119.162	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.659670115 CEST	1.1.1.1	192.168.2.5	0xa7be	No error (0)	bidder-us-east-1.prod.justpremium.com		34.202.33.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.659670115 CEST	1.1.1.1	192.168.2.5	0xa7be	No error (0)	bidder-us-east-1.prod.justpremium.com		3.221.230.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.869518042 CEST	1.1.1.1	192.168.2.5	0x3fb8	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.869518042 CEST	1.1.1.1	192.168.2.5	0x3fb8	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.869518042 CEST	1.1.1.1	192.168.2.5	0x3fb8	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.869518042 CEST	1.1.1.1	192.168.2.5	0x3fb8	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.869518042 CEST	1.1.1.1	192.168.2.5	0x3fb8	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.869606972 CEST	1.1.1.1	192.168.2.5	0xbf6a	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.871468067 CEST	1.1.1.1	192.168.2.5	0x6d83	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.871579885 CEST	1.1.1.1	192.168.2.5	0x5fb2	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.882251978 CEST	1.1.1.1	192.168.2.5	0x9f02	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.882426023 CEST	1.1.1.1	192.168.2.5	0x54ea	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:34.882426023 CEST	1.1.1.1	192.168.2.5	0x54ea	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:34.909152031 CEST	1.1.1.1	192.168.2.5	0x4599	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.427597046 CEST	1.1.1.1	192.168.2.5	0xc52d	No error (0)	prebid.cootlogix.com	a0csk8ze4b.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:35.427597046 CEST	1.1.1.1	192.168.2.5	0xc52d	No error (0)	a0csk8ze4b.puzztake.com	hpq1jzhlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:35.428117990 CEST	1.1.1.1	192.168.2.5	0x6519	No error (0)	prebid.cootlogix.com	vidazoo-p-vidazoo-openrtb-prebid-us-nyc3-k8s.vidazoo.services		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:35.428117990 CEST	1.1.1.1	192.168.2.5	0x6519	No error (0)	vidazoo-p-vidazoo-openrtb-prebid-us-nyc3-k8s.vidazoo.services	istio-k8s-vidazoo-p-us-nyc3-external.vidazoo.services		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:35.428117990 CEST	1.1.1.1	192.168.2.5	0x6519	No error (0)	istio-k8s-vidazoo-p-us-nyc3-external.vidazoo.services		138.197.53.255	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.473831892 CEST	1.1.1.1	192.168.2.5	0xffbe	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:35.473874092 CEST	1.1.1.1	192.168.2.5	0xac9e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:35.473874092 CEST	1.1.1.1	192.168.2.5	0xac9e	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.499826908 CEST	1.1.1.1	192.168.2.5	0x8bac	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.499826908 CEST	1.1.1.1	192.168.2.5	0x8bac	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.499826908 CEST	1.1.1.1	192.168.2.5	0x8bac	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.499826908 CEST	1.1.1.1	192.168.2.5	0x8bac	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:35.499826908 CEST	1.1.1.1	192.168.2.5	0x8bac	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:36.952145100 CEST	1.1.1.1	192.168.2.5	0x59f8	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.079180956 CEST	1.1.1.1	192.168.2.5	0x3718	No error (0)	prebid-a.rubiconproject.com	prebid-a.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:37.081353903 CEST	1.1.1.1	192.168.2.5	0x6b89	No error (0)	prebid-a.rubiconproject.com	prebid-a.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:37.192372084 CEST	1.1.1.1	192.168.2.5	0x7378	No error (0)	syndication.twitter.com		104.244.42.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.357338905 CEST	1.1.1.1	192.168.2.5	0xce34	No error (0)	resources.infolinks.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:37.357580900 CEST	1.1.1.1	192.168.2.5	0x2451	No error (0)	resources.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.357580900 CEST	1.1.1.1	192.168.2.5	0x2451	No error (0)	resources.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.532145023 CEST	1.1.1.1	192.168.2.5	0x7e7e	No error (0)	d3lcz8vpax4lo2.cloudfront.net		18.67.79.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.532145023 CEST	1.1.1.1	192.168.2.5	0x7e7e	No error (0)	d3lcz8vpax4lo2.cloudfront.net		18.67.79.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.532145023 CEST	1.1.1.1	192.168.2.5	0x7e7e	No error (0)	d3lcz8vpax4lo2.cloudfront.net		18.67.79.170	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.532145023 CEST	1.1.1.1	192.168.2.5	0x7e7e	No error (0)	d3lcz8vpax4lo2.cloudfront.net		18.67.79.209	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.640958071 CEST	1.1.1.1	192.168.2.5	0xff74	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:37.641118050 CEST	1.1.1.1	192.168.2.5	0xd483	No error (0)	googleads.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.641118050 CEST	1.1.1.1	192.168.2.5	0xd483	No error (0)	googleads.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.641118050 CEST	1.1.1.1	192.168.2.5	0xd483	No error (0)	googleads.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:37.641118050 CEST	1.1.1.1	192.168.2.5	0xd483	No error (0)	googleads.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.233731985 CEST	1.1.1.1	192.168.2.5	0xa528	No error (0)	check.analytics.rlcdn.com		54.230.253.74	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.233731985 CEST	1.1.1.1	192.168.2.5	0xa528	No error (0)	check.analytics.rlcdn.com		54.230.253.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.233731985 CEST	1.1.1.1	192.168.2.5	0xa528	No error (0)	check.analytics.rlcdn.com		54.230.253.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.233731985 CEST	1.1.1.1	192.168.2.5	0xa528	No error (0)	check.analytics.rlcdn.com		54.230.253.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.237181902 CEST	1.1.1.1	192.168.2.5	0x4eac	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.237181902 CEST	1.1.1.1	192.168.2.5	0x4eac	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.682238102 CEST	1.1.1.1	192.168.2.5	0x2316	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:38.682238102 CEST	1.1.1.1	192.168.2.5	0x2316	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.227597952 CEST	1.1.1.1	192.168.2.5	0x596c	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.227597952 CEST	1.1.1.1	192.168.2.5	0x596c	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.229306936 CEST	1.1.1.1	192.168.2.5	0xad50	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.231117964 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.588507891 CEST	1.1.1.1	192.168.2.5	0xdd0b	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.588507891 CEST	1.1.1.1	192.168.2.5	0xdd0b	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.588507891 CEST	1.1.1.1	192.168.2.5	0xdd0b	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.588507891 CEST	1.1.1.1	192.168.2.5	0xdd0b	No error (0)	ao9ui4chmm.puzztake.com	h7mzk9dlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.588507891 CEST	1.1.1.1	192.168.2.5	0xdd0b	No error (0)	h7mzk9dlb.puzztake.com		204.48.22.20	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.588507891 CEST	1.1.1.1	192.168.2.5	0xdd0b	No error (0)	h7mzk9dlb.puzztake.com		134.122.16.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589787006 CEST	1.1.1.1	192.168.2.5	0xf3dd	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589787006 CEST	1.1.1.1	192.168.2.5	0xf3dd	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589787006 CEST	1.1.1.1	192.168.2.5	0xf3dd	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589787006 CEST	1.1.1.1	192.168.2.5	0xf3dd	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589804888 CEST	1.1.1.1	192.168.2.5	0xc14	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589804888 CEST	1.1.1.1	192.168.2.5	0xc14	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589804888 CEST	1.1.1.1	192.168.2.5	0xc14	No error (0)	hj5ozcalb.puzztake.com		157.245.140.233	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.589804888 CEST	1.1.1.1	192.168.2.5	0xc14	No error (0)	hj5ozcalb.puzztake.com		143.198.162.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.590612888 CEST	1.1.1.1	192.168.2.5	0xcf89	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.590612888 CEST	1.1.1.1	192.168.2.5	0xcf89	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.591955900 CEST	1.1.1.1	192.168.2.5	0xfe67	No error (0)	cs.ingage.tech	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.592483997 CEST	1.1.1.1	192.168.2.5	0x11e3	No error (0)	cs.ingage.tech	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.592483997 CEST	1.1.1.1	192.168.2.5	0x11e3	No error (0)	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		34.202.40.204	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.592483997 CEST	1.1.1.1	192.168.2.5	0x11e3	No error (0)	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		3.216.251.200	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.592483997 CEST	1.1.1.1	192.168.2.5	0x11e3	No error (0)	3dc8122e-default-sspbacken-ca08-247245088.us-east-1.elb.amazonaws.com		44.207.100.141	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.597455025 CEST	1.1.1.1	192.168.2.5	0x52fe	No error (0)	cs.seedtag.com		104.16.186.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.597455025 CEST	1.1.1.1	192.168.2.5	0x52fe	No error (0)	cs.seedtag.com		104.16.184.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.597455025 CEST	1.1.1.1	192.168.2.5	0x52fe	No error (0)	cs.seedtag.com		104.16.183.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.597455025 CEST	1.1.1.1	192.168.2.5	0x52fe	No error (0)	cs.seedtag.com		104.16.185.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.597455025 CEST	1.1.1.1	192.168.2.5	0x52fe	No error (0)	cs.seedtag.com		104.16.187.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.597879887 CEST	1.1.1.1	192.168.2.5	0x13e5	No error (0)	cs.seedtag.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:39.598622084 CEST	1.1.1.1	192.168.2.5	0xe995	No error (0)	sync.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.598622084 CEST	1.1.1.1	192.168.2.5	0xe995	No error (0)	ny5-prebid.a-mx.net		147.75.195.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.598622084 CEST	1.1.1.1	192.168.2.5	0xe995	No error (0)	ny5-prebid.a-mx.net		147.75.195.77	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.598622084 CEST	1.1.1.1	192.168.2.5	0xe995	No error (0)	ny5-prebid.a-mx.net		147.75.198.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.599009037 CEST	1.1.1.1	192.168.2.5	0xfd1e	No error (0)	sync.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.600351095 CEST	1.1.1.1	192.168.2.5	0x5f13	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.600351095 CEST	1.1.1.1	192.168.2.5	0x5f13	No error (0)	ny5-prebid.a-mx.net		147.75.195.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.600351095 CEST	1.1.1.1	192.168.2.5	0x5f13	No error (0)	ny5-prebid.a-mx.net		147.75.195.77	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.600351095 CEST	1.1.1.1	192.168.2.5	0x5f13	No error (0)	ny5-prebid.a-mx.net		147.75.198.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.600843906 CEST	1.1.1.1	192.168.2.5	0xb692	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.601699114 CEST	1.1.1.1	192.168.2.5	0xfbf6	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.614316940 CEST	1.1.1.1	192.168.2.5	0xfbeb	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.615789890 CEST	1.1.1.1	192.168.2.5	0x3a	No error (0)	pre.ads.justpremium.com	pre2.ads.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.615789890 CEST	1.1.1.1	192.168.2.5	0x3a	No error (0)	pre2.ads.justpremium.com	bidder-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.615789890 CEST	1.1.1.1	192.168.2.5	0x3a	No error (0)	bidder-us-east-1.prod.justpremium.com		34.202.33.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.615789890 CEST	1.1.1.1	192.168.2.5	0x3a	No error (0)	bidder-us-east-1.prod.justpremium.com		3.221.230.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.615789890 CEST	1.1.1.1	192.168.2.5	0x3a	No error (0)	bidder-us-east-1.prod.justpremium.com		54.175.119.162	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.616430998 CEST	1.1.1.1	192.168.2.5	0xc716	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.616430998 CEST	1.1.1.1	192.168.2.5	0xc716	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.616430998 CEST	1.1.1.1	192.168.2.5	0xc716	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.616430998 CEST	1.1.1.1	192.168.2.5	0xc716	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.616607904 CEST	1.1.1.1	192.168.2.5	0x3640	No error (0)	pre.ads.justpremium.com	pre2.ads.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.616607904 CEST	1.1.1.1	192.168.2.5	0x3640	No error (0)	pre2.ads.justpremium.com	bidder-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.617687941 CEST	1.1.1.1	192.168.2.5	0xc13	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.617687941 CEST	1.1.1.1	192.168.2.5	0xc13	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		54.224.168.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		52.204.110.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		54.242.153.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		34.205.238.169	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		34.199.236.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		3.215.243.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		34.235.95.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.620163918 CEST	1.1.1.1	192.168.2.5	0xe008	No error (0)	rtb.gumgum.com		54.159.199.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.621457100 CEST	1.1.1.1	192.168.2.5	0x150f	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.621457100 CEST	1.1.1.1	192.168.2.5	0x150f	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.621718884 CEST	1.1.1.1	192.168.2.5	0x96a6	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:39.624253035 CEST	1.1.1.1	192.168.2.5	0x9c45	No error (0)	cs-tam.minutemedia-prebid.com	d18q3505w6wzgu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.presage.io	ms-cookie-sync.prod.cloud.ogury.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.164.246.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.197.189.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.205.197.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.208.163.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.196.83.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.208.227.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.172.183.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627306938 CEST	1.1.1.1	192.168.2.5	0xf24a	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.174.186.226	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.627559900 CEST	1.1.1.1	192.168.2.5	0x6d90	No error (0)	ms-cookie-sync.presage.io	ms-cookie-sync.prod.cloud.ogury.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.628015995 CEST	1.1.1.1	192.168.2.5	0x7669	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.628015995 CEST	1.1.1.1	192.168.2.5	0x7669	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.628015995 CEST	1.1.1.1	192.168.2.5	0x7669	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.628015995 CEST	1.1.1.1	192.168.2.5	0x7669	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.628015995 CEST	1.1.1.1	192.168.2.5	0x7669	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.628705978 CEST	1.1.1.1	192.168.2.5	0x1118	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-us.smartadserver.com	ssbsync-use1.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.629553080 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.630081892 CEST	1.1.1.1	192.168.2.5	0xaafa	No error (0)	ssbsync-us.smartadserver.com	ssbsync-use1.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.631762028 CEST	1.1.1.1	192.168.2.5	0x5160	No error (0)	ssp.api.tappx.com	us-gcp-multilbtcp.ssp.tappx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632251978 CEST	1.1.1.1	192.168.2.5	0x2ead	No error (0)	ssp.api.tappx.com	us-gcp-multilbtcp.ssp.tappx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632251978 CEST	1.1.1.1	192.168.2.5	0x2ead	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		34.86.207.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632251978 CEST	1.1.1.1	192.168.2.5	0x2ead	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		34.150.237.142	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632251978 CEST	1.1.1.1	192.168.2.5	0x2ead	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		34.145.228.212	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632251978 CEST	1.1.1.1	192.168.2.5	0x2ead	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		35.221.21.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632251978 CEST	1.1.1.1	192.168.2.5	0x2ead	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		35.221.32.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		52.2.0.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		3.223.50.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		34.194.99.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		44.209.20.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.234.240	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		34.196.141.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		18.213.14.175	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.632909060 CEST	1.1.1.1	192.168.2.5	0x4526	No error (0)	match-us-east-1-ecs.sharethrough.com		34.192.151.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.633136034 CEST	1.1.1.1	192.168.2.5	0xaa	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.633186102 CEST	1.1.1.1	192.168.2.5	0x5aaf	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.633531094 CEST	1.1.1.1	192.168.2.5	0x2096	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.634017944 CEST	1.1.1.1	192.168.2.5	0x89b	No error (0)	cs-tam.minutemedia-prebid.com	d18q3505w6wzgu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.634017944 CEST	1.1.1.1	192.168.2.5	0x89b	No error (0)	d18q3505w6wzgu.cloudfront.net		3.161.163.34	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.634017944 CEST	1.1.1.1	192.168.2.5	0x89b	No error (0)	d18q3505w6wzgu.cloudfront.net		3.161.163.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.634017944 CEST	1.1.1.1	192.168.2.5	0x89b	No error (0)	d18q3505w6wzgu.cloudfront.net		3.161.163.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.634017944 CEST	1.1.1.1	192.168.2.5	0x89b	No error (0)	d18q3505w6wzgu.cloudfront.net		3.161.163.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.635488033 CEST	1.1.1.1	192.168.2.5	0x96b8	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.635488033 CEST	1.1.1.1	192.168.2.5	0x96b8	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.635488033 CEST	1.1.1.1	192.168.2.5	0x96b8	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.636548996 CEST	1.1.1.1	192.168.2.5	0x233f	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.636548996 CEST	1.1.1.1	192.168.2.5	0x233f	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.638602972 CEST	1.1.1.1	192.168.2.5	0x30f1	No error (0)	syncaps.cootlogix.com	h89ny7jlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.638992071 CEST	1.1.1.1	192.168.2.5	0x2716	No error (0)	syncaps.cootlogix.com	h89ny7jlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.638992071 CEST	1.1.1.1	192.168.2.5	0x2716	No error (0)	h89ny7jlb.puzztake.com		45.76.249.237	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.638992071 CEST	1.1.1.1	192.168.2.5	0x2716	No error (0)	h89ny7jlb.puzztake.com		155.138.160.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.639240026 CEST	1.1.1.1	192.168.2.5	0xfdc3	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.22.99.196	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.223.215.115	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.235.238.90	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.202.246.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.208.0.163	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.235.104.226	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.234.1.125	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643048048 CEST	1.1.1.1	192.168.2.5	0x34cb	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.86.25.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643296957 CEST	1.1.1.1	192.168.2.5	0xe685	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643296957 CEST	1.1.1.1	192.168.2.5	0xe685	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.643296957 CEST	1.1.1.1	192.168.2.5	0xe685	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		54.205.61.221	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		3.209.154.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		44.215.221.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		54.87.55.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		18.213.250.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		23.23.219.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		34.203.128.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.645658016 CEST	1.1.1.1	192.168.2.5	0x8f76	No error (0)	cs-tam.yellowblue.io		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.647284031 CEST	1.1.1.1	192.168.2.5	0x1b15	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.652754068 CEST	1.1.1.1	192.168.2.5	0xe572	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.652754068 CEST	1.1.1.1	192.168.2.5	0xe572	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.653583050 CEST	1.1.1.1	192.168.2.5	0x1fe7	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.653583050 CEST	1.1.1.1	192.168.2.5	0x1fe7	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.653614044 CEST	1.1.1.1	192.168.2.5	0xcb2f	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.655631065 CEST	1.1.1.1	192.168.2.5	0xa337	No error (0)	cs.media.net		23.207.52.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.660168886 CEST	1.1.1.1	192.168.2.5	0x883d	No error (0)	s.ad.smaato.net		18.67.76.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.660168886 CEST	1.1.1.1	192.168.2.5	0x883d	No error (0)	s.ad.smaato.net		18.67.76.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.660168886 CEST	1.1.1.1	192.168.2.5	0x883d	No error (0)	s.ad.smaato.net		18.67.76.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.660168886 CEST	1.1.1.1	192.168.2.5	0x883d	No error (0)	s.ad.smaato.net		18.67.76.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.661052942 CEST	1.1.1.1	192.168.2.5	0xfeb	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.661052942 CEST	1.1.1.1	192.168.2.5	0xfeb	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.661052942 CEST	1.1.1.1	192.168.2.5	0xfeb	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.663362980 CEST	1.1.1.1	192.168.2.5	0xc0f2	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.664427996 CEST	1.1.1.1	192.168.2.5	0x7753	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.664911985 CEST	1.1.1.1	192.168.2.5	0x8d02	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.666239977 CEST	1.1.1.1	192.168.2.5	0xd438	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.666239977 CEST	1.1.1.1	192.168.2.5	0xd438	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.666239977 CEST	1.1.1.1	192.168.2.5	0xd438	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.666239977 CEST	1.1.1.1	192.168.2.5	0xd438	No error (0)	nydc1.outbrain.org		64.202.112.223	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.667248964 CEST	1.1.1.1	192.168.2.5	0x8a79	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.667248964 CEST	1.1.1.1	192.168.2.5	0x8a79	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.667248964 CEST	1.1.1.1	192.168.2.5	0x8a79	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.708183050 CEST	1.1.1.1	192.168.2.5	0xc6ec	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.709731102 CEST	1.1.1.1	192.168.2.5	0xf326	No error (0)	stats.g.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.709731102 CEST	1.1.1.1	192.168.2.5	0xf326	No error (0)	stats.g.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.709731102 CEST	1.1.1.1	192.168.2.5	0xf326	No error (0)	stats.g.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.709731102 CEST	1.1.1.1	192.168.2.5	0xf326	No error (0)	stats.g.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.714698076 CEST	1.1.1.1	192.168.2.5	0x9d45	No error (0)	s3.castbox.fm	d1asnxkov2i2k7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.714698076 CEST	1.1.1.1	192.168.2.5	0x9d45	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.714698076 CEST	1.1.1.1	192.168.2.5	0x9d45	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.714698076 CEST	1.1.1.1	192.168.2.5	0x9d45	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.714698076 CEST	1.1.1.1	192.168.2.5	0x9d45	No error (0)	d1asnxkov2i2k7.cloudfront.net		18.164.78.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.718652010 CEST	1.1.1.1	192.168.2.5	0x4d9c	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719384909 CEST	1.1.1.1	192.168.2.5	0xd182	No error (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev		23.20.111.240	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719384909 CEST	1.1.1.1	192.168.2.5	0xd182	No error (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev		44.216.159.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719384909 CEST	1.1.1.1	192.168.2.5	0xd182	No error (0)	prod.us-east-1.cxm-bcn.publisher-services.amazon.dev		54.236.155.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719499111 CEST	1.1.1.1	192.168.2.5	0x74b4	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719499111 CEST	1.1.1.1	192.168.2.5	0x74b4	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719499111 CEST	1.1.1.1	192.168.2.5	0x74b4	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719499111 CEST	1.1.1.1	192.168.2.5	0x74b4	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.165.109.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719841003 CEST	1.1.1.1	192.168.2.5	0xf9ec	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719841003 CEST	1.1.1.1	192.168.2.5	0xf9ec	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.719841003 CEST	1.1.1.1	192.168.2.5	0xf9ec	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.721786022 CEST	1.1.1.1	192.168.2.5	0x2527	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.721786022 CEST	1.1.1.1	192.168.2.5	0x2527	No error (0)	securepubads46.g.doubleclick.net		64.233.185.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.721786022 CEST	1.1.1.1	192.168.2.5	0x2527	No error (0)	securepubads46.g.doubleclick.net		64.233.185.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.721786022 CEST	1.1.1.1	192.168.2.5	0x2527	No error (0)	securepubads46.g.doubleclick.net		64.233.185.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.721786022 CEST	1.1.1.1	192.168.2.5	0x2527	No error (0)	securepubads46.g.doubleclick.net		64.233.185.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.722758055 CEST	1.1.1.1	192.168.2.5	0x580b	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.724441051 CEST	1.1.1.1	192.168.2.5	0x8942	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.727505922 CEST	1.1.1.1	192.168.2.5	0x9588	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.727505922 CEST	1.1.1.1	192.168.2.5	0x9588	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.727505922 CEST	1.1.1.1	192.168.2.5	0x9588	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.727505922 CEST	1.1.1.1	192.168.2.5	0x9588	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.727742910 CEST	1.1.1.1	192.168.2.5	0x6352	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.728975058 CEST	1.1.1.1	192.168.2.5	0x402b	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:39.728975058 CEST	1.1.1.1	192.168.2.5	0x402b	No error (0)	us-east-tlx.3lift.com		54.158.18.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.728975058 CEST	1.1.1.1	192.168.2.5	0x402b	No error (0)	us-east-tlx.3lift.com		3.233.167.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.728975058 CEST	1.1.1.1	192.168.2.5	0x402b	No error (0)	us-east-tlx.3lift.com		3.208.175.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.728975058 CEST	1.1.1.1	192.168.2.5	0x402b	No error (0)	us-east-tlx.3lift.com		3.226.121.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.728975058 CEST	1.1.1.1	192.168.2.5	0x402b	No error (0)	us-east-tlx.3lift.com		34.192.42.219	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:39.745430946 CEST	1.1.1.1	192.168.2.5	0x51d9	No error (0)	s3.castbox.fm	d1asnxkov2i2k7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.583838940 CEST	1.1.1.1	192.168.2.5	0x5570	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.585210085 CEST	1.1.1.1	192.168.2.5	0xcefd	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594254971 CEST	1.1.1.1	192.168.2.5	0x1e04	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594254971 CEST	1.1.1.1	192.168.2.5	0x1e04	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594254971 CEST	1.1.1.1	192.168.2.5	0x1e04	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594254971 CEST	1.1.1.1	192.168.2.5	0x1e04	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594254971 CEST	1.1.1.1	192.168.2.5	0x1e04	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594377041 CEST	1.1.1.1	192.168.2.5	0x8a58	No error (0)	pre.ads.justpremium.com	pre2.ads.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594377041 CEST	1.1.1.1	192.168.2.5	0x8a58	No error (0)	pre2.ads.justpremium.com	bidder-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594377041 CEST	1.1.1.1	192.168.2.5	0x8a58	No error (0)	bidder-us-east-1.prod.justpremium.com		3.221.230.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594377041 CEST	1.1.1.1	192.168.2.5	0x8a58	No error (0)	bidder-us-east-1.prod.justpremium.com		54.175.119.162	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594377041 CEST	1.1.1.1	192.168.2.5	0x8a58	No error (0)	bidder-us-east-1.prod.justpremium.com		34.202.33.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594717026 CEST	1.1.1.1	192.168.2.5	0xd203	No error (0)	pre.ads.justpremium.com	pre2.ads.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.594717026 CEST	1.1.1.1	192.168.2.5	0xd203	No error (0)	pre2.ads.justpremium.com	bidder-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.637475014 CEST	1.1.1.1	192.168.2.5	0x1e0c	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.637784958 CEST	1.1.1.1	192.168.2.5	0xa5e8	No error (0)	auth.instiengage.com	d1qs6g1uppzjpx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638061047 CEST	1.1.1.1	192.168.2.5	0xf37a	No error (0)	auth.instiengage.com	d1qs6g1uppzjpx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638061047 CEST	1.1.1.1	192.168.2.5	0xf37a	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638061047 CEST	1.1.1.1	192.168.2.5	0xf37a	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638061047 CEST	1.1.1.1	192.168.2.5	0xf37a	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638061047 CEST	1.1.1.1	192.168.2.5	0xf37a	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638730049 CEST	1.1.1.1	192.168.2.5	0x1f62	No error (0)	everest.castbox.fm		54.199.208.110	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.638730049 CEST	1.1.1.1	192.168.2.5	0x1f62	No error (0)	everest.castbox.fm		54.65.26.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.639364004 CEST	1.1.1.1	192.168.2.5	0x17e2	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.640010118 CEST	1.1.1.1	192.168.2.5	0xfe6a	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.640300989 CEST	1.1.1.1	192.168.2.5	0x6015	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.642158031 CEST	1.1.1.1	192.168.2.5	0x259a	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.642213106 CEST	1.1.1.1	192.168.2.5	0x6fb7	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.643786907 CEST	1.1.1.1	192.168.2.5	0xdcf7	No error (0)	ex.ingage.tech		104.18.26.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.643786907 CEST	1.1.1.1	192.168.2.5	0xdcf7	No error (0)	ex.ingage.tech		104.18.27.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.644337893 CEST	1.1.1.1	192.168.2.5	0x6c34	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Apr 19, 2024 15:12:40.645864010 CEST	1.1.1.1	192.168.2.5	0xd7b5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.646161079 CEST	1.1.1.1	192.168.2.5	0x6f20	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.646161079 CEST	1.1.1.1	192.168.2.5	0x6f20	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.647674084 CEST	1.1.1.1	192.168.2.5	0xfb45	No error (0)	geoip.instiengage.com	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.647674084 CEST	1.1.1.1	192.168.2.5	0xfb45	No error (0)	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		52.20.181.233	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.647674084 CEST	1.1.1.1	192.168.2.5	0xfb45	No error (0)	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		34.235.204.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.647674084 CEST	1.1.1.1	192.168.2.5	0xfb45	No error (0)	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		54.165.102.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.648407936 CEST	1.1.1.1	192.168.2.5	0x7dfa	No error (0)	geoip.instiengage.com	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:40.648864031 CEST	1.1.1.1	192.168.2.5	0x64f6	No error (0)	d3t3ozftmdmh3i.cloudfront.net		18.67.66.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.648864031 CEST	1.1.1.1	192.168.2.5	0x64f6	No error (0)	d3t3ozftmdmh3i.cloudfront.net		18.67.66.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.648864031 CEST	1.1.1.1	192.168.2.5	0x64f6	No error (0)	d3t3ozftmdmh3i.cloudfront.net		18.67.66.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:40.648864031 CEST	1.1.1.1	192.168.2.5	0x64f6	No error (0)	d3t3ozftmdmh3i.cloudfront.net		18.67.66.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:41.683553934 CEST	1.1.1.1	192.168.2.5	0x1448	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:41.683553934 CEST	1.1.1.1	192.168.2.5	0x1448	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:42.518908024 CEST	1.1.1.1	192.168.2.5	0x3ca5	No error (0)	event.insticator.com	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:42.519012928 CEST	1.1.1.1	192.168.2.5	0x1cac	No error (0)	event.insticator.com	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:42.519012928 CEST	1.1.1.1	192.168.2.5	0x1cac	No error (0)	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		3.218.114.48	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:42.519012928 CEST	1.1.1.1	192.168.2.5	0x1cac	No error (0)	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		52.21.124.71	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:42.519012928 CEST	1.1.1.1	192.168.2.5	0x1cac	No error (0)	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		23.22.93.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.278659105 CEST	1.1.1.1	192.168.2.5	0xf133	No error (0)	geoip.insticator.com	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.278659105 CEST	1.1.1.1	192.168.2.5	0xf133	No error (0)	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		23.22.93.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.278659105 CEST	1.1.1.1	192.168.2.5	0xf133	No error (0)	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		52.21.124.71	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.278659105 CEST	1.1.1.1	192.168.2.5	0xf133	No error (0)	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		3.218.114.48	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.281176090 CEST	1.1.1.1	192.168.2.5	0x861d	No error (0)	geoip.insticator.com	k8s-default-insticat-866597d3fe-1559487265.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.411998034 CEST	1.1.1.1	192.168.2.5	0xf280	No error (0)	adserver.adtech.advertising.com	fp30C8.wpc.1B09E.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.411998034 CEST	1.1.1.1	192.168.2.5	0xf280	No error (0)	fp30C8.wpc.1B09E.thetacdn.net	fp30c8.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.411998034 CEST	1.1.1.1	192.168.2.5	0xf280	No error (0)	fp30c8.wpc.thetacdn.net		152.195.50.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.412914991 CEST	1.1.1.1	192.168.2.5	0xf6ae	No error (0)	adserver.adtech.advertising.com	fp30C8.wpc.1B09E.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.412914991 CEST	1.1.1.1	192.168.2.5	0xf6ae	No error (0)	fp30C8.wpc.1B09E.thetacdn.net	fp30c8.wpc.thetacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.421834946 CEST	1.1.1.1	192.168.2.5	0x1467	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.421834946 CEST	1.1.1.1	192.168.2.5	0x1467	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.422050953 CEST	1.1.1.1	192.168.2.5	0x7720	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.422050953 CEST	1.1.1.1	192.168.2.5	0x7720	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.426796913 CEST	1.1.1.1	192.168.2.5	0x25bf	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.426796913 CEST	1.1.1.1	192.168.2.5	0x25bf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.232.139.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.426796913 CEST	1.1.1.1	192.168.2.5	0x25bf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.224.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.426796913 CEST	1.1.1.1	192.168.2.5	0x25bf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.196.142.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.426796913 CEST	1.1.1.1	192.168.2.5	0x25bf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		107.20.103.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.427150011 CEST	1.1.1.1	192.168.2.5	0x9b37	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		54.158.42.6	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		54.147.21.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		54.156.138.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		54.158.97.181	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		52.55.65.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		54.197.158.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		54.157.225.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.428770065 CEST	1.1.1.1	192.168.2.5	0x1a00	No error (0)	sync.srv.stackadapt.com		52.72.43.196	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.723901987 CEST	1.1.1.1	192.168.2.5	0xd80c	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.733066082 CEST	1.1.1.1	192.168.2.5	0xd876	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.733066082 CEST	1.1.1.1	192.168.2.5	0xd876	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.162.112.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.163.75.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.144.222.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.159.170.51	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.144.51.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.164.184.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.828516006 CEST	1.1.1.1	192.168.2.5	0x2ee3	No error (0)	sync.ipredictive.com		54.157.219.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.829504013 CEST	1.1.1.1	192.168.2.5	0x3a4	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.829504013 CEST	1.1.1.1	192.168.2.5	0x3a4	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.829504013 CEST	1.1.1.1	192.168.2.5	0x3a4	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.829504013 CEST	1.1.1.1	192.168.2.5	0x3a4	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.829504013 CEST	1.1.1.1	192.168.2.5	0x3a4	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.901972055 CEST	1.1.1.1	192.168.2.5	0xfd4f	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.902571917 CEST	1.1.1.1	192.168.2.5	0xbf0	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.903698921 CEST	1.1.1.1	192.168.2.5	0xffcc	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:44.904761076 CEST	1.1.1.1	192.168.2.5	0xd159	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:44.905019045 CEST	1.1.1.1	192.168.2.5	0xe05a	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.245470047 CEST	1.1.1.1	192.168.2.5	0xb0c2	No error (0)	cdn.undertone.com	d2g1q7ku6gxqv6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.245470047 CEST	1.1.1.1	192.168.2.5	0xb0c2	No error (0)	d2g1q7ku6gxqv6.cloudfront.net		52.85.132.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.245470047 CEST	1.1.1.1	192.168.2.5	0xb0c2	No error (0)	d2g1q7ku6gxqv6.cloudfront.net		52.85.132.59	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.245470047 CEST	1.1.1.1	192.168.2.5	0xb0c2	No error (0)	d2g1q7ku6gxqv6.cloudfront.net		52.85.132.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.245470047 CEST	1.1.1.1	192.168.2.5	0xb0c2	No error (0)	d2g1q7ku6gxqv6.cloudfront.net		52.85.132.31	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.289396048 CEST	1.1.1.1	192.168.2.5	0x9d9	No error (0)	cdn.undertone.com	d2g1q7ku6gxqv6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.305402040 CEST	1.1.1.1	192.168.2.5	0xe825	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.305402040 CEST	1.1.1.1	192.168.2.5	0xe825	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.321803093 CEST	1.1.1.1	192.168.2.5	0x514d	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.321803093 CEST	1.1.1.1	192.168.2.5	0x514d	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.321803093 CEST	1.1.1.1	192.168.2.5	0x514d	No error (0)	pugm-vac.pubmnet.com		8.28.7.81	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.321821928 CEST	1.1.1.1	192.168.2.5	0xf1a4	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.321821928 CEST	1.1.1.1	192.168.2.5	0xf1a4	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.686083078 CEST	1.1.1.1	192.168.2.5	0xb376	No error (0)	hb.yellowblue.io		18.154.227.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.686083078 CEST	1.1.1.1	192.168.2.5	0xb376	No error (0)	hb.yellowblue.io		18.154.227.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.686083078 CEST	1.1.1.1	192.168.2.5	0xb376	No error (0)	hb.yellowblue.io		18.154.227.88	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.686083078 CEST	1.1.1.1	192.168.2.5	0xb376	No error (0)	hb.yellowblue.io		18.154.227.125	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.734745026 CEST	1.1.1.1	192.168.2.5	0xbdc	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.734745026 CEST	1.1.1.1	192.168.2.5	0xbdc	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.870831966 CEST	1.1.1.1	192.168.2.5	0xd198	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		52.22.142.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		54.84.203.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		35.169.39.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		52.21.78.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		54.85.134.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		54.211.93.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		18.210.126.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.871226072 CEST	1.1.1.1	192.168.2.5	0x9e96	No error (0)	hb.digbearings.com		18.209.116.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.878639936 CEST	1.1.1.1	192.168.2.5	0x6b9e	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:45.878976107 CEST	1.1.1.1	192.168.2.5	0xd3cf	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.878976107 CEST	1.1.1.1	192.168.2.5	0xd3cf	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.879911900 CEST	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.202.246.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.82.167.0	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.223.215.115	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.224.113.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.89.142.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.1.128.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.196.251.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882070065 CEST	1.1.1.1	192.168.2.5	0xf063	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.231.23.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882683992 CEST	1.1.1.1	192.168.2.5	0x9bfa	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882683992 CEST	1.1.1.1	192.168.2.5	0x9bfa	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.882683992 CEST	1.1.1.1	192.168.2.5	0x9bfa	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.197.249.125	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.172.0.124	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.2.20.171	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.203.209.158	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.145.150.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		18.235.65.192	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.235.211.185	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.885402918 CEST	1.1.1.1	192.168.2.5	0xd4e2	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.214.230.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.886317015 CEST	1.1.1.1	192.168.2.5	0x8b56	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.886317015 CEST	1.1.1.1	192.168.2.5	0x8b56	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.886991978 CEST	1.1.1.1	192.168.2.5	0x4af5	No error (0)	ssc.33across.com		34.149.20.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.893305063 CEST	1.1.1.1	192.168.2.5	0xf131	No error (0)	mp.4dex.io		172.64.153.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.893305063 CEST	1.1.1.1	192.168.2.5	0xf131	No error (0)	mp.4dex.io		104.18.34.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.893749952 CEST	1.1.1.1	192.168.2.5	0xad6f	No error (0)	mp.4dex.io			65	IN (0x0001)	false
Apr 19, 2024 15:12:45.921293974 CEST	1.1.1.1	192.168.2.5	0xf782	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.921293974 CEST	1.1.1.1	192.168.2.5	0xf782	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.921293974 CEST	1.1.1.1	192.168.2.5	0xf782	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.921293974 CEST	1.1.1.1	192.168.2.5	0xf782	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.921293974 CEST	1.1.1.1	192.168.2.5	0xf782	No error (0)	iad-2-apex.go.sonobi.com		69.166.1.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.921432018 CEST	1.1.1.1	192.168.2.5	0x1060	No error (0)	apex.go.sonobi.com	iad-2-apex.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.944384098 CEST	1.1.1.1	192.168.2.5	0x357d	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:45.944384098 CEST	1.1.1.1	192.168.2.5	0x357d	No error (0)	pool-use-gce-sc.reims.iponweb.net		35.211.118.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:45.944596052 CEST	1.1.1.1	192.168.2.5	0x5476	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.024359941 CEST	1.1.1.1	192.168.2.5	0x49a7	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.025254011 CEST	1.1.1.1	192.168.2.5	0x5a65	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.180671930 CEST	1.1.1.1	192.168.2.5	0x5da0	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.180685043 CEST	1.1.1.1	192.168.2.5	0xd5fe	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.180685043 CEST	1.1.1.1	192.168.2.5	0xd5fe	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		107.22.164.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.180685043 CEST	1.1.1.1	192.168.2.5	0xd5fe	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.205.174.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.180685043 CEST	1.1.1.1	192.168.2.5	0xd5fe	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.199.115.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.180685043 CEST	1.1.1.1	192.168.2.5	0xd5fe	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.95.70.142	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.322160006 CEST	1.1.1.1	192.168.2.5	0x3fc	No error (0)	google-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.322160006 CEST	1.1.1.1	192.168.2.5	0x3fc	No error (0)	google-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.426935911 CEST	1.1.1.1	192.168.2.5	0xbd8b	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.426935911 CEST	1.1.1.1	192.168.2.5	0xbd8b	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.534411907 CEST	1.1.1.1	192.168.2.5	0x4d15	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.534491062 CEST	1.1.1.1	192.168.2.5	0x4079	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.633568048 CEST	1.1.1.1	192.168.2.5	0xaebb	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.633588076 CEST	1.1.1.1	192.168.2.5	0xd6d2	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.633611917 CEST	1.1.1.1	192.168.2.5	0x2a42	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:46.633611917 CEST	1.1.1.1	192.168.2.5	0x2a42	No error (0)	static.us5.vip.prod.criteo.net		74.119.117.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:46.634764910 CEST	1.1.1.1	192.168.2.5	0xe46b	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.003865957 CEST	1.1.1.1	192.168.2.5	0xd37b	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.004106998 CEST	1.1.1.1	192.168.2.5	0x82a1	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007544994 CEST	1.1.1.1	192.168.2.5	0x68f6	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007544994 CEST	1.1.1.1	192.168.2.5	0x68f6	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007544994 CEST	1.1.1.1	192.168.2.5	0x68f6	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007837057 CEST	1.1.1.1	192.168.2.5	0xe6f4	No error (0)	cdn.hadronid.net		104.22.53.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007837057 CEST	1.1.1.1	192.168.2.5	0xe6f4	No error (0)	cdn.hadronid.net		104.22.52.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007837057 CEST	1.1.1.1	192.168.2.5	0xe6f4	No error (0)	cdn.hadronid.net		172.67.36.110	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.007951021 CEST	1.1.1.1	192.168.2.5	0xce5e	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:47.007961988 CEST	1.1.1.1	192.168.2.5	0x368f	No error (0)	cdn.hadronid.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:47.008104086 CEST	1.1.1.1	192.168.2.5	0x5020	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.008104086 CEST	1.1.1.1	192.168.2.5	0x5020	No error (0)	loadus.tm.ssl.exelator.com	us-central.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.008104086 CEST	1.1.1.1	192.168.2.5	0x5020	No error (0)	us-central.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.008104086 CEST	1.1.1.1	192.168.2.5	0x5020	No error (0)	load-use1.exelator.com		50.16.197.56	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.009186983 CEST	1.1.1.1	192.168.2.5	0x23a0	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.009186983 CEST	1.1.1.1	192.168.2.5	0x23a0	No error (0)	loadus.tm.ssl.exelator.com	us-central.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.009186983 CEST	1.1.1.1	192.168.2.5	0x23a0	No error (0)	us-central.load.exelator.com	load-usw2.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		100.24.226.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.632944107 CEST	1.1.1.1	192.168.2.5	0xb83d	No error (0)	privacy.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:47.657869101 CEST	1.1.1.1	192.168.2.5	0x805c	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:47.660376072 CEST	1.1.1.1	192.168.2.5	0x74dc	No error (0)	id.hadron.ad.gt	id.hadron.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		3.228.82.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		54.90.236.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		34.199.236.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		34.226.54.46	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		34.232.204.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		3.83.209.251	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		34.237.69.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.037767887 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	va-lb.gumgum.com		3.92.97.42	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.068167925 CEST	1.1.1.1	192.168.2.5	0x8ce7	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.068167925 CEST	1.1.1.1	192.168.2.5	0x8ce7	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.068782091 CEST	1.1.1.1	192.168.2.5	0xbb4	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.068782091 CEST	1.1.1.1	192.168.2.5	0xbb4	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.070154905 CEST	1.1.1.1	192.168.2.5	0x7172	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.071156025 CEST	1.1.1.1	192.168.2.5	0x3082	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.071167946 CEST	1.1.1.1	192.168.2.5	0xd622	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.071167946 CEST	1.1.1.1	192.168.2.5	0xd622	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.071167946 CEST	1.1.1.1	192.168.2.5	0xd622	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.071167946 CEST	1.1.1.1	192.168.2.5	0xd622	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117273092 CEST	1.1.1.1	192.168.2.5	0x289d	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.251.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.203.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.204.214	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.241	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.188.43	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.249.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.211.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.163.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.164.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.117784023 CEST	1.1.1.1	192.168.2.5	0xfceb	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.248.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.127625942 CEST	1.1.1.1	192.168.2.5	0x9ecb	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.130059004 CEST	1.1.1.1	192.168.2.5	0x38ae	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.130059004 CEST	1.1.1.1	192.168.2.5	0x38ae	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.130059004 CEST	1.1.1.1	192.168.2.5	0x38ae	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.130963087 CEST	1.1.1.1	192.168.2.5	0xcf9c	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.130963087 CEST	1.1.1.1	192.168.2.5	0xcf9c	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.132925034 CEST	1.1.1.1	192.168.2.5	0x3055	No error (0)	s.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.133274078 CEST	1.1.1.1	192.168.2.5	0x9e31	No error (0)	s.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		35.168.150.191	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		23.23.249.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		34.239.2.224	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		44.218.50.193	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		34.227.231.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		18.233.181.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		3.217.97.30	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.134965897 CEST	1.1.1.1	192.168.2.5	0x5e5c	No error (0)	na-ice.360yield.com		3.208.44.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135008097 CEST	1.1.1.1	192.168.2.5	0x22a6	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135008097 CEST	1.1.1.1	192.168.2.5	0x22a6	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135539055 CEST	1.1.1.1	192.168.2.5	0x44a0	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.135835886 CEST	1.1.1.1	192.168.2.5	0x93b6	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.150578022 CEST	1.1.1.1	192.168.2.5	0xf718	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.151452065 CEST	1.1.1.1	192.168.2.5	0x62c	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.189168930 CEST	1.1.1.1	192.168.2.5	0xfeef	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.144.51.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.144.222.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.159.170.51	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.163.75.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.164.184.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.157.219.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190252066 CEST	1.1.1.1	192.168.2.5	0x8a85	No error (0)	sync.ipredictive.com		54.147.54.171	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190983057 CEST	1.1.1.1	192.168.2.5	0xe48d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190983057 CEST	1.1.1.1	192.168.2.5	0xe48d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.239.23.6	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190983057 CEST	1.1.1.1	192.168.2.5	0xe48d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		18.211.27.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190983057 CEST	1.1.1.1	192.168.2.5	0xe48d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.196.142.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.190983057 CEST	1.1.1.1	192.168.2.5	0xe48d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.232.139.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.191371918 CEST	1.1.1.1	192.168.2.5	0x9eba	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.192405939 CEST	1.1.1.1	192.168.2.5	0x5170	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.192405939 CEST	1.1.1.1	192.168.2.5	0x5170	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.192405939 CEST	1.1.1.1	192.168.2.5	0x5170	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.192405939 CEST	1.1.1.1	192.168.2.5	0x5170	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.192405939 CEST	1.1.1.1	192.168.2.5	0x5170	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.192672968 CEST	1.1.1.1	192.168.2.5	0xcc3	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.193777084 CEST	1.1.1.1	192.168.2.5	0x54ef	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.193777084 CEST	1.1.1.1	192.168.2.5	0x54ef	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.193922997 CEST	1.1.1.1	192.168.2.5	0xc037	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.193922997 CEST	1.1.1.1	192.168.2.5	0xc037	No error (0)	cookiematch-us-east-1.prod.justpremium.com		34.202.33.5	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.193922997 CEST	1.1.1.1	192.168.2.5	0xc037	No error (0)	cookiematch-us-east-1.prod.justpremium.com		54.175.119.162	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.193922997 CEST	1.1.1.1	192.168.2.5	0xc037	No error (0)	cookiematch-us-east-1.prod.justpremium.com		3.221.230.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.621618986 CEST	1.1.1.1	192.168.2.5	0x310f	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.621618986 CEST	1.1.1.1	192.168.2.5	0x310f	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.621618986 CEST	1.1.1.1	192.168.2.5	0x310f	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.621618986 CEST	1.1.1.1	192.168.2.5	0x310f	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.621618986 CEST	1.1.1.1	192.168.2.5	0x310f	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.621618986 CEST	1.1.1.1	192.168.2.5	0x310f	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.624653101 CEST	1.1.1.1	192.168.2.5	0xb71c	No error (0)	pixel.s3xified.com		67.231.251.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.625051975 CEST	1.1.1.1	192.168.2.5	0x278a	No error (0)	cs.admanmedia.com		80.77.87.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	sync-amz.ads.yieldmo.com	syncelb-240036109.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	syncelb-240036109.us-east-1.elb.amazonaws.com		54.208.231.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	syncelb-240036109.us-east-1.elb.amazonaws.com		35.168.177.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	syncelb-240036109.us-east-1.elb.amazonaws.com		52.1.45.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	syncelb-240036109.us-east-1.elb.amazonaws.com		54.84.166.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	syncelb-240036109.us-east-1.elb.amazonaws.com		34.231.116.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.651067019 CEST	1.1.1.1	192.168.2.5	0x1527	No error (0)	syncelb-240036109.us-east-1.elb.amazonaws.com		100.24.154.204	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.653558969 CEST	1.1.1.1	192.168.2.5	0x7092	No error (0)	sync-amz.ads.yieldmo.com	syncelb-240036109.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.655927896 CEST	1.1.1.1	192.168.2.5	0xb7f6	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:48.656275988 CEST	1.1.1.1	192.168.2.5	0x9036	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.656275988 CEST	1.1.1.1	192.168.2.5	0x9036	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		52.5.14.134	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		52.87.125.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		52.73.223.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		54.161.140.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		54.205.244.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		52.4.157.85	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		54.165.171.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664264917 CEST	1.1.1.1	192.168.2.5	0x811a	No error (0)	cdn.w55c.net		52.73.164.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.664930105 CEST	1.1.1.1	192.168.2.5	0x3c1d	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		54.211.215.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		23.23.171.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		204.236.219.255	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		34.202.111.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		3.210.40.185	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		184.73.252.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		107.22.173.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666158915 CEST	1.1.1.1	192.168.2.5	0xd10	No error (0)	idaas-ext.cph.liveintent.com		54.165.94.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.666513920 CEST	1.1.1.1	192.168.2.5	0x35fd	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.668062925 CEST	1.1.1.1	192.168.2.5	0x5e3c	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.668062925 CEST	1.1.1.1	192.168.2.5	0x5e3c	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.668437004 CEST	1.1.1.1	192.168.2.5	0x18b5	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.726389885 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.730197906 CEST	1.1.1.1	192.168.2.5	0x698d	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.730197906 CEST	1.1.1.1	192.168.2.5	0x698d	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.730197906 CEST	1.1.1.1	192.168.2.5	0x698d	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.730197906 CEST	1.1.1.1	192.168.2.5	0x698d	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.730197906 CEST	1.1.1.1	192.168.2.5	0x698d	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.731005907 CEST	1.1.1.1	192.168.2.5	0xebe1	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.737833977 CEST	1.1.1.1	192.168.2.5	0xbc25	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.742336035 CEST	1.1.1.1	192.168.2.5	0x2ddb	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.743501902 CEST	1.1.1.1	192.168.2.5	0x8091	No error (0)	aorta.clickagy.com		34.198.78.192	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.743501902 CEST	1.1.1.1	192.168.2.5	0x8091	No error (0)	aorta.clickagy.com		34.195.172.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.743501902 CEST	1.1.1.1	192.168.2.5	0x8091	No error (0)	aorta.clickagy.com		52.20.189.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.743501902 CEST	1.1.1.1	192.168.2.5	0x8091	No error (0)	aorta.clickagy.com		34.228.243.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.752819061 CEST	1.1.1.1	192.168.2.5	0xe4ef	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.752819061 CEST	1.1.1.1	192.168.2.5	0xe4ef	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.752819061 CEST	1.1.1.1	192.168.2.5	0xe4ef	No error (0)	pixel.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:48.753014088 CEST	1.1.1.1	192.168.2.5	0xb46	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.757550001 CEST	1.1.1.1	192.168.2.5	0xbb6a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:48.758410931 CEST	1.1.1.1	192.168.2.5	0xb812	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:49.088166952 CEST	1.1.1.1	192.168.2.5	0x896d	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:49.088166952 CEST	1.1.1.1	192.168.2.5	0x896d	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.088812113 CEST	1.1.1.1	192.168.2.5	0xa807	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.089637041 CEST	1.1.1.1	192.168.2.5	0xb375	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.091721058 CEST	1.1.1.1	192.168.2.5	0x6fd1	No error (0)	aax-eu.amazon-adsystem.com		52.95.115.255	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:49.244508028 CEST	1.1.1.1	192.168.2.5	0x5a10	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:49.244729996 CEST	1.1.1.1	192.168.2.5	0x63e6	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:50.377401114 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.377401114 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.377401114 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.377401114 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.377401114 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		23.23.219.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		18.213.250.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		34.203.128.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		44.215.221.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		3.209.154.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		54.205.61.221	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.787524939 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	cs.yellowblue.io		54.87.55.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		100.24.226.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.799494982 CEST	1.1.1.1	192.168.2.5	0x6c16	No error (0)	id.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.894499063 CEST	1.1.1.1	192.168.2.5	0x2c85	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:50.894499063 CEST	1.1.1.1	192.168.2.5	0x2c85	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.894499063 CEST	1.1.1.1	192.168.2.5	0x2c85	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.894499063 CEST	1.1.1.1	192.168.2.5	0x2c85	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.894499063 CEST	1.1.1.1	192.168.2.5	0x2c85	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.895816088 CEST	1.1.1.1	192.168.2.5	0x7618	No error (0)	insticator-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:50.895816088 CEST	1.1.1.1	192.168.2.5	0x7618	No error (0)	insticator-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.003679037 CEST	1.1.1.1	192.168.2.5	0x92a8	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.003679037 CEST	1.1.1.1	192.168.2.5	0x92a8	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.003885031 CEST	1.1.1.1	192.168.2.5	0x30e	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:51.032327890 CEST	1.1.1.1	192.168.2.5	0x372b	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.032327890 CEST	1.1.1.1	192.168.2.5	0x372b	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.032327890 CEST	1.1.1.1	192.168.2.5	0x372b	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.032327890 CEST	1.1.1.1	192.168.2.5	0x372b	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.032327890 CEST	1.1.1.1	192.168.2.5	0x372b	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.033193111 CEST	1.1.1.1	192.168.2.5	0x26e6	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.033193111 CEST	1.1.1.1	192.168.2.5	0x26e6	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.033193111 CEST	1.1.1.1	192.168.2.5	0x26e6	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.033837080 CEST	1.1.1.1	192.168.2.5	0x76ac	No error (0)	id.a-mx.com		121.127.42.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.033837080 CEST	1.1.1.1	192.168.2.5	0x76ac	No error (0)	id.a-mx.com		138.199.41.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.036263943 CEST	1.1.1.1	192.168.2.5	0xe9de	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.036263943 CEST	1.1.1.1	192.168.2.5	0xe9de	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.078973055 CEST	1.1.1.1	192.168.2.5	0xf5df	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.079147100 CEST	1.1.1.1	192.168.2.5	0x52a9	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.079160929 CEST	1.1.1.1	192.168.2.5	0x2574	No error (0)	cd.connatix.com	cd.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.079936981 CEST	1.1.1.1	192.168.2.5	0xaf05	No error (0)	cd.connatix.com	cd.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.163594961 CEST	1.1.1.1	192.168.2.5	0xc4f6	No error (0)	us.shb-sync.com		8.2.110.33	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.175353050 CEST	1.1.1.1	192.168.2.5	0x1284	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.175528049 CEST	1.1.1.1	192.168.2.5	0xaf34	No error (0)	a.ad.gt	a.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.295849085 CEST	1.1.1.1	192.168.2.5	0x8b53	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.295849085 CEST	1.1.1.1	192.168.2.5	0x8b53	No error (0)	de.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		52.7.147.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		52.87.68.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		54.147.229.205	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		52.87.32.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		54.147.251.163	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		54.160.121.189	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		54.160.108.204	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.395917892 CEST	1.1.1.1	192.168.2.5	0x1ef2	No error (0)	match.prod.bidr.io		54.159.65.185	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.442498922 CEST	1.1.1.1	192.168.2.5	0x50a1	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.442498922 CEST	1.1.1.1	192.168.2.5	0x50a1	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		3.218.162.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.442498922 CEST	1.1.1.1	192.168.2.5	0x50a1	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		23.23.184.234	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.442498922 CEST	1.1.1.1	192.168.2.5	0x50a1	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.228.34.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.442498922 CEST	1.1.1.1	192.168.2.5	0x50a1	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.234.6.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.442871094 CEST	1.1.1.1	192.168.2.5	0xee34	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.581187963 CEST	1.1.1.1	192.168.2.5	0x69cc	No error (0)	product.instiengage.com	d1qs6g1uppzjpx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.581187963 CEST	1.1.1.1	192.168.2.5	0x69cc	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.581187963 CEST	1.1.1.1	192.168.2.5	0x69cc	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.581187963 CEST	1.1.1.1	192.168.2.5	0x69cc	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.581187963 CEST	1.1.1.1	192.168.2.5	0x69cc	No error (0)	d1qs6g1uppzjpx.cloudfront.net		3.161.188.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.581542015 CEST	1.1.1.1	192.168.2.5	0x61bc	No error (0)	product.instiengage.com	d1qs6g1uppzjpx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683115959 CEST	1.1.1.1	192.168.2.5	0x3a8	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683115959 CEST	1.1.1.1	192.168.2.5	0x3a8	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683115959 CEST	1.1.1.1	192.168.2.5	0x3a8	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.224.27.195	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.234.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.158.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.89.18.235	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.128.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.123.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.23.121.179	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683578968 CEST	1.1.1.1	192.168.2.5	0x1827	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.227.87.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.683809042 CEST	1.1.1.1	192.168.2.5	0x1b19	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.684554100 CEST	1.1.1.1	192.168.2.5	0xcee1	No error (0)	contextual.media.net		184.25.164.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.685260057 CEST	1.1.1.1	192.168.2.5	0x2834	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.706871986 CEST	1.1.1.1	192.168.2.5	0xf3cd	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:51.707422018 CEST	1.1.1.1	192.168.2.5	0x6dfd	No error (0)	ssum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.707422018 CEST	1.1.1.1	192.168.2.5	0x6dfd	No error (0)	ssum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.729859114 CEST	1.1.1.1	192.168.2.5	0xe230	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.815825939 CEST	1.1.1.1	192.168.2.5	0x9a40	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.815825939 CEST	1.1.1.1	192.168.2.5	0x9a40	No error (0)	owv2.pubmnet.com	ow-va1c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.815825939 CEST	1.1.1.1	192.168.2.5	0x9a40	No error (0)	ow-va1c.pubmnet.com		8.28.7.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.816239119 CEST	1.1.1.1	192.168.2.5	0xb571	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.816239119 CEST	1.1.1.1	192.168.2.5	0xb571	No error (0)	owv2.pubmnet.com	ow-va1c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.217.159.230	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.88.235.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		23.23.109.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		23.22.14.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.158.36.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.83.177.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.200.137.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882095098 CEST	1.1.1.1	192.168.2.5	0xf657	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.222.126.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882632971 CEST	1.1.1.1	192.168.2.5	0x1caa	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882632971 CEST	1.1.1.1	192.168.2.5	0x1caa	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.882632971 CEST	1.1.1.1	192.168.2.5	0x1caa	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.885710001 CEST	1.1.1.1	192.168.2.5	0xf13e	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:51.886733055 CEST	1.1.1.1	192.168.2.5	0xc063	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.109795094 CEST	1.1.1.1	192.168.2.5	0xb040	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.110028028 CEST	1.1.1.1	192.168.2.5	0x9672	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.197602034 CEST	1.1.1.1	192.168.2.5	0x209f	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.197736025 CEST	1.1.1.1	192.168.2.5	0x3fd9	No error (0)	p.ad.gt	p.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.207469940 CEST	1.1.1.1	192.168.2.5	0xe870	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.207469940 CEST	1.1.1.1	192.168.2.5	0xe870	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.207469940 CEST	1.1.1.1	192.168.2.5	0xe870	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.207691908 CEST	1.1.1.1	192.168.2.5	0x94d5	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.207691908 CEST	1.1.1.1	192.168.2.5	0x94d5	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.207808971 CEST	1.1.1.1	192.168.2.5	0xab17	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.208230019 CEST	1.1.1.1	192.168.2.5	0x228c	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.209000111 CEST	1.1.1.1	192.168.2.5	0x355f	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.210691929 CEST	1.1.1.1	192.168.2.5	0x66c1	No error (0)	cm.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.210691929 CEST	1.1.1.1	192.168.2.5	0x66c1	No error (0)	cm.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.210691929 CEST	1.1.1.1	192.168.2.5	0x66c1	No error (0)	cm.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.210691929 CEST	1.1.1.1	192.168.2.5	0x66c1	No error (0)	cm.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.211090088 CEST	1.1.1.1	192.168.2.5	0xaf11	No error (0)	ids.ad.gt	ids.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.211282969 CEST	1.1.1.1	192.168.2.5	0xc49f	No error (0)	ids.ad.gt	ids.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.166.111.231	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.161.110.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.146.215.124	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.147.251.163	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.156.100.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.165.200.234	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		54.147.229.205	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:52.945394993 CEST	1.1.1.1	192.168.2.5	0xe583	No error (0)	match.prod.bidr.io		52.7.147.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.013773918 CEST	1.1.1.1	192.168.2.5	0x24cb	No error (0)	ua.p7cloud.net	d22j774itlbovl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.013773918 CEST	1.1.1.1	192.168.2.5	0x24cb	No error (0)	d22j774itlbovl.cloudfront.net		18.165.98.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.013773918 CEST	1.1.1.1	192.168.2.5	0x24cb	No error (0)	d22j774itlbovl.cloudfront.net		18.165.98.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.013773918 CEST	1.1.1.1	192.168.2.5	0x24cb	No error (0)	d22j774itlbovl.cloudfront.net		18.165.98.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.013773918 CEST	1.1.1.1	192.168.2.5	0x24cb	No error (0)	d22j774itlbovl.cloudfront.net		18.165.98.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.014400005 CEST	1.1.1.1	192.168.2.5	0x8eeb	No error (0)	ua.p7cloud.net	d22j774itlbovl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.019269943 CEST	1.1.1.1	192.168.2.5	0xfa6f	No error (0)	location.p7cloud.net	d212ymdm2soznz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.019269943 CEST	1.1.1.1	192.168.2.5	0xfa6f	No error (0)	d212ymdm2soznz.cloudfront.net		18.64.236.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.019269943 CEST	1.1.1.1	192.168.2.5	0xfa6f	No error (0)	d212ymdm2soznz.cloudfront.net		18.64.236.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.019269943 CEST	1.1.1.1	192.168.2.5	0xfa6f	No error (0)	d212ymdm2soznz.cloudfront.net		18.64.236.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.019269943 CEST	1.1.1.1	192.168.2.5	0xfa6f	No error (0)	d212ymdm2soznz.cloudfront.net		18.64.236.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.019315958 CEST	1.1.1.1	192.168.2.5	0x75a2	No error (0)	location.p7cloud.net	d212ymdm2soznz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.022686005 CEST	1.1.1.1	192.168.2.5	0xc8a2	No error (0)	d2tbszkvx1p56e.cloudfront.net		3.163.78.214	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.022686005 CEST	1.1.1.1	192.168.2.5	0xc8a2	No error (0)	d2tbszkvx1p56e.cloudfront.net		3.163.78.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.022686005 CEST	1.1.1.1	192.168.2.5	0xc8a2	No error (0)	d2tbszkvx1p56e.cloudfront.net		3.163.78.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.022686005 CEST	1.1.1.1	192.168.2.5	0xc8a2	No error (0)	d2tbszkvx1p56e.cloudfront.net		3.163.78.174	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.040957928 CEST	1.1.1.1	192.168.2.5	0x486d	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.041018963 CEST	1.1.1.1	192.168.2.5	0x9ae8	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.042427063 CEST	1.1.1.1	192.168.2.5	0x6b9f	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.055346012 CEST	1.1.1.1	192.168.2.5	0x209a	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.055809021 CEST	1.1.1.1	192.168.2.5	0xa086	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.055809021 CEST	1.1.1.1	192.168.2.5	0xa086	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.055809021 CEST	1.1.1.1	192.168.2.5	0xa086	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.30	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.055809021 CEST	1.1.1.1	192.168.2.5	0xa086	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.055809021 CEST	1.1.1.1	192.168.2.5	0xa086	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.153850079 CEST	1.1.1.1	192.168.2.5	0xb89f	No error (0)	cdn.confiant-integrations.net			65	IN (0x0001)	false
Apr 19, 2024 15:12:53.154287100 CEST	1.1.1.1	192.168.2.5	0xe602	No error (0)	cdn.confiant-integrations.net		172.64.144.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.154287100 CEST	1.1.1.1	192.168.2.5	0xe602	No error (0)	cdn.confiant-integrations.net		104.18.43.90	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.193631887 CEST	1.1.1.1	192.168.2.5	0xddbe	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.193631887 CEST	1.1.1.1	192.168.2.5	0xddbe	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.193631887 CEST	1.1.1.1	192.168.2.5	0xddbe	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.200.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.82.211.88	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.123.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.20.162.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.44.150.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.156.60.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.204.189.243	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.194252014 CEST	1.1.1.1	192.168.2.5	0x2fbf	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.0.46.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.205933094 CEST	1.1.1.1	192.168.2.5	0x6b38	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.205933094 CEST	1.1.1.1	192.168.2.5	0x6b38	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.205933094 CEST	1.1.1.1	192.168.2.5	0x6b38	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.206584930 CEST	1.1.1.1	192.168.2.5	0x2f37	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.206584930 CEST	1.1.1.1	192.168.2.5	0x2f37	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971738100 CEST	1.1.1.1	192.168.2.5	0x429b	No error (0)	1x1.a-mo.net		54.243.52.226	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971738100 CEST	1.1.1.1	192.168.2.5	0x429b	No error (0)	1x1.a-mo.net		54.166.221.223	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971738100 CEST	1.1.1.1	192.168.2.5	0x429b	No error (0)	1x1.a-mo.net		18.213.137.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971738100 CEST	1.1.1.1	192.168.2.5	0x429b	No error (0)	1x1.a-mo.net		3.217.201.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971738100 CEST	1.1.1.1	192.168.2.5	0x429b	No error (0)	1x1.a-mo.net		44.207.184.171	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971738100 CEST	1.1.1.1	192.168.2.5	0x429b	No error (0)	1x1.a-mo.net		3.229.189.245	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:53.971837997 CEST	1.1.1.1	192.168.2.5	0xcd3f	No error (0)	merequartz.com		34.110.253.203	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.087661982 CEST	1.1.1.1	192.168.2.5	0x2c92	No error (0)	script.4dex.io		104.26.9.169	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.087661982 CEST	1.1.1.1	192.168.2.5	0x2c92	No error (0)	script.4dex.io		172.67.75.241	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.087661982 CEST	1.1.1.1	192.168.2.5	0x2c92	No error (0)	script.4dex.io		104.26.8.169	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.087856054 CEST	1.1.1.1	192.168.2.5	0xd9d7	No error (0)	script.4dex.io			65	IN (0x0001)	false
Apr 19, 2024 15:12:54.112736940 CEST	1.1.1.1	192.168.2.5	0xf724	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.113459110 CEST	1.1.1.1	192.168.2.5	0xea43	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		3.227.94.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		100.24.226.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.114320993 CEST	1.1.1.1	192.168.2.5	0x7675	No error (0)	sync.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.181138039 CEST	1.1.1.1	192.168.2.5	0xa4aa	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.181613922 CEST	1.1.1.1	192.168.2.5	0x21bc	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.181864977 CEST	1.1.1.1	192.168.2.5	0x8e8a	No error (0)	pixels.ad.gt	pixels.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.182532072 CEST	1.1.1.1	192.168.2.5	0x9c5d	No error (0)	seg.ad.gt	seg.ad.gt.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307333946 CEST	1.1.1.1	192.168.2.5	0x33b1	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307333946 CEST	1.1.1.1	192.168.2.5	0x33b1	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	global.px.quantserve.com		192.184.67.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.307915926 CEST	1.1.1.1	192.168.2.5	0xf6df	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.398420095 CEST	1.1.1.1	192.168.2.5	0xb2fd	No error (0)	cdn.justjared.com	cdn.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.400494099 CEST	1.1.1.1	192.168.2.5	0x7694	No error (0)	cdn.justjared.com	cdn.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.471740961 CEST	1.1.1.1	192.168.2.5	0xae3b	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.471740961 CEST	1.1.1.1	192.168.2.5	0xae3b	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.471740961 CEST	1.1.1.1	192.168.2.5	0xae3b	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.472001076 CEST	1.1.1.1	192.168.2.5	0xcead	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.472001076 CEST	1.1.1.1	192.168.2.5	0xcead	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.553814888 CEST	1.1.1.1	192.168.2.5	0xff07	No error (0)	cds.connatix.com	cds.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.554821014 CEST	1.1.1.1	192.168.2.5	0xe845	No error (0)	cds.connatix.com	cds.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.578741074 CEST	1.1.1.1	192.168.2.5	0xc70d	No error (0)	sync.richaudience.com		138.201.8.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		35.161.161.42	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		52.43.175.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		44.235.46.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		52.40.39.43	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		52.25.53.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		34.208.91.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		44.239.80.115	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696826935 CEST	1.1.1.1	192.168.2.5	0x8abd	No error (0)	visitor-us-west-2.omnitagjs.com		54.212.0.234	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.696885109 CEST	1.1.1.1	192.168.2.5	0xc17	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:54.883944988 CEST	1.1.1.1	192.168.2.5	0x3de9	No error (0)	pagead-googlehosted.l.google.com		172.217.215.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:54.942027092 CEST	1.1.1.1	192.168.2.5	0x1e86	No error (0)	pagead-googlehosted.l.google.com		64.233.185.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.060385942 CEST	1.1.1.1	192.168.2.5	0x1c2c	No error (0)	pagead-googlehosted.l.google.com		142.250.105.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.261020899 CEST	1.1.1.1	192.168.2.5	0xdc6b	No error (0)	proc.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:55.593386889 CEST	1.1.1.1	192.168.2.5	0xf656	No error (0)	router.infolinks.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:55.593458891 CEST	1.1.1.1	192.168.2.5	0x61d3	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.593458891 CEST	1.1.1.1	192.168.2.5	0x61d3	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.776359081 CEST	1.1.1.1	192.168.2.5	0x726d	No error (0)	sync.intentiq.com		3.161.193.77	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.776359081 CEST	1.1.1.1	192.168.2.5	0x726d	No error (0)	sync.intentiq.com		3.161.193.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.776359081 CEST	1.1.1.1	192.168.2.5	0x726d	No error (0)	sync.intentiq.com		3.161.193.27	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.776359081 CEST	1.1.1.1	192.168.2.5	0x726d	No error (0)	sync.intentiq.com		3.161.193.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.904680967 CEST	1.1.1.1	192.168.2.5	0x7c1	No error (0)	router.infolinks.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:55.904694080 CEST	1.1.1.1	192.168.2.5	0x6f33	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:55.904694080 CEST	1.1.1.1	192.168.2.5	0x6f33	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.857956886 CEST	1.1.1.1	192.168.2.5	0x7228	No error (0)	pxl.iqm.com		54.88.142.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.857956886 CEST	1.1.1.1	192.168.2.5	0x7228	No error (0)	pxl.iqm.com		34.193.171.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.857956886 CEST	1.1.1.1	192.168.2.5	0x7228	No error (0)	pxl.iqm.com		3.229.202.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.888750076 CEST	1.1.1.1	192.168.2.5	0x443f	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:56.888978004 CEST	1.1.1.1	192.168.2.5	0x8ff1	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:56.944746971 CEST	1.1.1.1	192.168.2.5	0xe63f	No error (0)	ads.us.criteo.com	ads.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:56.944746971 CEST	1.1.1.1	192.168.2.5	0xe63f	No error (0)	ads.us5.vip.prod.criteo.com		74.119.117.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:56.945208073 CEST	1.1.1.1	192.168.2.5	0x1e5	No error (0)	ads.us.criteo.com	ads.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.442533016 CEST	1.1.1.1	192.168.2.5	0x41c1	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.442533016 CEST	1.1.1.1	192.168.2.5	0x41c1	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.447525024 CEST	1.1.1.1	192.168.2.5	0xb6d3	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:57.700915098 CEST	1.1.1.1	192.168.2.5	0x514f	No error (0)	pixel.advertising.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.700915098 CEST	1.1.1.1	192.168.2.5	0x514f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.700915098 CEST	1.1.1.1	192.168.2.5	0x514f	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.700915098 CEST	1.1.1.1	192.168.2.5	0x514f	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.700915098 CEST	1.1.1.1	192.168.2.5	0x514f	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.701208115 CEST	1.1.1.1	192.168.2.5	0x5068	No error (0)	pixel.advertising.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.701208115 CEST	1.1.1.1	192.168.2.5	0x5068	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.701208115 CEST	1.1.1.1	192.168.2.5	0x5068	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.782294035 CEST	1.1.1.1	192.168.2.5	0x8619	No error (0)	rt3047.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.782294035 CEST	1.1.1.1	192.168.2.5	0x8619	No error (0)	rt3047.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.783190012 CEST	1.1.1.1	192.168.2.5	0x36a3	No error (0)	rt3047.infolinks.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:57.885154009 CEST	1.1.1.1	192.168.2.5	0x36fe	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		35.168.150.191	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		44.222.53.79	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		100.25.195.92	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		18.233.181.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		18.211.29.223	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		3.208.44.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		34.225.57.235	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:57.885790110 CEST	1.1.1.1	192.168.2.5	0x7470	No error (0)	na-ice.360yield.com		54.85.199.242	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.466286898 CEST	1.1.1.1	192.168.2.5	0x10ba	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.466286898 CEST	1.1.1.1	192.168.2.5	0x10ba	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.470257044 CEST	1.1.1.1	192.168.2.5	0x2eb3	No error (0)	assets.bounceexchange.com	static.bounceexchange.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.470257044 CEST	1.1.1.1	192.168.2.5	0x2eb3	No error (0)	static.bounceexchange.com		34.98.72.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.470704079 CEST	1.1.1.1	192.168.2.5	0x7035	No error (0)	assets.bounceexchange.com	static.bounceexchange.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.471719027 CEST	1.1.1.1	192.168.2.5	0x4f1	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.471719027 CEST	1.1.1.1	192.168.2.5	0x4f1	No error (0)	1.cpm.ak-is2.net		174.137.133.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.472429991 CEST	1.1.1.1	192.168.2.5	0xf938	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.533221006 CEST	1.1.1.1	192.168.2.5	0x726a	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.636795998 CEST	1.1.1.1	192.168.2.5	0x13d	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.636795998 CEST	1.1.1.1	192.168.2.5	0x13d	No error (0)	static.us5.vip.prod.criteo.net		74.119.117.4	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.637572050 CEST	1.1.1.1	192.168.2.5	0x1156	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.638757944 CEST	1.1.1.1	192.168.2.5	0xf5f2	No error (0)	cat.us5.us.criteo.com	cat.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.638757944 CEST	1.1.1.1	192.168.2.5	0xf5f2	No error (0)	cat.us5.vip.prod.criteo.com		74.119.117.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.638816118 CEST	1.1.1.1	192.168.2.5	0xe7fe	No error (0)	cat.us5.us.criteo.com	cat.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.639300108 CEST	1.1.1.1	192.168.2.5	0xc252	No error (0)	metrics.getrockerbox.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:58.639316082 CEST	1.1.1.1	192.168.2.5	0x3faa	No error (0)	metrics.getrockerbox.com		104.26.9.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.639316082 CEST	1.1.1.1	192.168.2.5	0x3faa	No error (0)	metrics.getrockerbox.com		104.26.8.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.639316082 CEST	1.1.1.1	192.168.2.5	0x3faa	No error (0)	metrics.getrockerbox.com		172.67.71.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.640144110 CEST	1.1.1.1	192.168.2.5	0xb5b7	No error (0)	measurement-api.criteo.com	measurement-api.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.640144110 CEST	1.1.1.1	192.168.2.5	0xb5b7	No error (0)	measurement-api.us5.vip.prod.criteo.com		74.119.117.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.641087055 CEST	1.1.1.1	192.168.2.5	0x8f4c	No error (0)	measurement-api.criteo.com	measurement-api.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.803406000 CEST	1.1.1.1	192.168.2.5	0x7e79	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.803638935 CEST	1.1.1.1	192.168.2.5	0x18de	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.848707914 CEST	1.1.1.1	192.168.2.5	0x6780	No error (0)	csm.us.criteo.net	csm.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.848707914 CEST	1.1.1.1	192.168.2.5	0x6780	No error (0)	csm.us5.vip.prod.criteo.net		74.119.117.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.848957062 CEST	1.1.1.1	192.168.2.5	0x647b	No error (0)	csm.us.criteo.net	csm.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.849467039 CEST	1.1.1.1	192.168.2.5	0x2a42	No error (0)	imageproxy.us.criteo.net	imageproxy.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:58.849467039 CEST	1.1.1.1	192.168.2.5	0x2a42	No error (0)	imageproxy.us5.vip.prod.criteo.net		74.119.117.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:58.850486994 CEST	1.1.1.1	192.168.2.5	0x5841	No error (0)	imageproxy.us.criteo.net	imageproxy.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:59.114061117 CEST	1.1.1.1	192.168.2.5	0xa38b	No error (0)	d-code.liadm.com	d26da0dx1ebj70.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:59.114061117 CEST	1.1.1.1	192.168.2.5	0xa38b	No error (0)	d26da0dx1ebj70.cloudfront.net		18.64.155.20	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.114061117 CEST	1.1.1.1	192.168.2.5	0xa38b	No error (0)	d26da0dx1ebj70.cloudfront.net		18.64.155.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.114061117 CEST	1.1.1.1	192.168.2.5	0xa38b	No error (0)	d26da0dx1ebj70.cloudfront.net		18.64.155.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.114061117 CEST	1.1.1.1	192.168.2.5	0xa38b	No error (0)	d26da0dx1ebj70.cloudfront.net		18.64.155.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.114984989 CEST	1.1.1.1	192.168.2.5	0x1fef	No error (0)	d-code.liadm.com	d26da0dx1ebj70.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:12:59.207756042 CEST	1.1.1.1	192.168.2.5	0x4795	No error (0)	resources.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.207756042 CEST	1.1.1.1	192.168.2.5	0x4795	No error (0)	resources.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:12:59.208522081 CEST	1.1.1.1	192.168.2.5	0x2b0c	No error (0)	resources.infolinks.com			65	IN (0x0001)	false
Apr 19, 2024 15:12:59.430313110 CEST	1.1.1.1	192.168.2.5	0xc058	No error (0)	u.4dex.io		34.149.40.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.381524086 CEST	1.1.1.1	192.168.2.5	0xab78	No error (0)	cm-x.mgid.com		8.2.110.161	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.386288881 CEST	1.1.1.1	192.168.2.5	0x3070	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:00.386288881 CEST	1.1.1.1	192.168.2.5	0x3070	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.386766911 CEST	1.1.1.1	192.168.2.5	0x9e79	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.159.181.30	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.199.131.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.87.111.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.211.20.251	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.200.244.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.99.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.209.149.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577342033 CEST	1.1.1.1	192.168.2.5	0x592f	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.200.146.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.577495098 CEST	1.1.1.1	192.168.2.5	0x5223	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:00.663753986 CEST	1.1.1.1	192.168.2.5	0xcec4	No error (0)	api.intentiq.com		18.164.78.74	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.663753986 CEST	1.1.1.1	192.168.2.5	0xcec4	No error (0)	api.intentiq.com		18.164.78.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.663753986 CEST	1.1.1.1	192.168.2.5	0xcec4	No error (0)	api.intentiq.com		18.164.78.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.663753986 CEST	1.1.1.1	192.168.2.5	0xcec4	No error (0)	api.intentiq.com		18.164.78.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.664967060 CEST	1.1.1.1	192.168.2.5	0x1a76	No error (0)	sync.intentiq.com		3.161.193.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.664967060 CEST	1.1.1.1	192.168.2.5	0x1a76	No error (0)	sync.intentiq.com		3.161.193.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.664967060 CEST	1.1.1.1	192.168.2.5	0x1a76	No error (0)	sync.intentiq.com		3.161.193.77	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:00.664967060 CEST	1.1.1.1	192.168.2.5	0x1a76	No error (0)	sync.intentiq.com		3.161.193.27	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.130170107 CEST	1.1.1.1	192.168.2.5	0xdc4d	No error (0)	rtb.us5.us.criteo.com	rtb.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.130440950 CEST	1.1.1.1	192.168.2.5	0xb857	No error (0)	rtb.us5.us.criteo.com	rtb.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.130440950 CEST	1.1.1.1	192.168.2.5	0xb857	No error (0)	rtb.us5.vip.prod.criteo.com		74.119.117.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.156373024 CEST	1.1.1.1	192.168.2.5	0x22b0	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.156373024 CEST	1.1.1.1	192.168.2.5	0x22b0	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.287141085 CEST	1.1.1.1	192.168.2.5	0x1b0b	No error (0)	pixel-us-west.rubiconproject.com	pixel-us-west.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.288240910 CEST	1.1.1.1	192.168.2.5	0x8f6f	No error (0)	pixel-us-west.rubiconproject.com	pixel-us-west.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.375926971 CEST	1.1.1.1	192.168.2.5	0x81ce	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.375926971 CEST	1.1.1.1	192.168.2.5	0x81ce	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.375926971 CEST	1.1.1.1	192.168.2.5	0x81ce	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.376302004 CEST	1.1.1.1	192.168.2.5	0x4ae8	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.376302004 CEST	1.1.1.1	192.168.2.5	0x4ae8	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.795567036 CEST	1.1.1.1	192.168.2.5	0xb7dd	No error (0)	vid.connatix.com	vid.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.796544075 CEST	1.1.1.1	192.168.2.5	0xb226	No error (0)	vid.connatix.com	vid.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.796917915 CEST	1.1.1.1	192.168.2.5	0x69f7	No error (0)	lit.connatix.com	lit.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.797466993 CEST	1.1.1.1	192.168.2.5	0x5833	No error (0)	lit.connatix.com	lit.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.797616005 CEST	1.1.1.1	192.168.2.5	0x64e8	No error (0)	ins.connatix.com	ins.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.798048019 CEST	1.1.1.1	192.168.2.5	0x8e8b	No error (0)	ins.connatix.com	ins.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		52.44.75.209	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		75.101.205.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		3.230.20.235	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		3.210.80.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		34.232.207.221	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		52.44.236.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		3.234.109.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800649881 CEST	1.1.1.1	192.168.2.5	0xc69e	No error (0)	livepixel-production.bln.liveintent.com		34.233.149.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:01.800731897 CEST	1.1.1.1	192.168.2.5	0x2e0e	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.132586956 CEST	1.1.1.1	192.168.2.5	0xf910	No error (0)	ssum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.132586956 CEST	1.1.1.1	192.168.2.5	0xf910	No error (0)	ssum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.133070946 CEST	1.1.1.1	192.168.2.5	0xe6a0	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:02.135348082 CEST	1.1.1.1	192.168.2.5	0x2857	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.137325048 CEST	1.1.1.1	192.168.2.5	0x2228	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.215975046 CEST	1.1.1.1	192.168.2.5	0x33d4	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.215975046 CEST	1.1.1.1	192.168.2.5	0x33d4	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.215975046 CEST	1.1.1.1	192.168.2.5	0x33d4	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.215975046 CEST	1.1.1.1	192.168.2.5	0x33d4	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.216722965 CEST	1.1.1.1	192.168.2.5	0xb537	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.216722965 CEST	1.1.1.1	192.168.2.5	0xb537	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.221633911 CEST	1.1.1.1	192.168.2.5	0xf3c6	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.223866940 CEST	1.1.1.1	192.168.2.5	0x3006	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.224138975 CEST	1.1.1.1	192.168.2.5	0x2991	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		34.203.128.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		54.87.55.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		3.209.154.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		44.215.221.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		18.213.250.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		23.23.219.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.259140968 CEST	1.1.1.1	192.168.2.5	0xb98e	No error (0)	cs-server-s2s.yellowblue.io		54.205.61.221	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.717957020 CEST	1.1.1.1	192.168.2.5	0xe2ff	No error (0)	sync2.resetdigital.co		51.222.105.60	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.764374971 CEST	1.1.1.1	192.168.2.5	0xa869	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.764374971 CEST	1.1.1.1	192.168.2.5	0xa869	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.764374971 CEST	1.1.1.1	192.168.2.5	0xa869	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.764965057 CEST	1.1.1.1	192.168.2.5	0x13b3	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.764965057 CEST	1.1.1.1	192.168.2.5	0x13b3	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		54.161.39.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		18.210.48.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		34.228.96.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		3.223.50.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.234.240	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		3.226.40.12	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		34.192.151.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866465092 CEST	1.1.1.1	192.168.2.5	0xbe35	No error (0)	match-us-east-1-ecs.sharethrough.com		3.229.35.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:02.866769075 CEST	1.1.1.1	192.168.2.5	0xe50e	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:03.122428894 CEST	1.1.1.1	192.168.2.5	0x58d3	No error (0)	u.4dex.io		34.149.40.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:03.965260029 CEST	1.1.1.1	192.168.2.5	0x52e	No error (0)	inv-nets.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:04.006628990 CEST	1.1.1.1	192.168.2.5	0x37a1	No error (0)	cks.connatix.com	cks.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:04.006964922 CEST	1.1.1.1	192.168.2.5	0x9d3f	No error (0)	cks.connatix.com	cks.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-33across.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		52.40.39.43	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		34.208.91.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		35.161.161.42	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		54.212.0.234	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		44.224.88.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		54.187.88.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		52.25.53.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296458960 CEST	1.1.1.1	192.168.2.5	0x97a9	No error (0)	visitor-us-west-2.omnitagjs.com		52.43.175.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.296473980 CEST	1.1.1.1	192.168.2.5	0x77d5	No error (0)	visitor-33across.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.334862947 CEST	1.1.1.1	192.168.2.5	0x697e	No error (0)	cks.connatix.com	cks.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.340754986 CEST	1.1.1.1	192.168.2.5	0x2036	No error (0)	cks.connatix.com	cks.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.347759008 CEST	1.1.1.1	192.168.2.5	0xd8cf	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.348871946 CEST	1.1.1.1	192.168.2.5	0x54e6	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.348871946 CEST	1.1.1.1	192.168.2.5	0x54e6	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.348999977 CEST	1.1.1.1	192.168.2.5	0x9484	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.348999977 CEST	1.1.1.1	192.168.2.5	0x9484	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:06.348999977 CEST	1.1.1.1	192.168.2.5	0x9484	No error (0)	pool-use.zagreb.iponweb.net		35.211.233.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.367243052 CEST	1.1.1.1	192.168.2.5	0x836e	No error (0)	s.ad.smaato.net		18.67.76.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.367243052 CEST	1.1.1.1	192.168.2.5	0x836e	No error (0)	s.ad.smaato.net		18.67.76.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.367243052 CEST	1.1.1.1	192.168.2.5	0x836e	No error (0)	s.ad.smaato.net		18.67.76.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:06.367243052 CEST	1.1.1.1	192.168.2.5	0x836e	No error (0)	s.ad.smaato.net		18.67.76.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.216633081 CEST	1.1.1.1	192.168.2.5	0x5ba5	No error (0)	i.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.221685886 CEST	1.1.1.1	192.168.2.5	0xa81c	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.221685886 CEST	1.1.1.1	192.168.2.5	0xa81c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.221685886 CEST	1.1.1.1	192.168.2.5	0xa81c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.221685886 CEST	1.1.1.1	192.168.2.5	0xa81c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.221685886 CEST	1.1.1.1	192.168.2.5	0xa81c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222196102 CEST	1.1.1.1	192.168.2.5	0xee2f	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222778082 CEST	1.1.1.1	192.168.2.5	0xd17e	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.188.43	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.211.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.203.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.163.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.248.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.241	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.249.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.164.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.204.214	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.222855091 CEST	1.1.1.1	192.168.2.5	0x164c	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.251.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.381198883 CEST	1.1.1.1	192.168.2.5	0x7b25	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.381198883 CEST	1.1.1.1	192.168.2.5	0x7b25	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.381457090 CEST	1.1.1.1	192.168.2.5	0x49e0	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.382253885 CEST	1.1.1.1	192.168.2.5	0x74f8	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.382580042 CEST	1.1.1.1	192.168.2.5	0x95fd	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.729769945 CEST	1.1.1.1	192.168.2.5	0x66c9	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.729769945 CEST	1.1.1.1	192.168.2.5	0x66c9	No error (0)	openrtb-dc11.axonix.com		155.204.117.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.729769945 CEST	1.1.1.1	192.168.2.5	0x66c9	No error (0)	openrtb-dc11.axonix.com		155.204.117.12	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.730078936 CEST	1.1.1.1	192.168.2.5	0x7c1c	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.854302883 CEST	1.1.1.1	192.168.2.5	0x5f92	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.145.65.57	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.88.74.159	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.196.78.161	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		23.22.14.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.224.162.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		174.129.20.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.233.203.0	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855108023 CEST	1.1.1.1	192.168.2.5	0xb7e0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.83.187.163	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855552912 CEST	1.1.1.1	192.168.2.5	0x5612	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855552912 CEST	1.1.1.1	192.168.2.5	0x5612	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.855552912 CEST	1.1.1.1	192.168.2.5	0x5612	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:07.906150103 CEST	1.1.1.1	192.168.2.5	0xbe01	No error (0)	s0.2mdn.net		172.253.124.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:07.906150103 CEST	1.1.1.1	192.168.2.5	0xbe01	No error (0)	s0.2mdn.net		172.253.124.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	connatix-supply-partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.226.174.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.233.2.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.145.107.179	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.86.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.236.114.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.215.83.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006588936 CEST	1.1.1.1	192.168.2.5	0xe54a	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.006880045 CEST	1.1.1.1	192.168.2.5	0x3cd5	No error (0)	connatix-supply-partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.205885887 CEST	1.1.1.1	192.168.2.5	0xa6d3	No error (0)	c1.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206767082 CEST	1.1.1.1	192.168.2.5	0xce63	No error (0)	c2.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.206809998 CEST	1.1.1.1	192.168.2.5	0xbb4f	No error (0)	c3.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.207676888 CEST	1.1.1.1	192.168.2.5	0xc7c2	No error (0)	c4.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208204985 CEST	1.1.1.1	192.168.2.5	0xbbcf	No error (0)	c5.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208389997 CEST	1.1.1.1	192.168.2.5	0xa2a0	No error (0)	c0.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.208698034 CEST	1.1.1.1	192.168.2.5	0xd5e2	No error (0)	c6.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.93.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.92.37	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.89.127	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.88.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		57.129.22.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.89.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.92.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.95.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.95.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.93.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209462881 CEST	1.1.1.1	192.168.2.5	0x8242	No error (0)	c7.eu-3-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.209979057 CEST	1.1.1.1	192.168.2.5	0x95b9	No error (0)	c0.eu-4-id5-sync.com		51.75.95.152	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.210839987 CEST	1.1.1.1	192.168.2.5	0x8d4a	No error (0)	c1.eu-4-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.211678028 CEST	1.1.1.1	192.168.2.5	0x987f	No error (0)	c3.eu-4-id5-sync.com		51.75.92.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.211874962 CEST	1.1.1.1	192.168.2.5	0x481b	No error (0)	c2.eu-4-id5-sync.com		51.75.88.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.213829994 CEST	1.1.1.1	192.168.2.5	0x29f4	No error (0)	c4.eu-4-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.214211941 CEST	1.1.1.1	192.168.2.5	0x6a36	No error (0)	c5.eu-4-id5-sync.com		51.75.95.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.214536905 CEST	1.1.1.1	192.168.2.5	0xc4eb	No error (0)	c6.eu-4-id5-sync.com		57.129.23.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.215295076 CEST	1.1.1.1	192.168.2.5	0x471e	No error (0)	c7.eu-4-id5-sync.com		51.75.89.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332353115 CEST	1.1.1.1	192.168.2.5	0x3dff	No error (0)	st.pubmatic.com	ssptrackerv1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332353115 CEST	1.1.1.1	192.168.2.5	0x3dff	No error (0)	ssptrackerv1.pubmnet.com	ssptkr-va1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332353115 CEST	1.1.1.1	192.168.2.5	0x3dff	No error (0)	ssptkr-va1.pubmnet.com		8.28.7.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332670927 CEST	1.1.1.1	192.168.2.5	0x73b2	No error (0)	st.pubmatic.com	ssptrackerv1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332670927 CEST	1.1.1.1	192.168.2.5	0x73b2	No error (0)	ssptrackerv1.pubmnet.com	ssptkr-nje-paira.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332798004 CEST	1.1.1.1	192.168.2.5	0x26d5	No error (0)	s0.2mdn.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.332798004 CEST	1.1.1.1	192.168.2.5	0x26d5	No error (0)	s0.2mdn.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:08.387681007 CEST	1.1.1.1	192.168.2.5	0x5	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.387681007 CEST	1.1.1.1	192.168.2.5	0x5	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.387842894 CEST	1.1.1.1	192.168.2.5	0x8956	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.387842894 CEST	1.1.1.1	192.168.2.5	0x8956	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:08.387842894 CEST	1.1.1.1	192.168.2.5	0x8956	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.026537895 CEST	1.1.1.1	192.168.2.5	0xc01	No error (0)	ad.doubleclick.net		142.250.9.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.026537895 CEST	1.1.1.1	192.168.2.5	0xc01	No error (0)	ad.doubleclick.net		142.250.9.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.026559114 CEST	1.1.1.1	192.168.2.5	0x7282	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:13:09.129075050 CEST	1.1.1.1	192.168.2.5	0x723	No error (0)	ced-ns.sascdn.com	cdn-ns.cdn-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.129852057 CEST	1.1.1.1	192.168.2.5	0x638f	No error (0)	ced-ns.sascdn.com	cdn-ns.cdn-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.274271011 CEST	1.1.1.1	192.168.2.5	0xe20c	No error (0)	x.dlx.addthis.com	dlx.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.274744987 CEST	1.1.1.1	192.168.2.5	0xd40a	No error (0)	x.dlx.addthis.com	dlx.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.292469978 CEST	1.1.1.1	192.168.2.5	0x5c84	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.292481899 CEST	1.1.1.1	192.168.2.5	0x59aa	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.295757055 CEST	1.1.1.1	192.168.2.5	0x722	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.295757055 CEST	1.1.1.1	192.168.2.5	0x722	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.297169924 CEST	1.1.1.1	192.168.2.5	0x7298	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:09.424417973 CEST	1.1.1.1	192.168.2.5	0x7f39	No error (0)	sync.resetdigital.co		143.244.220.80	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.424417973 CEST	1.1.1.1	192.168.2.5	0x7f39	No error (0)	sync.resetdigital.co		159.89.252.170	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.424417973 CEST	1.1.1.1	192.168.2.5	0x7f39	No error (0)	sync.resetdigital.co		159.203.147.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.424417973 CEST	1.1.1.1	192.168.2.5	0x7f39	No error (0)	sync.resetdigital.co		138.197.63.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.424417973 CEST	1.1.1.1	192.168.2.5	0x7f39	No error (0)	sync.resetdigital.co		165.227.251.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.424417973 CEST	1.1.1.1	192.168.2.5	0x7f39	No error (0)	sync.resetdigital.co		143.244.222.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.518992901 CEST	1.1.1.1	192.168.2.5	0xcbc7	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.518992901 CEST	1.1.1.1	192.168.2.5	0xcbc7	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.518992901 CEST	1.1.1.1	192.168.2.5	0xcbc7	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.518992901 CEST	1.1.1.1	192.168.2.5	0xcbc7	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.519741058 CEST	1.1.1.1	192.168.2.5	0xe882	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.519741058 CEST	1.1.1.1	192.168.2.5	0xe882	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.519741058 CEST	1.1.1.1	192.168.2.5	0xe882	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.521739960 CEST	1.1.1.1	192.168.2.5	0xef9e	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.521739960 CEST	1.1.1.1	192.168.2.5	0xef9e	No error (0)	openrtb-dc11.axonix.com		155.204.117.12	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.521739960 CEST	1.1.1.1	192.168.2.5	0xef9e	No error (0)	openrtb-dc11.axonix.com		155.204.117.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.522703886 CEST	1.1.1.1	192.168.2.5	0x8076	No error (0)	openrtb-us-east-1.axonix.com	openrtb-dc11.axonix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.522715092 CEST	1.1.1.1	192.168.2.5	0x2c59	No error (0)	cs.emxdgt.com		34.235.210.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.522715092 CEST	1.1.1.1	192.168.2.5	0x2c59	No error (0)	cs.emxdgt.com		44.212.89.30	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.522715092 CEST	1.1.1.1	192.168.2.5	0x2c59	No error (0)	cs.emxdgt.com		3.210.56.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.637553930 CEST	1.1.1.1	192.168.2.5	0x7ac7	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.637553930 CEST	1.1.1.1	192.168.2.5	0x7ac7	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.234.6.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.637553930 CEST	1.1.1.1	192.168.2.5	0x7ac7	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.228.34.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.637553930 CEST	1.1.1.1	192.168.2.5	0x7ac7	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		23.23.184.234	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.637553930 CEST	1.1.1.1	192.168.2.5	0x7ac7	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		3.218.162.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.638470888 CEST	1.1.1.1	192.168.2.5	0xff91	No error (0)	xsync.iqzone.com		142.234.204.77	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.638839960 CEST	1.1.1.1	192.168.2.5	0xba6b	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.760006905 CEST	1.1.1.1	192.168.2.5	0x3073	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.761245966 CEST	1.1.1.1	192.168.2.5	0x81b7	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.877386093 CEST	1.1.1.1	192.168.2.5	0x81be	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.877386093 CEST	1.1.1.1	192.168.2.5	0x81be	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.877602100 CEST	1.1.1.1	192.168.2.5	0xc6f6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:13:09.882323027 CEST	1.1.1.1	192.168.2.5	0xb171	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.882323027 CEST	1.1.1.1	192.168.2.5	0xb171	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.882347107 CEST	1.1.1.1	192.168.2.5	0x9a98	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:09.949961901 CEST	1.1.1.1	192.168.2.5	0x35b8	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:09.950021029 CEST	1.1.1.1	192.168.2.5	0x8cdc	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.950021029 CEST	1.1.1.1	192.168.2.5	0x8cdc	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964303970 CEST	1.1.1.1	192.168.2.5	0xeb32	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		23.23.219.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		54.87.55.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		44.215.221.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		3.222.161.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		34.203.128.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		54.205.61.221	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		3.209.154.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:09.964586973 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	cs.digbearings.com		18.213.250.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.149643898 CEST	1.1.1.1	192.168.2.5	0xf35b	No error (0)	ck.connatix.com	ck.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:10.150242090 CEST	1.1.1.1	192.168.2.5	0xd755	No error (0)	ck.connatix.com	ck.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:10.274288893 CEST	1.1.1.1	192.168.2.5	0x84bc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.974524975 CEST	1.1.1.1	192.168.2.5	0x87c4	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.974524975 CEST	1.1.1.1	192.168.2.5	0x87c4	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.976164103 CEST	1.1.1.1	192.168.2.5	0x9c0a	No error (0)	cs.media.net		23.207.52.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:10.976342916 CEST	1.1.1.1	192.168.2.5	0x1be7	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.265567064 CEST	1.1.1.1	192.168.2.5	0x4770	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.265567064 CEST	1.1.1.1	192.168.2.5	0x4770	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.265567064 CEST	1.1.1.1	192.168.2.5	0x4770	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.265567064 CEST	1.1.1.1	192.168.2.5	0x4770	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.265567064 CEST	1.1.1.1	192.168.2.5	0x4770	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.265567064 CEST	1.1.1.1	192.168.2.5	0x4770	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.699786901 CEST	1.1.1.1	192.168.2.5	0x9208	No error (0)	cs.mobfox.com		8.2.110.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.700886011 CEST	1.1.1.1	192.168.2.5	0xaa28	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.700886011 CEST	1.1.1.1	192.168.2.5	0xaa28	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:11.700886011 CEST	1.1.1.1	192.168.2.5	0xaa28	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.056035995 CEST	1.1.1.1	192.168.2.5	0x7e4b	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.056315899 CEST	1.1.1.1	192.168.2.5	0xf277	Name error (3)	cs.lkqd.net	none	none	65	IN (0x0001)	false
Apr 19, 2024 15:13:12.163482904 CEST	1.1.1.1	192.168.2.5	0x377	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.385035038 CEST	1.1.1.1	192.168.2.5	0xc26	No error (0)	sync.resetdigital.co		143.244.220.80	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.385035038 CEST	1.1.1.1	192.168.2.5	0xc26	No error (0)	sync.resetdigital.co		138.197.63.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.385035038 CEST	1.1.1.1	192.168.2.5	0xc26	No error (0)	sync.resetdigital.co		159.89.252.170	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.385035038 CEST	1.1.1.1	192.168.2.5	0xc26	No error (0)	sync.resetdigital.co		143.244.222.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.385035038 CEST	1.1.1.1	192.168.2.5	0xc26	No error (0)	sync.resetdigital.co		165.227.251.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:12.385035038 CEST	1.1.1.1	192.168.2.5	0xc26	No error (0)	sync.resetdigital.co		159.203.147.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.023525953 CEST	1.1.1.1	192.168.2.5	0xbd9d	No error (0)	syndication.twitter.com		104.244.42.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.024147034 CEST	1.1.1.1	192.168.2.5	0x2791	No error (0)	googleads.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.024147034 CEST	1.1.1.1	192.168.2.5	0x2791	No error (0)	googleads.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.024147034 CEST	1.1.1.1	192.168.2.5	0x2791	No error (0)	googleads.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.024147034 CEST	1.1.1.1	192.168.2.5	0x2791	No error (0)	googleads.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.024172068 CEST	1.1.1.1	192.168.2.5	0x5ee	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:13:13.138339996 CEST	1.1.1.1	192.168.2.5	0x1c92	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:13.138371944 CEST	1.1.1.1	192.168.2.5	0x43c4	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:13.138371944 CEST	1.1.1.1	192.168.2.5	0x43c4	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.154525042 CEST	1.1.1.1	192.168.2.5	0xdd32	No error (0)	api-2-0.spot.im		54.230.253.33	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.154525042 CEST	1.1.1.1	192.168.2.5	0xdd32	No error (0)	api-2-0.spot.im		54.230.253.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.154525042 CEST	1.1.1.1	192.168.2.5	0xdd32	No error (0)	api-2-0.spot.im		54.230.253.75	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.154525042 CEST	1.1.1.1	192.168.2.5	0xdd32	No error (0)	api-2-0.spot.im		54.230.253.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.559478998 CEST	1.1.1.1	192.168.2.5	0x2332	No error (0)	ssp-sync.criteo.com	ssp-sync.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:13.559501886 CEST	1.1.1.1	192.168.2.5	0xc8f3	No error (0)	ssp-sync.criteo.com	ssp-sync.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:13.559501886 CEST	1.1.1.1	192.168.2.5	0xc8f3	No error (0)	ssp-sync.us5.vip.prod.criteo.com		74.119.117.12	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.758934021 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	public.servenobid.com		13.32.230.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.758934021 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	public.servenobid.com		13.32.230.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.758934021 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	public.servenobid.com		13.32.230.110	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:13.758934021 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	public.servenobid.com		13.32.230.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:14.155937910 CEST	1.1.1.1	192.168.2.5	0xb4cc	No error (0)	e.cdnwidget.com		34.102.193.48	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:15.258383989 CEST	1.1.1.1	192.168.2.5	0x869b	No error (0)	usr.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:15.258635044 CEST	1.1.1.1	192.168.2.5	0x6472	No error (0)	usr.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:15.258635044 CEST	1.1.1.1	192.168.2.5	0x6472	No error (0)	d1wsawskf2klzj.cloudfront.net		3.162.112.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:15.258635044 CEST	1.1.1.1	192.168.2.5	0x6472	No error (0)	d1wsawskf2klzj.cloudfront.net		3.162.112.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:15.258635044 CEST	1.1.1.1	192.168.2.5	0x6472	No error (0)	d1wsawskf2klzj.cloudfront.net		3.162.112.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:15.258635044 CEST	1.1.1.1	192.168.2.5	0x6472	No error (0)	d1wsawskf2klzj.cloudfront.net		3.162.112.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.839370012 CEST	1.1.1.1	192.168.2.5	0x840d	No error (0)	c.4dex.io		35.241.34.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.840409994 CEST	1.1.1.1	192.168.2.5	0xdcb1	No error (0)	beacon-sjc2.rubiconproject.com	beacon-sjc2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:17.841603994 CEST	1.1.1.1	192.168.2.5	0x5a18	No error (0)	beacon-sjc2.rubiconproject.com	beacon-sjc2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.171.243.167	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.207.157.36	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		18.211.0.232	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.204.102.159	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.193.151.231	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.232.70.209	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.899785042 CEST	1.1.1.1	192.168.2.5	0xc888	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.227.143.142	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:17.900091887 CEST	1.1.1.1	192.168.2.5	0x62d7	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:17.900091887 CEST	1.1.1.1	192.168.2.5	0x62d7	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.072415113 CEST	1.1.1.1	192.168.2.5	0x2519	No error (0)	cat.us5.us.criteo.com	cat.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.072479963 CEST	1.1.1.1	192.168.2.5	0xef64	No error (0)	cat.us5.us.criteo.com	cat.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.072479963 CEST	1.1.1.1	192.168.2.5	0xef64	No error (0)	cat.us5.vip.prod.criteo.com		74.119.117.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208434105 CEST	1.1.1.1	192.168.2.5	0xbd1d	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208434105 CEST	1.1.1.1	192.168.2.5	0xbd1d	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208674908 CEST	1.1.1.1	192.168.2.5	0xfa4f	No error (0)	widget.us5.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208674908 CEST	1.1.1.1	192.168.2.5	0xfa4f	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208777905 CEST	1.1.1.1	192.168.2.5	0xb1e9	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208777905 CEST	1.1.1.1	192.168.2.5	0xb1e9	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208777905 CEST	1.1.1.1	192.168.2.5	0xb1e9	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.244.202.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208777905 CEST	1.1.1.1	192.168.2.5	0xb1e9	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.244.202.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208777905 CEST	1.1.1.1	192.168.2.5	0xb1e9	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.244.202.3	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.208777905 CEST	1.1.1.1	192.168.2.5	0xb1e9	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.244.202.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.209789991 CEST	1.1.1.1	192.168.2.5	0x179	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.209789991 CEST	1.1.1.1	192.168.2.5	0x179	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:18.210222960 CEST	1.1.1.1	192.168.2.5	0x4d7d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:18.210267067 CEST	1.1.1.1	192.168.2.5	0x6486	No error (0)	widget.us5.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.387912035 CEST	1.1.1.1	192.168.2.5	0x912d	No error (0)	aax-us-east.amazon-adsystem.com		209.54.181.42	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.400741100 CEST	1.1.1.1	192.168.2.5	0x114a	No error (0)	ad-cdn.technoratimedia.com	cs1561.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.400741100 CEST	1.1.1.1	192.168.2.5	0x114a	No error (0)	cs1561.wpc.edgecastcdn.net		152.199.5.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.400985956 CEST	1.1.1.1	192.168.2.5	0x6c2c	No error (0)	ad-cdn.technoratimedia.com	cs1561.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.403110981 CEST	1.1.1.1	192.168.2.5	0xa871	No error (0)	synacor-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.403187037 CEST	1.1.1.1	192.168.2.5	0x79d6	No error (0)	synacor-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		44.219.73.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		52.205.88.33	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		3.81.155.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		3.91.119.142	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		184.73.252.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		3.227.178.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		44.215.188.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.487869978 CEST	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	idaas-ext.cph.liveintent.com		54.82.233.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.488136053 CEST	1.1.1.1	192.168.2.5	0x2656	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.994931936 CEST	1.1.1.1	192.168.2.5	0x1b1b	No error (0)	partner.mediawallahscript.com	pcs3prod18.us-east-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.994931936 CEST	1.1.1.1	192.168.2.5	0x1b1b	No error (0)	pcs3prod18.us-east-1.elasticbeanstalk.com		18.213.217.220	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.994931936 CEST	1.1.1.1	192.168.2.5	0x1b1b	No error (0)	pcs3prod18.us-east-1.elasticbeanstalk.com		34.230.161.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.994931936 CEST	1.1.1.1	192.168.2.5	0x1b1b	No error (0)	pcs3prod18.us-east-1.elasticbeanstalk.com		23.20.181.89	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.994931936 CEST	1.1.1.1	192.168.2.5	0x1b1b	No error (0)	pcs3prod18.us-east-1.elasticbeanstalk.com		34.195.116.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.994931936 CEST	1.1.1.1	192.168.2.5	0x1b1b	No error (0)	pcs3prod18.us-east-1.elasticbeanstalk.com		3.217.69.21	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.995402098 CEST	1.1.1.1	192.168.2.5	0x21e7	No error (0)	partner.mediawallahscript.com	pcs3prod18.us-east-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.996750116 CEST	1.1.1.1	192.168.2.5	0xceb1	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:19.997096062 CEST	1.1.1.1	192.168.2.5	0x74a8	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.997669935 CEST	1.1.1.1	192.168.2.5	0xb147	No error (0)	sync-t1.taboola.com	us-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.997909069 CEST	1.1.1.1	192.168.2.5	0x4355	No error (0)	sync-t1.taboola.com	us-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:19.997909069 CEST	1.1.1.1	192.168.2.5	0x4355	No error (0)	us-vip001.taboola.com		141.226.224.48	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:20.101252079 CEST	1.1.1.1	192.168.2.5	0x6cae	No error (0)	dis.eu.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:20.101252079 CEST	1.1.1.1	192.168.2.5	0x6cae	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:20.101461887 CEST	1.1.1.1	192.168.2.5	0xcbd9	No error (0)	dis.eu.criteo.com	widget.fr3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:20.466886997 CEST	1.1.1.1	192.168.2.5	0xdaf0	No error (0)	d.adroll.com	adserver-vpc-alb-2-1898430250.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:20.466886997 CEST	1.1.1.1	192.168.2.5	0xdaf0	No error (0)	adserver-vpc-alb-2-1898430250.us-east-1.elb.amazonaws.com		34.233.220.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:20.466886997 CEST	1.1.1.1	192.168.2.5	0xdaf0	No error (0)	adserver-vpc-alb-2-1898430250.us-east-1.elb.amazonaws.com		44.214.68.253	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:20.467489958 CEST	1.1.1.1	192.168.2.5	0x2780	No error (0)	d.adroll.com	adserver-vpc-alb-1-2048135467.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:20.473845959 CEST	1.1.1.1	192.168.2.5	0x37fa	No error (0)	dmp.brand-display.com		34.160.19.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.463094950 CEST	1.1.1.1	192.168.2.5	0xc660	No error (0)	cs-rtb.minutemedia-prebid.com	dheoaz9svaqd1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.463094950 CEST	1.1.1.1	192.168.2.5	0xc660	No error (0)	dheoaz9svaqd1.cloudfront.net		18.244.202.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.463094950 CEST	1.1.1.1	192.168.2.5	0xc660	No error (0)	dheoaz9svaqd1.cloudfront.net		18.244.202.79	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.463094950 CEST	1.1.1.1	192.168.2.5	0xc660	No error (0)	dheoaz9svaqd1.cloudfront.net		18.244.202.125	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.463094950 CEST	1.1.1.1	192.168.2.5	0xc660	No error (0)	dheoaz9svaqd1.cloudfront.net		18.244.202.120	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.463166952 CEST	1.1.1.1	192.168.2.5	0xac93	No error (0)	cs-rtb.minutemedia-prebid.com	dheoaz9svaqd1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.521404028 CEST	1.1.1.1	192.168.2.5	0x710e	No error (0)	criteo-sync.teads.tv	criteo-sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.521706104 CEST	1.1.1.1	192.168.2.5	0xa001	No error (0)	criteo-sync.teads.tv	criteo-sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805501938 CEST	1.1.1.1	192.168.2.5	0xf44b	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805819988 CEST	1.1.1.1	192.168.2.5	0xd4a8	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.805819988 CEST	1.1.1.1	192.168.2.5	0xd4a8	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806713104 CEST	1.1.1.1	192.168.2.5	0x7cb4	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806912899 CEST	1.1.1.1	192.168.2.5	0x7b66	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806912899 CEST	1.1.1.1	192.168.2.5	0x7b66	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806912899 CEST	1.1.1.1	192.168.2.5	0x7b66	No error (0)	tp.c47710ee9-frontier.media-amazon.com	a.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.806912899 CEST	1.1.1.1	192.168.2.5	0x7b66	No error (0)	a.media-amazon.com	a.media-amazon.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:21.807106018 CEST	1.1.1.1	192.168.2.5	0x79a0	No error (0)	www.googletagservices.com		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.807106018 CEST	1.1.1.1	192.168.2.5	0x79a0	No error (0)	www.googletagservices.com		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.807106018 CEST	1.1.1.1	192.168.2.5	0x79a0	No error (0)	www.googletagservices.com		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:21.807106018 CEST	1.1.1.1	192.168.2.5	0x79a0	No error (0)	www.googletagservices.com		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:22.042171955 CEST	1.1.1.1	192.168.2.5	0xef2c	No error (0)	hb.yahoo.net		104.76.210.74	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:22.042171955 CEST	1.1.1.1	192.168.2.5	0xef2c	No error (0)	hb.yahoo.net		104.76.210.73	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:22.042171955 CEST	1.1.1.1	192.168.2.5	0xef2c	No error (0)	hb.yahoo.net		104.76.210.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:22.042171955 CEST	1.1.1.1	192.168.2.5	0xef2c	No error (0)	hb.yahoo.net		104.76.210.77	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:22.042171955 CEST	1.1.1.1	192.168.2.5	0xef2c	No error (0)	hb.yahoo.net		104.76.210.89	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.381056070 CEST	1.1.1.1	192.168.2.5	0x9467	No error (0)	ts.amazon-adsystem.com	d21t3ooy68jlh9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.381056070 CEST	1.1.1.1	192.168.2.5	0x9467	No error (0)	d21t3ooy68jlh9.cloudfront.net		3.163.115.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.381056070 CEST	1.1.1.1	192.168.2.5	0x9467	No error (0)	d21t3ooy68jlh9.cloudfront.net		3.163.115.74	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.381056070 CEST	1.1.1.1	192.168.2.5	0x9467	No error (0)	d21t3ooy68jlh9.cloudfront.net		3.163.115.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.381056070 CEST	1.1.1.1	192.168.2.5	0x9467	No error (0)	d21t3ooy68jlh9.cloudfront.net		3.163.115.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.389311075 CEST	1.1.1.1	192.168.2.5	0xe132	No error (0)	ts.amazon-adsystem.com	d21t3ooy68jlh9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.400892973 CEST	1.1.1.1	192.168.2.5	0x804f	No error (0)	um4.eqads.com		44.217.123.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.400892973 CEST	1.1.1.1	192.168.2.5	0x804f	No error (0)	um4.eqads.com		34.195.241.56	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.402662992 CEST	1.1.1.1	192.168.2.5	0xba98	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.403681040 CEST	1.1.1.1	192.168.2.5	0x49fc	Name error (3)	cs.lkqd.net	none	none	65	IN (0x0001)	false
Apr 19, 2024 15:13:25.711771965 CEST	1.1.1.1	192.168.2.5	0x6d10	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.714855909 CEST	1.1.1.1	192.168.2.5	0x8610	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.714855909 CEST	1.1.1.1	192.168.2.5	0x8610	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.716640949 CEST	1.1.1.1	192.168.2.5	0xa8e9	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.716640949 CEST	1.1.1.1	192.168.2.5	0xa8e9	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.728506088 CEST	1.1.1.1	192.168.2.5	0x4880	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745037079 CEST	1.1.1.1	192.168.2.5	0x1d8b	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		54.161.140.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		54.205.244.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		54.165.171.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		52.73.164.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		52.87.125.16	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		52.4.157.85	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		52.73.223.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.745158911 CEST	1.1.1.1	192.168.2.5	0x8774	No error (0)	cdn.w55c.net		54.227.148.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.810895920 CEST	1.1.1.1	192.168.2.5	0x2e7e	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:25.810895920 CEST	1.1.1.1	192.168.2.5	0x2e7e	No error (0)	d1ykf07e75w7ss.cloudfront.net		54.230.252.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:25.811199903 CEST	1.1.1.1	192.168.2.5	0xd8a3	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:26.120620966 CEST	1.1.1.1	192.168.2.5	0xf9ec	No error (0)	s.update.rubiconproject.com	s.kazfv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.update.rubiconproject.com	s.kazfv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		44.195.41.223	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		54.81.248.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		3.228.19.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		44.210.127.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		54.158.30.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		54.164.35.88	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		3.231.161.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		54.145.163.151	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		44.200.61.223	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121200085 CEST	1.1.1.1	192.168.2.5	0x1280	No error (0)	s.kazfv.com		54.165.227.98	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121489048 CEST	1.1.1.1	192.168.2.5	0xe4fc	No error (0)	beacon-nf.rubiconproject.com	beacon-nf.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:26.121531963 CEST	1.1.1.1	192.168.2.5	0x76ef	No error (0)	beacon-nf.rubiconproject.com	beacon-nf.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		3.212.148.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		35.168.226.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		54.157.215.226	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		3.230.213.47	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		18.214.114.197	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		54.211.198.115	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		3.209.196.109	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.122663975 CEST	1.1.1.1	192.168.2.5	0x2599	No error (0)	protected-by.clarium.io		34.231.65.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.124206066 CEST	1.1.1.1	192.168.2.5	0x4ea3	No error (0)	exchange.mediavine.com		18.214.197.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.124206066 CEST	1.1.1.1	192.168.2.5	0x4ea3	No error (0)	exchange.mediavine.com		3.211.252.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.124206066 CEST	1.1.1.1	192.168.2.5	0x4ea3	No error (0)	exchange.mediavine.com		34.205.0.220	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.124206066 CEST	1.1.1.1	192.168.2.5	0x4ea3	No error (0)	exchange.mediavine.com		54.208.143.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.124206066 CEST	1.1.1.1	192.168.2.5	0x4ea3	No error (0)	exchange.mediavine.com		3.89.95.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:26.124206066 CEST	1.1.1.1	192.168.2.5	0x4ea3	No error (0)	exchange.mediavine.com		3.223.118.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.371961117 CEST	1.1.1.1	192.168.2.5	0xe14a	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.371961117 CEST	1.1.1.1	192.168.2.5	0xe14a	No error (0)	adserver.technoratimedia.com		150.136.25.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.372060061 CEST	1.1.1.1	192.168.2.5	0x5467	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.374222040 CEST	1.1.1.1	192.168.2.5	0x1015	No error (0)	b.admedia.com		204.44.79.1	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.227.149.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		52.0.165.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		174.129.202.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.82.86.224	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.217.59.243	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.153.92.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.170.111.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387610912 CEST	1.1.1.1	192.168.2.5	0xcfaa	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		44.195.5.162	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387648106 CEST	1.1.1.1	192.168.2.5	0x3885	No error (0)	vid.vidoomy.com	1651846316.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.387681007 CEST	1.1.1.1	192.168.2.5	0xa75e	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.388559103 CEST	1.1.1.1	192.168.2.5	0xc9c7	No error (0)	vid.vidoomy.com	1651846316.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.388559103 CEST	1.1.1.1	192.168.2.5	0xc9c7	No error (0)	1651846316.rsc.cdn77.org		89.187.171.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.388606071 CEST	1.1.1.1	192.168.2.5	0xfbef	No error (0)	ads.us.e-planning.net		172.98.26.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		44.239.80.115	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		54.212.0.234	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		52.25.53.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		52.43.175.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		54.187.88.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		35.161.161.42	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		44.224.88.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.551635981 CEST	1.1.1.1	192.168.2.5	0x2737	No error (0)	visitor-us-west-2.omnitagjs.com		52.42.117.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:28.569668055 CEST	1.1.1.1	192.168.2.5	0x85f8	No error (0)	cw.addthis.com	m.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.569668055 CEST	1.1.1.1	192.168.2.5	0x85f8	No error (0)	m.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.569668055 CEST	1.1.1.1	192.168.2.5	0x85f8	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.570132017 CEST	1.1.1.1	192.168.2.5	0x1a4d	No error (0)	cw.addthis.com	m.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.570132017 CEST	1.1.1.1	192.168.2.5	0x1a4d	No error (0)	m.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.570132017 CEST	1.1.1.1	192.168.2.5	0x1a4d	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.655935049 CEST	1.1.1.1	192.168.2.5	0xb59e	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:28.656502962 CEST	1.1.1.1	192.168.2.5	0xd0a3	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.087127924 CEST	1.1.1.1	192.168.2.5	0x2c9b	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.087127924 CEST	1.1.1.1	192.168.2.5	0x2c9b	No error (0)	alldcs.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.087127924 CEST	1.1.1.1	192.168.2.5	0x2c9b	No error (0)	chidc2.outbrain.org		64.74.236.223	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088381052 CEST	1.1.1.1	192.168.2.5	0x291	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088381052 CEST	1.1.1.1	192.168.2.5	0x291	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088381052 CEST	1.1.1.1	192.168.2.5	0x291	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088726997 CEST	1.1.1.1	192.168.2.5	0xbc22	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088726997 CEST	1.1.1.1	192.168.2.5	0xbc22	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088869095 CEST	1.1.1.1	192.168.2.5	0x2e2e	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.088869095 CEST	1.1.1.1	192.168.2.5	0x2e2e	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:29.097978115 CEST	1.1.1.1	192.168.2.5	0xa64f	No error (0)	trends.revcontent.com		54.85.17.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:29.097978115 CEST	1.1.1.1	192.168.2.5	0xa64f	No error (0)	trends.revcontent.com		54.224.162.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:29.097978115 CEST	1.1.1.1	192.168.2.5	0xa64f	No error (0)	trends.revcontent.com		44.196.64.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.197247028 CEST	1.1.1.1	192.168.2.5	0xb4cc	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.197247028 CEST	1.1.1.1	192.168.2.5	0xb4cc	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.197390079 CEST	1.1.1.1	192.168.2.5	0x8958	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:13:32.198458910 CEST	1.1.1.1	192.168.2.5	0x265f	No error (0)	ps.eyeota.net		18.214.54.215	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.227716923 CEST	1.1.1.1	192.168.2.5	0x9cc8	No error (0)	map.go.affec.tv		18.208.103.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.227716923 CEST	1.1.1.1	192.168.2.5	0x9cc8	No error (0)	map.go.affec.tv		52.0.111.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.229582071 CEST	1.1.1.1	192.168.2.5	0xc9c2	No error (0)	live.rezync.com		3.161.136.27	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.229582071 CEST	1.1.1.1	192.168.2.5	0xc9c2	No error (0)	live.rezync.com		3.161.136.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.229582071 CEST	1.1.1.1	192.168.2.5	0xc9c2	No error (0)	live.rezync.com		3.161.136.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.229582071 CEST	1.1.1.1	192.168.2.5	0xc9c2	No error (0)	live.rezync.com		3.161.136.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.231189013 CEST	1.1.1.1	192.168.2.5	0x3499	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.231189013 CEST	1.1.1.1	192.168.2.5	0x3499	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.231189013 CEST	1.1.1.1	192.168.2.5	0x3499	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.231189013 CEST	1.1.1.1	192.168.2.5	0x3499	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.231189013 CEST	1.1.1.1	192.168.2.5	0x3499	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.231431007 CEST	1.1.1.1	192.168.2.5	0xe595	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.233045101 CEST	1.1.1.1	192.168.2.5	0x8f1d	No error (0)	dp1.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.233045101 CEST	1.1.1.1	192.168.2.5	0x8f1d	No error (0)	dp1.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.247003078 CEST	1.1.1.1	192.168.2.5	0x80d9	No error (0)	contextual-analytics.wunderkind.co	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.247003078 CEST	1.1.1.1	192.168.2.5	0x80d9	No error (0)	nginx-ingress.wunderkind.co		34.111.8.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.247699976 CEST	1.1.1.1	192.168.2.5	0x3f3a	No error (0)	contextual-analytics.wunderkind.co	nginx-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.677280903 CEST	1.1.1.1	192.168.2.5	0x4793	No error (0)	img.connatix.com	img.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.677299976 CEST	1.1.1.1	192.168.2.5	0x78b5	No error (0)	img.connatix.com	img.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.680283070 CEST	1.1.1.1	192.168.2.5	0xd7e0	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.682535887 CEST	1.1.1.1	192.168.2.5	0x544c	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:32.683027983 CEST	1.1.1.1	192.168.2.5	0xeeb9	Name error (3)	beacon.krxd.net	none	none	65	IN (0x0001)	false
Apr 19, 2024 15:13:32.709738016 CEST	1.1.1.1	192.168.2.5	0xab28	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.709754944 CEST	1.1.1.1	192.168.2.5	0x6687	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:32.877974033 CEST	1.1.1.1	192.168.2.5	0xa45c	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:34.096920967 CEST	1.1.1.1	192.168.2.5	0x8821	No error (0)	eua.instiengage.com	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:34.097234011 CEST	1.1.1.1	192.168.2.5	0xd2f4	No error (0)	eua.instiengage.com	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:34.097234011 CEST	1.1.1.1	192.168.2.5	0xd2f4	No error (0)	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		34.235.204.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:34.097234011 CEST	1.1.1.1	192.168.2.5	0xd2f4	No error (0)	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		52.20.181.233	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:34.097234011 CEST	1.1.1.1	192.168.2.5	0xd2f4	No error (0)	k8s-default-instieng-147d4ccf47-751602047.us-east-1.elb.amazonaws.com		54.165.102.249	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.341438055 CEST	1.1.1.1	192.168.2.5	0x750d	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.341438055 CEST	1.1.1.1	192.168.2.5	0x750d	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.341730118 CEST	1.1.1.1	192.168.2.5	0x643	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.386596918 CEST	1.1.1.1	192.168.2.5	0xc94a	No error (0)	d37unsldgykj8z.cloudfront.net		18.67.79.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.386596918 CEST	1.1.1.1	192.168.2.5	0xc94a	No error (0)	d37unsldgykj8z.cloudfront.net		18.67.79.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.386596918 CEST	1.1.1.1	192.168.2.5	0xc94a	No error (0)	d37unsldgykj8z.cloudfront.net		18.67.79.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.386596918 CEST	1.1.1.1	192.168.2.5	0xc94a	No error (0)	d37unsldgykj8z.cloudfront.net		18.67.79.183	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.387217045 CEST	1.1.1.1	192.168.2.5	0x788	No error (0)	s2.paa-reporting-advertising.amazon		18.155.1.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.387217045 CEST	1.1.1.1	192.168.2.5	0x788	No error (0)	s2.paa-reporting-advertising.amazon		18.155.1.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.387217045 CEST	1.1.1.1	192.168.2.5	0x788	No error (0)	s2.paa-reporting-advertising.amazon		18.155.1.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.387217045 CEST	1.1.1.1	192.168.2.5	0x788	No error (0)	s2.paa-reporting-advertising.amazon		18.155.1.123	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.524260998 CEST	1.1.1.1	192.168.2.5	0xd1c2	No error (0)	silo40.p7cloud.net	du8ztun1tankm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.524277925 CEST	1.1.1.1	192.168.2.5	0xa7c6	No error (0)	silo40.p7cloud.net	du8ztun1tankm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.524277925 CEST	1.1.1.1	192.168.2.5	0xa7c6	No error (0)	du8ztun1tankm.cloudfront.net		18.165.83.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.524277925 CEST	1.1.1.1	192.168.2.5	0xa7c6	No error (0)	du8ztun1tankm.cloudfront.net		18.165.83.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.524277925 CEST	1.1.1.1	192.168.2.5	0xa7c6	No error (0)	du8ztun1tankm.cloudfront.net		18.165.83.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.524277925 CEST	1.1.1.1	192.168.2.5	0xa7c6	No error (0)	du8ztun1tankm.cloudfront.net		18.165.83.3	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.597681999 CEST	1.1.1.1	192.168.2.5	0xd14e	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.597681999 CEST	1.1.1.1	192.168.2.5	0xd14e	No error (0)	d10jk3zb4x05up.cloudfront.net		3.163.115.6	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.597681999 CEST	1.1.1.1	192.168.2.5	0xd14e	No error (0)	d10jk3zb4x05up.cloudfront.net		3.163.115.63	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.597681999 CEST	1.1.1.1	192.168.2.5	0xd14e	No error (0)	d10jk3zb4x05up.cloudfront.net		3.163.115.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.597681999 CEST	1.1.1.1	192.168.2.5	0xd14e	No error (0)	d10jk3zb4x05up.cloudfront.net		3.163.115.45	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.598937988 CEST	1.1.1.1	192.168.2.5	0x1421	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.759033918 CEST	1.1.1.1	192.168.2.5	0xb0d5	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.759033918 CEST	1.1.1.1	192.168.2.5	0xb0d5	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.759033918 CEST	1.1.1.1	192.168.2.5	0xb0d5	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.759033918 CEST	1.1.1.1	192.168.2.5	0xb0d5	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.165.109.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.760128975 CEST	1.1.1.1	192.168.2.5	0x3fe5	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.760128975 CEST	1.1.1.1	192.168.2.5	0x3fe5	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.760128975 CEST	1.1.1.1	192.168.2.5	0x3fe5	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.761112928 CEST	1.1.1.1	192.168.2.5	0xb920	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:35.761112928 CEST	1.1.1.1	192.168.2.5	0xb920	No error (0)	idaas6.cph.liveintent.com		34.236.82.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.761112928 CEST	1.1.1.1	192.168.2.5	0xb920	No error (0)	idaas6.cph.liveintent.com		54.167.75.160	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.761112928 CEST	1.1.1.1	192.168.2.5	0xb920	No error (0)	idaas6.cph.liveintent.com		3.215.218.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:35.761360884 CEST	1.1.1.1	192.168.2.5	0x13f0	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:36.086622000 CEST	1.1.1.1	192.168.2.5	0x1c38	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:36.086622000 CEST	1.1.1.1	192.168.2.5	0x1c38	No error (0)	securepubads46.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:36.086622000 CEST	1.1.1.1	192.168.2.5	0x1c38	No error (0)	securepubads46.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:36.086622000 CEST	1.1.1.1	192.168.2.5	0x1c38	No error (0)	securepubads46.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:36.086622000 CEST	1.1.1.1	192.168.2.5	0x1c38	No error (0)	securepubads46.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:36.087171078 CEST	1.1.1.1	192.168.2.5	0xb0f0	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:36.633512020 CEST	1.1.1.1	192.168.2.5	0x6944	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:37.136984110 CEST	1.1.1.1	192.168.2.5	0x15b1	No error (0)	targeting.unrulymedia.com	tag.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:37.137001038 CEST	1.1.1.1	192.168.2.5	0xab65	No error (0)	targeting.unrulymedia.com	tag.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:37.137001038 CEST	1.1.1.1	192.168.2.5	0xab65	No error (0)	tag.1rx.io		69.194.240.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:37.150104046 CEST	1.1.1.1	192.168.2.5	0xcfe6	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:37.150399923 CEST	1.1.1.1	192.168.2.5	0x8c26	No error (0)	web.hb.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:37.150769949 CEST	1.1.1.1	192.168.2.5	0x5d73	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:38.585186958 CEST	1.1.1.1	192.168.2.5	0x9d31	No error (0)	t.pubmatic.com	tv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:38.585186958 CEST	1.1.1.1	192.168.2.5	0x9d31	No error (0)	tv2.pubmnet.com	t-va1c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:38.585186958 CEST	1.1.1.1	192.168.2.5	0x9d31	No error (0)	t-va1c.pubmnet.com		8.28.7.92	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:38.585239887 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	t.pubmatic.com	tv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:38.585239887 CEST	1.1.1.1	192.168.2.5	0xff16	No error (0)	tv2.pubmnet.com	t-va1c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:39.348093987 CEST	1.1.1.1	192.168.2.5	0x3c6e	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:39.349714041 CEST	1.1.1.1	192.168.2.5	0xe0d1	No error (0)	www.justjared.com	www.justjared.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:39.360816956 CEST	1.1.1.1	192.168.2.5	0xfd16	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:39.360816956 CEST	1.1.1.1	192.168.2.5	0xfd16	No error (0)	btlr-us-east-1.sharethrough.com		3.232.158.174	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:39.361371040 CEST	1.1.1.1	192.168.2.5	0xf56	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.159538984 CEST	1.1.1.1	192.168.2.5	0x1b12	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.159859896 CEST	1.1.1.1	192.168.2.5	0x64c3	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.169562101 CEST	1.1.1.1	192.168.2.5	0x86db	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.169586897 CEST	1.1.1.1	192.168.2.5	0x4328	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.710897923 CEST	1.1.1.1	192.168.2.5	0xcf37	No error (0)	ssp.wknd.ai	istio-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.710897923 CEST	1.1.1.1	192.168.2.5	0xcf37	No error (0)	istio-ingress.wunderkind.co		34.117.4.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.711329937 CEST	1.1.1.1	192.168.2.5	0xc1b0	No error (0)	ssp.wknd.ai	istio-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.752175093 CEST	1.1.1.1	192.168.2.5	0x68fd	No error (0)	as-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.752175093 CEST	1.1.1.1	192.168.2.5	0x68fd	No error (0)	as-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.752510071 CEST	1.1.1.1	192.168.2.5	0x2c3b	No error (0)	as-sec.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:43.755110025 CEST	1.1.1.1	192.168.2.5	0x57e0	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.919550896 CEST	1.1.1.1	192.168.2.5	0xa93e	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923079967 CEST	1.1.1.1	192.168.2.5	0xfc20	No error (0)	ms-cookie-sync.presage.io	ms-cookie-sync.prod.cloud.ogury.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.presage.io	ms-cookie-sync.prod.cloud.ogury.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.208.163.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.208.227.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.174.186.226	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.197.189.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.196.83.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.205.197.135	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.164.246.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.923966885 CEST	1.1.1.1	192.168.2.5	0xf720	No error (0)	ms-cookie-sync.prod.cloud.ogury.io		54.172.183.176	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:43.969402075 CEST	1.1.1.1	192.168.2.5	0x976d	No error (0)	amazon-tam-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.088870049 CEST	1.1.1.1	192.168.2.5	0x1f03	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.088870049 CEST	1.1.1.1	192.168.2.5	0x1f03	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.088870049 CEST	1.1.1.1	192.168.2.5	0x1f03	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.088870049 CEST	1.1.1.1	192.168.2.5	0x1f03	No error (0)	ao9ui4chmm.puzztake.com	hj5ozcalb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.088870049 CEST	1.1.1.1	192.168.2.5	0x1f03	No error (0)	hj5ozcalb.puzztake.com		157.245.140.233	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.088870049 CEST	1.1.1.1	192.168.2.5	0x1f03	No error (0)	hj5ozcalb.puzztake.com		192.241.154.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.089504004 CEST	1.1.1.1	192.168.2.5	0x9036	No error (0)	sync.kueezrtb.com	synckueez.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.089504004 CEST	1.1.1.1	192.168.2.5	0x9036	No error (0)	synckueez.cootlogix.com	sync.cootlogix.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.089504004 CEST	1.1.1.1	192.168.2.5	0x9036	No error (0)	sync.cootlogix.com	ao9ui4chmm.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.089504004 CEST	1.1.1.1	192.168.2.5	0x9036	No error (0)	ao9ui4chmm.puzztake.com	h7mzk9dlb.puzztake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.807697058 CEST	1.1.1.1	192.168.2.5	0x3d72	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:44.807697058 CEST	1.1.1.1	192.168.2.5	0x3d72	No error (0)	pubads46.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.807697058 CEST	1.1.1.1	192.168.2.5	0x3d72	No error (0)	pubads46.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.807697058 CEST	1.1.1.1	192.168.2.5	0x3d72	No error (0)	pubads46.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.807697058 CEST	1.1.1.1	192.168.2.5	0x3d72	No error (0)	pubads46.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:44.807714939 CEST	1.1.1.1	192.168.2.5	0x7013	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.398693085 CEST	1.1.1.1	192.168.2.5	0x7c8d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:13:48.398797035 CEST	1.1.1.1	192.168.2.5	0x2d60	No error (0)	ad.doubleclick.net		172.217.215.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.398797035 CEST	1.1.1.1	192.168.2.5	0x2d60	No error (0)	ad.doubleclick.net		172.217.215.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.399878979 CEST	1.1.1.1	192.168.2.5	0x1760	No error (0)	ssp.api.tappx.com	us-gcp-multilbtcp.ssp.tappx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.400010109 CEST	1.1.1.1	192.168.2.5	0x921a	No error (0)	ssp.api.tappx.com	us-gcp-multilbtcp.ssp.tappx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.400010109 CEST	1.1.1.1	192.168.2.5	0x921a	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		34.145.228.212	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.400010109 CEST	1.1.1.1	192.168.2.5	0x921a	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		35.221.21.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.400010109 CEST	1.1.1.1	192.168.2.5	0x921a	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		35.221.32.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.400010109 CEST	1.1.1.1	192.168.2.5	0x921a	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		34.86.207.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.400010109 CEST	1.1.1.1	192.168.2.5	0x921a	No error (0)	us-gcp-multilbtcp.ssp.tappx.com		34.150.237.142	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407174110 CEST	1.1.1.1	192.168.2.5	0xd593	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407957077 CEST	1.1.1.1	192.168.2.5	0x8b32	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.407957077 CEST	1.1.1.1	192.168.2.5	0x8b32	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.408205032 CEST	1.1.1.1	192.168.2.5	0x19b7	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.419609070 CEST	1.1.1.1	192.168.2.5	0xab8e	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.86.25.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.201.175.167	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.197.125.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.86.118.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.196.251.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		35.173.168.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.200.103.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420150042 CEST	1.1.1.1	192.168.2.5	0x7af8	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.20.142.199	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.420351982 CEST	1.1.1.1	192.168.2.5	0xae46	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.423058033 CEST	1.1.1.1	192.168.2.5	0x160b	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.423058033 CEST	1.1.1.1	192.168.2.5	0x160b	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.423058033 CEST	1.1.1.1	192.168.2.5	0x160b	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.503546000 CEST	1.1.1.1	192.168.2.5	0xff5e	No error (0)	ex.ingage.tech		104.18.27.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.503546000 CEST	1.1.1.1	192.168.2.5	0xff5e	No error (0)	ex.ingage.tech		104.18.26.216	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.504127979 CEST	1.1.1.1	192.168.2.5	0x102	No error (0)	ex.ingage.tech			65	IN (0x0001)	false
Apr 19, 2024 15:13:48.522039890 CEST	1.1.1.1	192.168.2.5	0xb78b	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.522039890 CEST	1.1.1.1	192.168.2.5	0xb78b	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.523099899 CEST	1.1.1.1	192.168.2.5	0x7cc3	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.537986994 CEST	1.1.1.1	192.168.2.5	0x50da	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		18.210.126.54	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		52.21.78.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		35.169.152.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		52.2.103.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		18.214.103.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		54.85.134.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		18.211.187.189	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.550487041 CEST	1.1.1.1	192.168.2.5	0xb1c	No error (0)	hb.digbearings.com		18.209.116.55	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.551243067 CEST	1.1.1.1	192.168.2.5	0x6fdb	No error (0)	hb.minutemedia-prebid.com	hb.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.555619955 CEST	1.1.1.1	192.168.2.5	0x6b85	No error (0)	mp.4dex.io		104.18.34.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.555619955 CEST	1.1.1.1	192.168.2.5	0x6b85	No error (0)	mp.4dex.io		172.64.153.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.555789948 CEST	1.1.1.1	192.168.2.5	0xa2a6	No error (0)	mp.4dex.io			65	IN (0x0001)	false
Apr 19, 2024 15:13:48.563538074 CEST	1.1.1.1	192.168.2.5	0x7c23	No error (0)	hb.yellowblue.io		18.154.227.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.563538074 CEST	1.1.1.1	192.168.2.5	0x7c23	No error (0)	hb.yellowblue.io		18.154.227.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.563538074 CEST	1.1.1.1	192.168.2.5	0x7c23	No error (0)	hb.yellowblue.io		18.154.227.125	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.563538074 CEST	1.1.1.1	192.168.2.5	0x7c23	No error (0)	hb.yellowblue.io		18.154.227.88	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.21.115.50	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.206.146.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.213.218.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.200.35.219	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.223.215.115	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.231.63.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.225.92.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.566479921 CEST	1.1.1.1	192.168.2.5	0x8642	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.156.37.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.567342043 CEST	1.1.1.1	192.168.2.5	0xa70d	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.567342043 CEST	1.1.1.1	192.168.2.5	0xa70d	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.567342043 CEST	1.1.1.1	192.168.2.5	0xa70d	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.809354067 CEST	1.1.1.1	192.168.2.5	0x95d7	No error (0)	ssp.wknd.ai	istio-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.809354067 CEST	1.1.1.1	192.168.2.5	0x95d7	No error (0)	istio-ingress.wunderkind.co		34.117.4.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.809665918 CEST	1.1.1.1	192.168.2.5	0x2903	No error (0)	ssp.wknd.ai	istio-ingress.wunderkind.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:48.821811914 CEST	1.1.1.1	192.168.2.5	0xafd2	No error (0)	cm.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.821811914 CEST	1.1.1.1	192.168.2.5	0xafd2	No error (0)	cm.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.821811914 CEST	1.1.1.1	192.168.2.5	0xafd2	No error (0)	cm.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:48.821811914 CEST	1.1.1.1	192.168.2.5	0xafd2	No error (0)	cm.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:49.419401884 CEST	1.1.1.1	192.168.2.5	0x54e3	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:49.420608044 CEST	1.1.1.1	192.168.2.5	0xa051	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:49.421792984 CEST	1.1.1.1	192.168.2.5	0x6eca	No error (0)	crcldu.com		75.2.64.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:49.421792984 CEST	1.1.1.1	192.168.2.5	0x6eca	No error (0)	crcldu.com		99.83.203.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:51.401698112 CEST	1.1.1.1	192.168.2.5	0x1665	No error (0)	pbs.nextmillmedia.com	pbs.weight.ovhnextmillmedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.401698112 CEST	1.1.1.1	192.168.2.5	0x1665	No error (0)	pbs.weight.ovhnextmillmedia.com	vin.pbs.ovhnextmillmedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.401698112 CEST	1.1.1.1	192.168.2.5	0x1665	No error (0)	vin.pbs.ovhnextmillmedia.com	vin3.pbs.ovhnextmillmedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.402087927 CEST	1.1.1.1	192.168.2.5	0xc89f	No error (0)	pbs.nextmillmedia.com	pbs.weight.ovhnextmillmedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.402087927 CEST	1.1.1.1	192.168.2.5	0xc89f	No error (0)	pbs.weight.ovhnextmillmedia.com	vin.pbs.ovhnextmillmedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.402087927 CEST	1.1.1.1	192.168.2.5	0xc89f	No error (0)	vin.pbs.ovhnextmillmedia.com	vin2.pbs.ovhnextmillmedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.402087927 CEST	1.1.1.1	192.168.2.5	0xc89f	No error (0)	vin2.pbs.ovhnextmillmedia.com		15.204.241.81	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:51.851135015 CEST	1.1.1.1	192.168.2.5	0x98d7	No error (0)	sq-tungsten-ts.amazon-adsystem.com	tp.2632ce734-frontier.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.851135015 CEST	1.1.1.1	192.168.2.5	0x98d7	No error (0)	tp.2632ce734-frontier.amazon-adsystem.com	d3chd11h16n59r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.851135015 CEST	1.1.1.1	192.168.2.5	0x98d7	No error (0)	d3chd11h16n59r.cloudfront.net		18.64.237.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:51.872164011 CEST	1.1.1.1	192.168.2.5	0xf849	No error (0)	sq-tungsten-ts.amazon-adsystem.com	tp.2632ce734-frontier.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.872164011 CEST	1.1.1.1	192.168.2.5	0xf849	No error (0)	tp.2632ce734-frontier.amazon-adsystem.com	d3chd11h16n59r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.899550915 CEST	1.1.1.1	192.168.2.5	0x2839	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:51.899687052 CEST	1.1.1.1	192.168.2.5	0x8211	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:52.550257921 CEST	1.1.1.1	192.168.2.5	0x8137	No error (0)	ad.doubleclick.net		74.125.138.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.550257921 CEST	1.1.1.1	192.168.2.5	0x8137	No error (0)	ad.doubleclick.net		74.125.138.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.550596952 CEST	1.1.1.1	192.168.2.5	0x885c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 15:13:52.837595940 CEST	1.1.1.1	192.168.2.5	0x9674	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.837595940 CEST	1.1.1.1	192.168.2.5	0x9674	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.837595940 CEST	1.1.1.1	192.168.2.5	0x9674	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:52.837595940 CEST	1.1.1.1	192.168.2.5	0x9674	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.409136057 CEST	1.1.1.1	192.168.2.5	0x38a6	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.409136057 CEST	1.1.1.1	192.168.2.5	0x38a6	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.409136057 CEST	1.1.1.1	192.168.2.5	0x38a6	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.409136057 CEST	1.1.1.1	192.168.2.5	0x38a6	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.169.222.158	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.93.225.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.224.230.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.87.218.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		23.23.109.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.222.135.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.193.26.213	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.730123043 CEST	1.1.1.1	192.168.2.5	0x82c8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.224.162.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:53.731364965 CEST	1.1.1.1	192.168.2.5	0x22d3	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:53.731364965 CEST	1.1.1.1	192.168.2.5	0x22d3	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:53.731364965 CEST	1.1.1.1	192.168.2.5	0x22d3	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672708988 CEST	1.1.1.1	192.168.2.5	0xcff0	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672708988 CEST	1.1.1.1	192.168.2.5	0xcff0	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672708988 CEST	1.1.1.1	192.168.2.5	0xcff0	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672725916 CEST	1.1.1.1	192.168.2.5	0x549d	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672725916 CEST	1.1.1.1	192.168.2.5	0x549d	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672725916 CEST	1.1.1.1	192.168.2.5	0x549d	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672725916 CEST	1.1.1.1	192.168.2.5	0x549d	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.672725916 CEST	1.1.1.1	192.168.2.5	0x549d	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677403927 CEST	1.1.1.1	192.168.2.5	0x3d8a	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		184.73.252.128	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		107.22.173.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		54.165.94.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		107.21.236.181	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		204.236.219.255	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		54.158.217.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		34.202.111.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.677418947 CEST	1.1.1.1	192.168.2.5	0x8995	No error (0)	idaas-ext.cph.liveintent.com		34.233.65.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:54.682667017 CEST	1.1.1.1	192.168.2.5	0x51be	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.682667017 CEST	1.1.1.1	192.168.2.5	0x51be	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.684753895 CEST	1.1.1.1	192.168.2.5	0xa7dd	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.684753895 CEST	1.1.1.1	192.168.2.5	0xa7dd	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.907319069 CEST	1.1.1.1	192.168.2.5	0xc8c8	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:54.907473087 CEST	1.1.1.1	192.168.2.5	0x9b52	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.462912083 CEST	1.1.1.1	192.168.2.5	0xbf39	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.462912083 CEST	1.1.1.1	192.168.2.5	0xbf39	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.462912083 CEST	1.1.1.1	192.168.2.5	0xbf39	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.463004112 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.463004112 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.463004112 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:55.463004112 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:55.463004112 CEST	1.1.1.1	192.168.2.5	0xc5ff	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:57.990962029 CEST	1.1.1.1	192.168.2.5	0xc99c	No error (0)	vpaid.vidoomy.com	1099493781.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:57.991456985 CEST	1.1.1.1	192.168.2.5	0x913d	No error (0)	vpaid.vidoomy.com	1099493781.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:57.991456985 CEST	1.1.1.1	192.168.2.5	0x913d	No error (0)	1099493781.rsc.cdn77.org		89.187.171.27	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:59.223839045 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	a.vidoomy.com	lb.vidoomy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:59.224014997 CEST	1.1.1.1	192.168.2.5	0x169b	No error (0)	a.vidoomy.com	lb.vidoomy.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 15:13:59.224014997 CEST	1.1.1.1	192.168.2.5	0x169b	No error (0)	lb.vidoomy.com		212.36.83.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 15:13:59.224014997 CEST	1.1.1.1	192.168.2.5	0x169b	No error (0)	lb.vidoomy.com		212.36.83.245	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49719	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:24 UTC	617	OUT	GET /jsapi HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:24 UTC	415	IN	HTTP/1.1 301 Moved Permanently Location: https://www.gstatic.com/charts/loader.js X-Content-Type-Options: nosniff Server: sffe Content-Length: 237 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:10:04 GMT Expires: Fri, 19 Apr 2024 13:40:04 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 140 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:24 UTC	237	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 63 68 61 72 74 73 2f 6c 6f 61 64 65 72 2e 6a 73 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.gstatic.com/charts/loader.js">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	108.138.64.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:24 UTC	566	OUT	GET /justjared/stg/main.css HTTP/1.1 Host: d188m5xxcpvuue.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:24 UTC	679	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10361 Connection: close x-amz-replication-status: FAILED Last-Modified: Thu, 18 Apr 2024 20:27:15 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: vTLP6JCcBELy3BXeQLhDnQZAXKRF3kCV Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 10:21:19 GMT Cache-Control: max-age=43200 ETag: "38cfe07b553159d76228f68bf607971a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4a91a321d4c2ab7334c6f285093956ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QoXilCqocrLgZvsdLuZRFFM9yjP8u3x1W5UuG17-NRhxA9873BEbsQ== Age: 10266 Vary: Origin
2024-04-19 13:12:24 UTC	10361	IN	Data Raw: 2e 61 64 5f 5f 61 6c 69 67 6e 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 61 64 5f 5f 61 6c 69 67 6e 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 61 64 5f 5f 33 30 30 78 32 35 30 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 33 33 2e 33 33 33 33 33 33 33 33 33 33 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 61 64 5f 5f 33 30 30 78 32 35 30 2d 69 6e 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 35 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 61 64 5f 5f 33 30 30 78 32 35 30 2d 2d 6d 61 78 7b 6d 61 78 2d 77 69 64 74 Data Ascii: .ad__align{align-items:center;display:flex;justify-content:center}@media(min-width:768px){.ad__align{flex-direction:row}.ad__300x250{min-height:333.3333333333px;min-width:300px}.ad__300x250-inner{min-height:250px;min-width:300px}.ad__300x250--max{max-widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49734	104.18.38.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	548	OUT	GET /ht/p/191040-27970744739601.js HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:27 GMT Content-Type: text/javascript Content-Length: 33708 Connection: close CF-Ray: 876d2570cbf16755-ATL CF-Cache-Status: HIT Accept-Ranges: bytes Age: 430 Cache-Control: public, max-age=14400 ETag: "da168b-83ac-61672bcb75e9d" Expires: Fri, 19 Apr 2024 17:12:27 GMT Last-Modified: Fri, 19 Apr 2024 13:05:08 GMT Vary: Accept-Encoding Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Server: cloudflare
2024-04-19 13:12:27 UTC	852	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 73 29 7b 69 66 28 21 72 5b 61 5d 29 7b 69 66 28 21 74 5b 61 5d 29 7b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 75 29 72 65 74 75 72 6e 20 75 28 61 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 28 61 2c 21 30 29 3b 76 61 72 20 63 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 61 2b 22 27 22 29 3b 74 68 72 6f 77 20 63 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 63 7d 76 61 72 20 66 3d 72 5b 61 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: !function(){function e(t,r,n){function i(a,s){if(!r[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(o)return o(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var f=r[a]={exports:{}}
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 72 65 71 75 65 73 74 5f 63 6f 6d 70 6c 65 74 65 22 2c 7b 72 65 71 75 65 73 74 73 43 6f 6d 70 6c 65 74 65 64 3a 65 2e 6c 65 6e 67 74 68 7d 29 2c 72 2e 72 65 73 6f 6c 76 65 28 29 7d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 79 29 79 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 79 5b 65 5d 21 3d 3d 77 2e 43 4f 4d 50 4c 45 54 45 26 26 69 2e 65 6d 69 74 28 22 68 73 5f 69 64 65 6e 74 69 74 79 5f 74 69 6d 65 6f 75 74 22 2c 7b 73 74 61 74 73 49 64 3a 68 5b 65 5d 2e 69 6e 73 74 61 6e 63 65 2e 67 65 74 53 74 61 74 73 49 64 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 54 7c 7c 28 54 3d 21 30 2c 6e 28 29 29 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 68 29 69 66 28 68 2e Data Ascii: request_complete",{requestsCompleted:e.length}),r.resolve()}),r}function n(){for(var e in y)y.hasOwnProperty(e)&&y[e]!==w.COMPLETE&&i.emit("hs_identity_timeout",{statsId:h[e].instance.getStatsId()})}function p(){var e={};T\|\|(T=!0,n());for(var t in h)if(h.
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 65 2c 74 29 7d 29 7d 76 61 72 20 75 2c 63 2c 66 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 75 3d 6e 75 6c 6c 2c 63 3d 65 2c 66 3d 65 7d 28 29 2c 7b 5f 73 65 74 44 69 72 65 63 74 49 6e 74 65 72 66 61 63 65 3a 74 2c 5f 73 65 74 45 78 65 63 75 74 6f 72 3a 72 2c 5f 65 78 65 63 75 74 65 4e 65 78 74 3a 61 2c 73 65 74 4e 65 78 74 3a 6f 2c 67 65 74 44 69 72 65 63 74 49 6e 74 65 72 66 61 63 65 3a 6e 2c 65 78 65 63 75 74 65 3a 73 7d 7d 76 61 72 20 69 3d 65 28 31 30 29 3b 65 28 31 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 33 3a 5b 66 75 6e 63 Data Ascii: e,t)}function s(e,t){return i.resolve().then(function(){return c(e,t)})}var u,c,f;return function(){u=null,c=e,f=e}(),{_setDirectInterface:t,_setExecutor:r,_executeNext:a,setNext:o,getDirectInterface:n,execute:s}}var i=e(10);e(15);t.exports=n},{}],3:[func
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 7d 69 66 28 6e 75 6c 6c 3d 3d 3d 73 29 7b 69 66 28 74 26 26 28 69 3d 74 28 6f 29 29 29 72 65 74 75 72 6e 20 69 3b 62 72 65 61 6b 7d 6f 3d 6f 2e 70 61 72 65 6e 74 2c 61 2b 2b 7d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 3f 74 5b 65 5d 3a 6e 75 6c 6c 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 7c 7c 79 2c 6e 3d 72 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 2e 73 72 63 3d 65 29 2c 6e 2e 77 69 64 74 68 3d 30 2c 6e 2e 68 65 69 Data Ascii: }if(null===s){if(t&&(i=t(o)))return i;break}o=o.parent,a++}}catch(e){}return null}function v(e){return p(function(t){return t.hasOwnProperty(e)?t[e]:null})}function g(e,t){var r=t\|\|y,n=r.document.createElement("iframe");return e&&(n.src=e),n.width=0,n.hei
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 22 3b 76 61 72 20 6e 3d 65 28 33 29 2c 69 3d 65 28 31 34 29 2c 6f 3d 65 28 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 21 73 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 75 2b 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 69 66 28 21 73 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 72 3b 74 72 79 7b 72 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 75 2b 74 29 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d Data Ascii: ";var n=e(3),i=e(14),o=e(13);t.exports=function(){function e(e){if(!s)return!1;try{localStorage.removeItem(u+e)}catch(e){return!1}return!0}function t(t){if(!s)return null;var r;try{r=JSON.parse(localStorage.getItem(u+t))}catch(e){return null}return null==
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 45 4e 47 54 48 3a 38 2c 50 55 42 4b 49 54 5f 41 44 5f 49 44 5f 4c 45 4e 47 54 48 3a 31 36 2c 52 45 4e 44 45 52 5f 53 45 52 56 49 43 45 5f 45 58 50 49 52 59 5f 53 57 45 45 50 5f 54 49 4d 45 52 3a 33 65 34 2c 44 45 46 41 55 4c 54 5f 50 41 52 54 4e 45 52 5f 50 52 49 4f 52 49 54 59 3a 31 2c 4c 69 6e 65 49 74 65 6d 54 79 70 65 73 3a 7b 49 44 5f 41 4e 44 5f 53 49 5a 45 3a 31 2c 49 44 5f 41 4e 44 5f 50 52 49 43 45 3a 32 2c 43 55 53 54 4f 4d 3a 33 7d 2c 44 65 76 69 63 65 54 79 70 65 4d 65 74 68 6f 64 73 3a 7b 55 53 45 52 5f 41 47 45 4e 54 3a 31 2c 52 45 46 45 52 45 4e 43 45 3a 32 2c 53 49 5a 45 5f 4d 41 50 50 49 4e 47 3a 33 7d 2c 52 65 71 75 65 73 74 41 72 63 68 69 74 65 63 74 75 72 65 73 3a 7b 4d 52 41 3a 31 2c 53 52 41 3a 32 7d 2c 49 6e 69 74 69 61 6c 4c 6f 61 Data Ascii: ENGTH:8,PUBKIT_AD_ID_LENGTH:16,RENDER_SERVICE_EXPIRY_SWEEP_TIMER:3e4,DEFAULT_PARTNER_PRIORITY:1,LineItemTypes:{ID_AND_SIZE:1,ID_AND_PRICE:2,CUSTOM:3},DeviceTypeMethods:{USER_AGENT:1,REFERENCE:2,SIZE_MAPPING:3},RequestArchitectures:{MRA:1,SRA:2},InitialLoa
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 69 2c 6f 3b 6e 3d 7b 7d 2c 6f 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 69 70 68 6f 6e 65 28 29 7c 7c 6e 2e 69 70 6f 64 28 29 7c 7c 6e 2e 69 70 61 64 28 29 7d 2c 6e 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 6e 2e 77 69 6e 64 6f 77 73 28 29 26 26 69 28 22 69 70 68 6f 6e 65 22 29 7d 2c 6e 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 22 69 70 6f 64 22 29 7d 2c 6e 2e 69 70 61 64 Data Ascii: xports=n},{}],9:[function(e,t,r){"use strict";var n,i,o;n={},o=window.navigator.userAgent.toLowerCase(),n.ios=function(){return n.iphone()\|\|n.ipod()\|\|n.ipad()},n.iphone=function(){return!n.windows()&&i("iphone")},n.ipod=function(){return i("ipod")},n.ipad
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 6e 2d 31 21 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 3d 30 2c 74 68 69 73 2e 5f 68 61 6e Data Ascii: n-1!==o.indexOf(e)},t.exports=n},{}],10:[function(e,t,r){function n(){}function i(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=0,this._han
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 29 3b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 6e 65 77 20 63 28 65 2c 74 2c 72 29 29 2c 72 7d 2c 69 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 69 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 2c 61 29 7b 74 72 79 7b 69 66 28 61 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 29 29 7b 76 61 72 20 73 3d 61 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: n=function(e,t){var r=new this.constructor(n);return o(this,new c(e,t,r)),r},i.all=function(e){var t=Array.prototype.slice.call(e);return new i(function(e,r){function n(o,a){try{if(a&&("object"==typeof a\|\|"function"==typeof a)){var s=a.then;if("function"=
2024-04-19 13:12:27 UTC	1369	IN	Data Raw: 6e 2e 62 72 6f 77 73 65 72 26 26 28 72 5b 6e 2e 62 72 6f 77 73 65 72 5d 3d 21 30 2c 72 2e 76 65 72 73 69 6f 6e 3d 6e 2e 76 65 72 73 69 6f 6e 2c 72 2e 76 65 72 73 69 6f 6e 4e 75 6d 62 65 72 3d 70 61 72 73 65 49 6e 74 28 6e 2e 76 65 72 73 69 6f 6e 4e 75 6d 62 65 72 2c 31 30 29 29 2c 72 2e 72 76 7c 7c 72 2e 69 65 6d 6f 62 69 6c 65 29 7b 6e 2e 62 72 6f 77 73 65 72 3d 22 6d 73 69 65 22 2c 72 2e 6d 73 69 65 3d 21 30 7d 69 66 28 72 2e 65 64 67 65 29 7b 64 65 6c 65 74 65 20 72 2e 65 64 67 65 3b 6e 2e 62 72 6f 77 73 65 72 3d 22 6d 73 65 64 67 65 22 2c 72 2e 6d 73 65 64 67 65 3d 21 30 7d 69 66 28 72 2e 6f 70 72 29 7b 6e 2e 62 72 6f 77 73 65 72 3d 22 6f 70 65 72 61 22 2c 72 2e 6f 70 65 72 61 3d 21 30 7d 69 66 28 72 2e 73 61 66 61 72 69 26 26 72 2e 61 6e 64 72 6f 69 Data Ascii: n.browser&&(r[n.browser]=!0,r.version=n.version,r.versionNumber=parseInt(n.versionNumber,10)),r.rv\|\|r.iemobile){n.browser="msie",r.msie=!0}if(r.edge){delete r.edge;n.browser="msedge",r.msedge=!0}if(r.opr){n.browser="opera",r.opera=!0}if(r.safari&&r.androi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49745	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	641	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	786	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Fri, 19 Apr 2024 13:12:27 GMT Expires: Fri, 19 Apr 2024 13:12:27 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 962 / 19832 / m202404150101 / config-hash: 13704437909670070254 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 94413 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:27 UTC	469	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="fun
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d Data Ascii: bject"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 Data Ascii: y Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,wri
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e 61 3b 61 3a 7b 76 61 72 20 6f 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 61 3b 6e 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6e 61 3d 21 31 7d 6d 61 3d 6e 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 72 61 3d 6d 61 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ct.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}ma=na?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ra=ma,B=function(a,b){a.prototype=
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 7a 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 7a 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 66 2e 70 72 6f 74 6f 74 79 Data Ascii: h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!z(g,d)){var k=new b;ca(g,d,{value:k})}if(!z(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this};f.prototy
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 42 29 2c 74 68 69 73 5b 31 5d 2e 47 2e 6e 65 78 74 3d 6c 2e 42 2c 74 68 69 73 5b 31 5d 2e 47 3d 6c 2e 42 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 42 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 42 2e 47 2e 6e 65 78 74 3d 68 2e 42 2e 6e 65 78 74 2c 68 2e 42 2e 6e 65 78 74 2e 47 3d 68 2e 42 2e 47 2c 68 2e 42 2e 68 65 61 Data Ascii: h,value:k},l.list.push(l.B),this[1].G.next=l.B,this[1].G=l.B,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.B&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.B.G.next=h.B.next,h.B.next.G=h.B.G,h.B.hea
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 47 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c Data Ascii: ;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.G=h.next=h.head=h},g=0;return c},"es6");w("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");w("Number.isFinite",
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 Data Ascii: (Object,f,b))return!0}return!1}},"es7");var ta=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+"
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e Data Ascii: l(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");w("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=n
2024-04-19 13:12:27 UTC	1255	IN	Data Raw: 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 77 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 7a 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e Data Ascii: is;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");w("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)z(b,d)&&c.push([d,b[d]]);return c}},"es8");w("String.prototype.startsWith",function(a){return a?a:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49736	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	536	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	651	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 305153 Connection: close Date: Fri, 19 Apr 2024 13:09:30 GMT Last-Modified: Wed, 17 Apr 2024 20:37:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 e3e94284a800d30d02bd662be67e1bf2.cloudfront.net (CloudFront), 1.1 c923d89f70351e442aa1b87e2d6434f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 ETag: "b9e5bc6ae2304c1ff623d74c6e93fe00" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: 6gjh6M2_i355GkmP8HrJ6Z995W6Hf6Nal_hnQ9WnBz_zyXNz6UUQ1w== Age: 178
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 33 30 35 2e 31 30 30 32 20 2d 20 32 30 32 34 2d 30 33 2d 30 35 20 31 30 3a 30 32 3a 31 38 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 29 3a 65 7d 29 2c 22 22 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 30 3f 6e 3a 6e 75 6c 6c 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 2f 22 29 2c 65 2e 73 65 74 49 74 65 6d 28 74 2c 22 22 2c 30 2c 6e 29 7d 2c 74 68 69 73 2e 73 65 74 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6f 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 22 2f 22 29 3b 76 61 72 20 69 3d 6e 65 77 20 44 61 74 65 28 6f 29 3b 69 66 28 21 65 2e 69 73 56 61 6c 69 64 44 61 74 65 28 69 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 22 29 3b 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 Data Ascii: ):e}),"");return n.length>0?n:null},this.removeItem=function(t,n){void 0===n&&(n="/"),e.setItem(t,"",0,n)},this.setItem=function(t,n,o,r){void 0===r&&(r="/");var i=new Date(o);if(!e.isValidDate(i))throw new Error("Invalid expiration date");e.globalContext
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 2d 63 2e 74 69 6d 65 53 74 61 6d 70 3a 76 6f 69 64 20 30 3b 6f 2e 72 65 63 6f 72 64 53 74 61 74 75 73 43 68 61 6e 67 65 45 76 65 6e 74 28 7b 69 64 3a 74 2e 74 79 70 65 2c 73 74 61 74 75 73 3a 6e 2c 70 72 6f 70 73 3a 65 28 65 28 7b 7d 2c 72 29 2c 7b 74 69 6d 65 72 73 3a 7b 73 69 6e 63 65 43 72 65 61 74 65 64 3a 61 2d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 73 69 6e 63 65 53 74 61 72 74 65 64 3a 75 7d 7d 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 41 6e 64 4c 6f 67 45 76 65 6e 74 53 74 61 74 75 73 4f 6e 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 3b 74 2e 73 74 61 74 75 73 21 3d 3d 65 26 26 28 59 28 29 26 26 51 2e 69 6e 66 6f 28 22 23 23 23 20 55 70 64 61 74 65 20 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -c.timeStamp:void 0;o.recordStatusChangeEvent({id:t.type,status:n,props:e(e({},r),{timers:{sinceCreated:a-t.timeStamp,sinceStarted:u}})})},t.prototype.updateAndLogEventStatusOnChange=function(t,e,n,o){var r;t.status!==e&&(Y()&&Q.info("### Update ".concat(
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 4d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 2c 69 2c 61 2c 63 3d 6e 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 75 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 67 65 74 28 22 61 6d 7a 6e 73 7a 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 70 6c 69 74 28 22 78 22 29 2c 73 3d 65 2e 67 65 74 28 22 61 6d 7a 6e 69 69 64 22 29 2c 6c 3d 74 3b 69 66 28 21 28 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 7c 7c 75 2e 6c 65 6e 67 74 68 3c 32 29 29 7b 63 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 22 30 22 2c 63 2e 73 74 79 6c 65 2e 6d 61 72 67 Data Ascii: Mt=function(t,e,n,o){var r,i,a,c=n.globalContext.document.createElement("iframe"),u=null===(r=e.get("amznsz"))\|\|void 0===r?void 0:r.split("x"),s=e.get("amzniid"),l=t;if(!(void 0===s\|\|void 0===l\|\|void 0===u\|\|u.length<2)){c.style.marginLeft="0",c.style.marg
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 74 28 6e 29 2c 65 29 3a 6e 75 6c 6c 7d 2c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 6f 3d 6e 75 6c 6c 21 3d 3d 28 6e 3d 74 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 22 68 61 64 72 6f 6e 49 64 22 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 74 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 22 61 75 48 61 64 72 6f 6e 49 64 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6f 3f 28 28 65 3d 7b 7d 29 2e 61 75 64 69 67 65 6e 74 3d 6f 2c 65 29 3a 6e 75 6c 6c 7d 2c 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 74 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 22 69 64 35 69 64 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 3f 28 28 65 3d 7b 7d 29 2e 69 64 35 3d 4a 53 4f 4e 2e 70 Data Ascii: t(n),e):null},se=function(t){var e,n,o=null!==(n=t.readLocalStorage("hadronId"))&&void 0!==n?n:t.readLocalStorage("auHadronId");return null!=o?((e={}).audigent=o,e):null},le=function(t){var e,n=t.readLocalStorage("id5id");return null!=n?((e={}).id5=JSON.p
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 72 79 70 74 65 64 53 69 67 6e 61 6c 5d 7d 7d 29 29 7d 29 29 7d 7d 29 2c 5b 32 2c 6c 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 29 29 7d 29 29 7d 5d 2c 5b 48 65 2e 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 69 6e 69 74 69 61 6c 69 7a 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 6f 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 61 2c 63 2c 75 2c 73 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 28 Data Ascii: ryptedSignal]}}))}))}}),[2,l.completed]}))}))}],[He.google_secureSignals_initialize,function(t){var e=t.account;return t.customEvent,o(void 0,void 0,void 0,(function(){var t,n,o,i,a,c,u,s;return r(this,(function(r){switch(r.label){case 0:return void 0===(
2024-04-19 13:12:27 UTC	834	IN	Data Raw: 61 74 65 6e 63 79 7d 28 74 2e 6c 69 62 72 61 72 79 4c 6f 61 64 43 61 6c 6c 4c 61 74 65 6e 63 79 2c 65 29 2c 51 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 53 45 54 5f 51 22 21 3d 3d 65 2e 74 79 70 65 3f 6c 28 74 29 3a 6c 28 65 2e 51 29 7d 28 74 2e 51 2c 65 29 2c 73 6c 6f 74 42 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 22 42 49 44 5f 53 54 41 54 45 5f 43 48 41 4e 47 45 22 3a 72 65 74 75 72 6e 20 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 75 28 7b 7d 2c 65 2e 73 6c 6f 74 49 44 2c 74 5b 65 2e 73 6c 6f 74 49 44 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 74 61 72 67 65 74 69 6e 67 53 65 74 49 44 3d 3d 3d 65 2e 5f 74 61 72 67 65 74 Data Ascii: atency}(t.libraryLoadCallLatency,e),Q:function(t,e){return"SET_Q"!==e.type?l(t):l(e.Q)}(t.Q,e),slotBids:function(t,e){switch(e.type){case"BID_STATE_CHANGE":return s(s({},t),{},u({},e.slotID,t[e.slotID].map((function(t){return t._targetingSetID===e._target
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 44 5d 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 28 74 5b 6e 2e 73 6c 6f 74 49 44 5d 29 2c 5b 6e 5d 29 3a 65 5b 6e 2e 73 6c 6f 74 49 44 5d 3d 5b 6e 5d 2c 65 7d 29 2c 7b 7d 29 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 73 28 7b 7d 2c 74 29 7d 7d 28 74 2e 73 6c 6f 74 42 69 64 73 2c 65 29 2c 74 61 72 67 65 74 69 6e 67 4b 65 79 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 55 50 44 41 54 45 5f 53 4c 4f 54 5f 42 49 44 53 22 21 3d 3d 65 2e 74 79 70 65 3f 73 28 7b 7d 2c 74 29 3a 73 28 73 28 7b 7d 2c 74 29 2c 65 2e 62 69 64 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 2e 6b 29 28 74 2c 6e 2e 73 6c 6f 74 49 44 29 3f 65 5b 6e 2e 73 6c 6f 74 49 44 5d 3d 5b 5d 2e 63 6f 6e Data Ascii: D]=[].concat(l(t[n.slotID]),[n]):e[n.slotID]=[n],e}),{}));default:return s({},t)}}(t.slotBids,e),targetingKeys:function(t,e){return"UPDATE_SLOT_BIDS"!==e.type?s({},t):s(s({},t),e.bids.reduce((function(e,n){return Object(i.k)(t,n.slotID)?e[n.slotID]=[].con
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 64 44 61 74 65 28 72 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 22 29 3b 6e 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 3b 20 65 78 70 69 72 65 73 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2c 22 3b 20 70 61 74 68 3d 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 3b 22 29 7d 29 29 2c 76 28 79 28 6e 29 2c 22 67 65 74 49 74 65 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 67 75 6c 61 74 65 64 4d 65 74 68 6f 64 28 6f 2e 64 6f 63 75 6d 65 6e 74 2c 61 2e 63 6f 6f 6b 69 65 2c 6e 2e 5f Data Ascii: dDate(r))throw new Error("Invalid expiration date");n.globalContext.document.cookie="".concat(t,"=").concat(e,"; expires=").concat(r.toUTCString(),"; path=").concat(o,";")})),v(y(n),"getItem",(function(t,e){return n.regulatedMethod(o.document,a.cookie,n._
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 49 28 72 2e 6b 65 79 29 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 6e 29 7b 28 65 3d 49 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 Data Ascii: t[n];return r}function E(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,I(r.key),r)}}function D(t,e,n){(e=I(e))in t?Object.defineProperty(t,e,{value:n,enumer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49741	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	564	OUT	GET /unified/wrapperMessagingWithoutDetection.js HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	554	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 131422 Connection: close Date: Fri, 19 Apr 2024 12:58:13 GMT Last-Modified: Thu, 18 Apr 2024 15:24:16 GMT ETag: "0ec630abc0613ef647eb0f3fbaf57d34" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ea6d44855948fa16c9e8fb87911af868.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: B7EgTL5q98vFT3gXfeBZ2pHTm9g5bKlV0NyT4zuxBDevsGNfqibLlA== Age: 855
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 61 3d 74 5b 30 5d 2c 69 3d 74 5b 31 5d 2c 73 3d 30 2c 75 3d 5b 5d 3b 73 3c 61 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6f 3d 61 5b 73 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6f 29 26 26 72 5b 6f 5d 26 26 75 2e 70 75 73 68 28 72 5b 6f 5d 5b 30 5d 29 2c 72 5b 6f 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 65 5b 6e 5d 3d 69 5b 6e 5d 29 3b 66 6f 72 28 63 26 26 63 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 Data Ascii: !function(e){function t(t){for(var n,o,a=t[0],i=t[1],s=0,u=[];s<a.length;s++)o=a[s],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&u.push(r[o][0]),r[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(c&&c(t);u.length;)u.shift()()
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 6e 74 44 61 74 61 49 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 74 2e 73 65 74 4c 6f 63 61 6c 53 74 61 74 65 3d 74 2e 67 65 74 4c 6f 63 61 6c 53 74 61 74 65 3d 74 2e 75 73 65 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 74 2e 73 65 74 53 74 61 74 65 53 74 6f 72 61 67 65 49 6e 4d 65 6d 6f 72 79 3d 74 2e 73 65 74 4c 6f 63 61 6c 53 74 61 74 65 49 6e 4d 65 6d 6f 72 79 3d 74 2e 67 65 74 43 75 73 74 6f 6d 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 46 72 6f 6d 4d 65 6d 6f 72 79 3d 74 2e 67 65 74 4c 6f 63 61 6c 53 74 61 74 65 46 72 6f 6d 4d 65 6d 6f 72 79 3d 74 2e 67 65 74 53 74 61 74 65 53 74 6f 72 61 67 65 46 72 6f 6d 4d 65 6d 6f 72 79 3d 74 2e 73 65 74 55 73 65 72 43 6f 6e 73 65 6e 74 4b 65 79 3d 74 2e 75 73 65 72 43 6f 6e 73 65 6e 74 56 65 72 73 69 6f 6e 3d 76 6f 69 64 Data Ascii: ntDataInLocalStorage=t.setLocalState=t.getLocalState=t.useLocalStorage=t.setStateStorageInMemory=t.setLocalStateInMemory=t.getCustomVendorConsentFromMemory=t.getLocalStateFromMemory=t.getStateStorageFromMemory=t.setUserConsentKey=t.userConsentVersion=void
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 4c 6f 63 61 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 52 65 71 75 65 73 74 45 72 72 6f 72 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 52 65 71 75 65 73 74 45 72 72 6f 72 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 68 61 6e 64 6c 65 45 72 72 6f 72 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 Data Ascii: ct.defineProperty(t,"LocalStorageError",{enumerable:!0,get:function(){return l.LocalStorageError}}),Object.defineProperty(t,"RequestError",{enumerable:!0,get:function(){return l.RequestError}}),Object.defineProperty(t,"handleError",{enumerable:!0,get:func
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 7d 29 29 3a 74 68 69 73 2e 6c 69 73 74 65 6e 28 29 7d 2c 74 2e 74 79 70 65 3d 22 69 66 72 61 6d 65 22 2c 74 7d 28 66 29 3b 74 2e 49 66 72 61 6d 65 4c 69 73 74 65 6e 65 72 3d 76 3b 76 61 72 20 68 3d 7b 7d 3b 74 2e 4c 69 73 74 65 6e 65 72 46 61 63 74 6f 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 76 61 72 20 61 3d 5b 74 2c 6e 5d 3b 72 65 74 75 72 6e 20 72 26 26 61 2e 70 75 73 68 28 72 29 2c 68 5b 65 2e 74 79 70 65 5d 7c 7c 28 68 5b 65 2e 74 79 70 65 5d 3d 6e 65 77 28 65 2e 62 69 6e 64 2e 61 70 70 6c 79 28 Data Ascii: ().then((function(){window.location.reload()})):this.listen()},t.type="iframe",t}(f);t.IframeListener=v;var h={};t.ListenerFactory=function(e,t,n,r){var o;void 0===r&&(r=function(){});var a=[t,n];return r&&a.push(r),h[e.type]\|\|(h[e.type]=new(e.bind.apply(
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 28 65 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 29 2c 6f 3d 6e 28 36 33 29 2c 61 3d 6e 28 34 30 29 2c 69 3d 6e 28 31 30 29 2c 73 3d 6e 28 32 36 29 2c 63 3d 6e 28 39 29 2c 75 3d 6e 28 31 30 37 29 2c 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 74 Data Ascii: e.exports=function(e){return Object(r(e))}},function(e,t){e.exports=function(e){if(null==e)throw TypeError("Can't call method on "+e);return e}},function(e,t,n){var r=n(7),o=n(63),a=n(40),i=n(10),s=n(26),c=n(9),u=n(107),l=Object.getOwnPropertyDescriptor;t
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 63 65 64 3a 63 7c 7c 7a 7d 2c 7b 72 65 73 6f 6c 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 28 63 26 26 74 68 69 73 3d 3d 3d 61 3f 46 3a 74 68 69 73 2c 65 29 7d 7d 29 2c 73 28 7b 74 61 72 67 65 74 3a 54 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 57 7d 2c 7b 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 47 28 74 29 2c 72 3d 6e 2e 72 65 73 6f 6c 76 65 2c 6f 3d 6e 2e 72 65 6a 65 63 74 2c 61 3d 78 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 68 28 74 2e 72 65 73 6f 6c 76 65 29 2c 61 3d 5b 5d 2c 69 3d 30 2c 73 3d 31 3b 53 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 63 3d 69 2b 2b 2c 75 3d 21 31 3b 61 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 73 2b 2b 2c 6e 2e 63 Data Ascii: ced:c\|\|z},{resolve:function(e){return _(c&&this===a?F:this,e)}}),s({target:T,stat:!0,forced:W},{all:function(e){var t=this,n=G(t),r=n.resolve,o=n.reject,a=x((function(){var n=h(t.resolve),a=[],i=0,s=1;S(e,(function(e){var c=i++,u=!1;a.push(void 0),s++,n.c
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 65 2c 74 68 69 73 29 7d 29 7d 6c 26 26 69 28 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 2c 22 73 68 61 6d 22 2c 21 30 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 31 32 36 29 2e 63 68 61 72 41 74 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2b 28 6e 3f 72 28 65 2c 74 29 2e 6c 65 6e 67 74 68 3a 31 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 38 29 2c 6f 3d 6e 28 39 34 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e Data Ascii: ,this,t)}:function(e){return b.call(e,this)})}l&&i(RegExp.prototype[d],"sham",!0)}},function(e,t,n){"use strict";var r=n(126).charAt;e.exports=function(e,t,n){return t+(n?r(e,t).length:1)}},function(e,t,n){var r=n(18),o=n(94);e.exports=function(e,t){var n
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 62 61 63 6b 73 22 2c 5b 5d 29 2c 61 28 74 68 69 73 2c 22 67 63 6d 43 61 6c 6c 62 61 63 6b 73 52 65 61 64 79 22 2c 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 67 63 6d 43 61 6c 6c 62 61 63 6b 73 52 65 61 64 79 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 73 70 5f 3f 77 69 6e 64 6f 77 2e 5f 73 70 5f 2e 75 70 64 61 74 65 47 6f 6f 67 6c 65 43 6f 6e 73 65 6e 74 4d 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 67 63 6d 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 6e 29 2c 65 28 29 7d 3a 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 53 63 72 69 70 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 73 75 65 2c 20 63 61 6e 6e 6f 74 20 63 72 65 61 74 65 20 75 70 64 61 74 65 47 6f 6f 67 6c 65 43 6f 6e 73 65 Data Ascii: backs",[]),a(this,"gcmCallbacksReady",void 0),this.gcmCallbacksReady=new Promise((function(e){window._sp_?window._sp_.updateGoogleConsentMode=function(n){t.gcmCallbacks.push(n),e()}:console.warn("Script configuration issue, cannot create updateGoogleConse
2024-04-19 13:12:27 UTC	350	IN	Data Raw: 68 69 73 2c 6e 3d 61 2e 66 28 74 29 2c 72 3d 6e 2e 72 65 73 6f 6c 76 65 2c 63 3d 6e 2e 72 65 6a 65 63 74 2c 75 3d 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6f 28 74 2e 72 65 73 6f 6c 76 65 29 2c 61 3d 5b 5d 2c 69 3d 30 2c 63 3d 31 3b 73 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 69 2b 2b 2c 73 3d 21 31 3b 61 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 63 2b 2b 2c 6e 2e 63 61 6c 6c 28 74 2c 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 7c 7c 28 73 3d 21 30 2c 61 5b 6f 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 2c 2d 2d 63 7c 7c 72 28 61 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 7c 7c 28 73 3d 21 30 2c 61 5b 6f 5d 3d 7b 73 74 61 74 75 73 Data Ascii: his,n=a.f(t),r=n.resolve,c=n.reject,u=i((function(){var n=o(t.resolve),a=[],i=0,c=1;s(e,(function(e){var o=i++,s=!1;a.push(void 0),c++,n.call(t,e).then((function(e){s\|\|(s=!0,a[o]={status:"fulfilled",value:e},--c\|\|r(a))}),(function(e){s\|\|(s=!0,a[o]={status

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49746	3.161.150.39	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	537	OUT	GET /embed-assets/load.min.js HTTP/1.1 Host: cdn.sided.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	590	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3244 Connection: close Date: Fri, 19 Apr 2024 04:33:53 GMT Last-Modified: Fri, 19 Apr 2024 04:32:26 GMT ETag: "96168f6199e6c869630832a1bb3be2ed" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f5b13248899f05d12f1f01f169b30530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8QlpIPoHbrKrNGSYqx8XKIKzDq7BWFaPXToLUzpwg5foUeIB2po3uA== Age: 31115 Cache-Control: max-age=300
2024-04-19 13:12:27 UTC	3244	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 69 64 65 64 53 63 72 69 70 74 73 28 29 7b 76 61 72 20 65 3d 21 28 21 77 69 6e 64 6f 77 2e 73 69 64 65 64 45 6d 62 65 64 7c 7c 21 77 69 6e 64 6f 77 2e 73 69 64 65 64 45 6d 62 65 64 2e 66 6f 72 63 65 4c 6f 61 64 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 69 64 65 64 2d 77 69 64 67 65 74 2d 73 63 72 69 70 74 22 29 7c 7c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 69 64 65 64 2d 77 69 64 67 65 74 22 29 7c 7c 65 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 69 64 65 64 2d 77 69 64 67 65 74 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 6e 65 77 20 49 6e 74 65 72 73 65 63 Data Ascii: function loadSidedScripts(){var e=!(!window.sidedEmbed\|\|!window.sidedEmbed.forceLoad);document.querySelector(".sided-widget-script")\|\|(document.querySelector(".sided-widget")\|\|e)&&document.querySelectorAll(".sided-widget").forEach(function(d){new Intersec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49735	18.64.155.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	567	OUT	GET /justjared/main/main.js?template=homepage HTTP/1.1 Host: 01.cdn.mediatradecraft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	692	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 199531 Connection: close x-amz-replication-status: FAILED Last-Modified: Thu, 18 Apr 2024 20:27:30 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: FMZFn2n562yd4mcyxul38RKAX.uBayzw Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 11:33:56 GMT Cache-Control: max-age=7600 ETag: "309ccad56d41a176db6a9c00a7971047" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 56233ac1c78ee7b920e664cc0c7f287e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EK9O0gMYvsxoWsawcnBPZOiEsMk6jB8FNErTy8R3I2BxyOEj_FN7Yg== Age: 5912 Vary: Origin
2024-04-19 13:12:27 UTC	15692	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 3d 7b 35 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 3d 28 29 3d 3e 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 3d 28 29 3d 3e 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 36 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 2c 6e 3b 74 68 69 73 7c 7c 77 69 6e 64 6f 77 2c 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 5e 28 69 6e 74 65 72 61 63 74 69 76 65 7c 6c 6f 61 64 65 64 7c 63 6f 6d 70 6c 65 74 65 29 24 2f 2c 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3f 77 69 6e 64 6f 77 2e 6c 6f Data Ascii: !function(){var e,t,i={534:function(e){var t;t=()=>(()=>{var e={381:function(e){var t;t=()=>(()=>{var e={667:function(e,t){var i,n;this\|\|window,void 0===(n="function"==typeof(i=function(){var e=/^(interactive\|loaded\|complete)$/,t=window.location?window.lo
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 4c 45 44 3a 28 29 3d 3e 45 65 2c 43 4d 44 4a 53 5f 49 54 45 4d 5f 41 44 44 45 44 3a 28 29 3d 3e 43 65 2c 43 4d 44 4a 53 5f 4c 4f 41 44 45 44 3a 28 29 3d 3e 49 65 2c 43 4d 44 4a 53 5f 50 4f 53 54 5f 50 52 4f 43 45 53 53 49 4e 47 3a 28 29 3d 3e 7a 65 2c 43 4d 44 4a 53 5f 52 55 4c 45 5f 41 50 50 4c 59 3a 28 29 3d 3e 50 65 2c 43 4d 44 4a 53 5f 53 54 52 41 54 45 47 59 5f 55 50 44 41 54 45 3a 28 29 3d 3e 4d 65 2c 4f 4e 5f 41 55 43 54 49 4f 4e 5f 49 4e 54 45 52 53 45 43 54 49 4f 4e 3a 28 29 3d 3e 64 65 2c 4f 4e 5f 49 4e 53 45 52 54 5f 49 4e 54 45 52 53 45 43 54 49 4f 4e 3a 28 29 3d 3e 70 65 2c 4f 4e 5f 50 41 47 45 4c 4f 41 44 5f 49 4e 43 52 45 4d 45 4e 54 3a 28 29 3d 3e 67 65 2c 4f 4e 5f 52 45 4e 44 45 52 5f 49 4e 54 45 52 53 45 43 54 49 4f 4e 3a 28 29 3d 3e 68 Data Ascii: LED:()=>Ee,CMDJS_ITEM_ADDED:()=>Ce,CMDJS_LOADED:()=>Ie,CMDJS_POST_PROCESSING:()=>ze,CMDJS_RULE_APPLY:()=>Pe,CMDJS_STRATEGY_UPDATE:()=>Me,ON_AUCTION_INTERSECTION:()=>de,ON_INSERT_INTERSECTION:()=>pe,ON_PAGELOAD_INCREMENT:()=>ge,ON_RENDER_INTERSECTION:()=>h
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 65 74 69 6e 67 28 65 29 7b 61 77 61 69 74 20 74 68 69 73 2e 77 61 69 74 46 6f 72 47 70 74 28 29 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 63 6c 65 61 72 54 61 72 67 65 74 69 6e 67 28 65 29 29 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 63 6c 65 61 72 54 61 72 67 65 74 69 6e 67 28 29 3a 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 63 6c 65 61 72 54 61 72 67 65 74 69 6e 67 28 65 29 7d 61 73 79 6e 63 20 64 65 73 74 72 6f 79 47 70 74 49 6e 73 74 61 6e 63 65 28 65 2c 74 29 7b 61 77 61 69 74 20 74 68 69 73 2e 77 61 69 74 46 6f 72 47 70 74 28 29 3b 63 6f 6e 73 Data Ascii: eting(e){await this.waitForGpt(),e instanceof Array?e.forEach((e=>googletag.pubads().clearTargeting(e))):"string"!=typeof e?googletag.pubads().clearTargeting():googletag.pubads().clearTargeting(e)}async destroyGptInstance(e,t){await this.waitForGpt();cons
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 72 61 70 70 65 72 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 4e 6f 64 65 2e 69 64 3d 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 49 64 2c 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 4e 6f 64 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 64 5f 5f 61 64 68 2d 62 75 74 74 6f 6e 22 2c 22 61 64 5f 5f 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 4e 6f 64 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 48 61 6e 64 6c 65 72 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 4e 6f 64 65 3f 28 74 68 69 73 2e 63 6c 6f 73 65 42 74 6e 4e 6f 64 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 68 69 73 2e 67 Data Ascii: rapperNode.appendChild(e),this.closeBtnNode.id=this.closeBtnId,this.closeBtnNode.classList.add("ad__adh-button","ad__hidden"),this.closeBtnNode.addEventListener("click",this.closeBtnHandler)}return this.closeBtnNode?(this.closeBtnNode.classList.add(this.g
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 2e 73 68 6f 75 6c 64 42 72 65 61 6b 28 74 29 29 62 72 65 61 6b 3b 6f 3d 74 68 69 73 2e 77 72 61 70 70 65 72 53 65 65 64 4e 6f 64 65 28 29 2c 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 74 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 2c 74 68 69 73 2e 6e 6f 64 65 73 49 6e 73 65 72 74 65 64 2b 2b 2c 78 6e 28 74 68 69 73 2c 7a 6e 2c 4e 6e 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 70 61 72 65 6e 74 49 6e 64 65 78 2c 30 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 6f 3f 28 61 77 61 69 74 20 74 68 69 73 2e 67 65 74 53 65 72 76 69 63 65 28 22 76 69 65 77 70 6f 72 74 22 29 2e 6f 6e 49 6e 73 65 72 74 52 61 6e 67 65 41 73 79 6e 63 28 6f 29 2c 6f 29 3a 28 78 6e 28 74 68 69 73 2c 7a 6e 2c 4e 6e 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 70 61 72 65 6e 74 49 6e 64 Data Ascii: .shouldBreak(t))break;o=this.wrapperSeedNode(),e.insertBefore(o,t.nextSibling),this.nodesInserted++,xn(this,zn,Nn).call(this,e.parentIndex,0);break}}return o?(await this.getService("viewport").onInsertRangeAsync(o),o):(xn(this,zn,Nn).call(this,e.parentInd
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 6c 65 63 74 6f 72 28 22 64 69 76 2e 61 64 5f 5f 72 61 69 6c 2d 77 72 61 70 70 65 72 22 29 3f 6e 75 6c 6c 3a 28 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 65 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 64 5f 5f 68 31 30 30 70 22 29 2c 74 68 69 73 2e 77 72 61 70 70 65 72 50 61 72 65 6e 74 4e 6f 64 65 3d 74 68 69 73 2e 62 75 69 6c 64 57 72 61 70 70 65 72 45 6c 65 6d 65 6e 74 28 65 29 2c 4f 73 28 74 68 69 73 2c 24 73 2c 47 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 77 72 61 70 70 65 72 50 61 72 65 6e 74 4e 6f 64 65 29 2c 61 77 61 69 74 20 74 68 69 73 2e 69 6e 73 65 72 74 49 74 65 6d 28 29 2c 4f 73 28 74 68 69 73 2c 57 73 2c 71 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 77 72 61 70 70 65 72 50 61 72 65 6e 74 4e 6f 64 Data Ascii: lector("div.ad__rail-wrapper")?null:(this.parentNode=e,e.classList.add("ad__h100p"),this.wrapperParentNode=this.buildWrapperElement(e),Os(this,$s,Gs).call(this,this.wrapperParentNode),await this.insertItem(),Os(this,Ws,qs).call(this),this.wrapperParentNod
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 74 65 67 79 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 6e 75 6c 6c 2c 31 29 29 2c 74 28 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 65 2c 74 29 7b 65 2e 67 65 74 28 22 6d 61 6e 61 67 65 72 22 29 2e 6f 6e 55 70 64 61 74 65 28 28 74 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 67 65 74 28 22 76 69 65 77 70 6f 72 74 22 29 2e 73 65 74 43 6f 6e 66 69 67 28 74 2e 73 65 74 74 69 6e 67 73 29 2c 65 2e 67 65 74 28 22 62 61 74 63 68 22 29 2e 73 65 74 43 6f 6e 66 69 67 28 74 2e 73 65 74 74 69 6e 67 73 29 2c 65 2e 67 65 74 28 22 61 75 63 74 69 6f 6e 73 22 29 2e 73 65 74 43 6f 6e 66 69 67 28 74 2e 73 65 74 74 69 6e 67 73 29 7d 28 65 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 67 65 74 28 22 Data Ascii: tegy",JSON.stringify(e,null,1)),t()}async function Ca(e,t){e.get("manager").onUpdate((t=>{!function(e,t){e.get("viewport").setConfig(t.settings),e.get("batch").setConfig(t.settings),e.get("auctions").setConfig(t.settings)}(e,t),function(e){const t=e.get("
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 61 77 61 69 74 20 4e 6f 28 74 68 69 73 2c 47 6f 2c 63 63 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 4e 6f 28 74 68 69 73 2c 57 6f 2c 65 63 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 3d 65 3d 3e 7b 4e 6f 28 74 68 69 73 2c 24 6f 2c 69 63 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 2c 74 68 69 73 2e 72 65 63 69 70 65 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 73 74 72 61 74 65 67 79 2e 73 65 74 54 61 72 67 65 74 69 6e 67 28 5b 5b 22 72 75 6c 65 73 22 2c 74 68 69 73 2e 72 65 63 69 70 65 5d 5d 29 2c 4e 6f 28 74 68 69 73 2c 44 6f 2c 58 6f 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 75 70 64 61 74 65 3a 74 68 69 73 2e 75 70 64 61 74 65 43 6f 75 6e 74 2c 72 65 63 69 70 65 3a 74 68 69 73 2e 72 Data Ascii: ).call(this),await No(this,Go,cc).call(this),No(this,Wo,ec).call(this),this.queue.push=e=>{No(this,$o,ic).call(this,e)},this.recipe.length&&this.strategy.setTargeting([["rules",this.recipe]]),No(this,Do,Xo).call(this,{update:this.updateCount,recipe:this.r
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 6e 74 49 6e 64 65 78 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 63 28 74 68 69 73 2c 54 6c 29 5b 65 5d 3f 63 28 74 68 69 73 2c 54 6c 29 5b 65 5d 3a 30 3a 63 28 74 68 69 73 2c 54 6c 29 2e 67 6c 6f 62 61 6c 3f 63 28 74 68 69 73 2c 54 6c 29 2e 67 6c 6f 62 61 6c 3a 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 6c 28 65 2c 74 29 7b 69 66 28 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 74 68 65 20 73 61 6d 65 20 70 72 69 76 61 74 65 20 65 6c 65 6d 65 6e 74 73 20 74 77 69 63 65 20 6f 6e 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 6c 28 65 2c 74 2c 69 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 Data Ascii: ntIndex(e){return e?c(this,Tl)[e]?c(this,Tl)[e]:0:c(this,Tl).global?c(this,Tl).global:0}}function Rl(e,t){if(t.has(e))throw new TypeError("Cannot initialize the same private elements twice on an object")}function jl(e,t,i){if(!t.has(e))throw new TypeError
2024-04-19 13:12:27 UTC	16384	IN	Data Raw: 28 29 3d 3e 46 74 29 29 7d 28 65 2e 67 65 74 53 65 72 76 69 63 65 73 28 29 29 7d 28 65 29 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 70 61 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 54 61 29 2c 74 2e 70 75 73 68 28 7a 61 29 2c 74 2e 70 75 73 68 28 43 61 29 2c 74 2e 70 75 73 68 28 78 61 29 2c 74 7d 28 65 29 3b 4b 74 2e 69 6e 63 72 65 6d 65 6e 74 50 61 67 65 4c 6f 61 64 28 29 2c 61 77 61 69 74 20 6f 61 28 65 68 2c 65 29 2c 61 77 61 69 74 20 74 2e 65 78 65 63 75 74 65 28 65 29 2c 6f 61 28 77 69 6e 64 6f 77 2e 63 6d 64 6a 73 2e 71 75 65 75 65 2c 65 29 2c 65 2e 65 6d 69 74 28 7a 65 29 7d 64 65 73 74 72 6f 79 28 65 29 7b 65 68 2e 70 75 73 68 28 28 74 3d 3e 7b 74 2e 65 6d 69 74 28 74 65 2c 65 29 Data Ascii: ()=>Ft))}(e.getServices())}(e);const t=function(e){const t=new pa(e);return t.push(Ta),t.push(za),t.push(Ca),t.push(xa),t}(e);Kt.incrementPageLoad(),await oa(eh,e),await t.execute(e),oa(window.cmdjs.queue,e),e.emit(ze)}destroy(e){eh.push((t=>{t.emit(te,e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49751	104.26.8.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:26 UTC	555	OUT	GET /galleryloader.js HTTP/1.1 Host: mediatradecraft-com.videoplayerhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	677	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 19 Apr 2024 13:12:27 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Fri, 19 Apr 2024 14:12:27 GMT Location: https://btloader.com/tag?h=mediatradecraft-com&upapi=true Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mq4NrepwoXtwmA7IpJugp7KaPz128oJHQS%2B0dfa7TGrge6Cy7PWTSsgb2Vp7pO5TmzZWp%2B1zDmeJnFPssB7tO0oujFaXU31T7a3sG%2BJ659JENzpSxbay9jlpiyTTMgtBkbXIJF3ISwbPL0Mi8eq4PypBSzCi%2Bo2W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d2570ced653e7-ATL
2024-04-19 13:12:27 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49752	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 13:12:27 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=150652 Date: Fri, 19 Apr 2024 13:12:27 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49750	43.206.17.164	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:27 UTC	723	OUT	GET /app/castbox/player/id3921236?v=8.22.11&autoplay=0 HTTP/1.1 Host: castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:27 UTC	213	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Origin: * Vary: Accept-Encoding
2024-04-19 13:12:27 UTC	6478	IN	Data Raw: 31 39 34 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 70 6f 75 74 20 50 6f 64 63 61 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 73 74 62 6f 78 2e 66 6d 2f 61 70 70 2f 63 61 73 74 62 6f 78 2f 70 6c 61 79 65 72 2f 69 64 33 39 32 31 32 33 36 22 20 3e 0a 20 20 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 2f 2f 73 33 2e 63 61 73 74 62 6f 78 2e 66 6d 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 Data Ascii: 1946<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <title>Spout Podcast</title> <link rel="canonical" href="https://castbox.fm/app/castbox/player/id3921236" > <link rel="dns-prefetch" href="https//s3.castbox.fm"> <link rel="
2024-04-19 13:12:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49762	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	640	OUT	GET /mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fwww.justjared.com%2F&account_id=1247 HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:28 UTC	586	IN	HTTP/1.1 200 OK Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Date: Fri, 19 Apr 2024 13:12:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Sp-Mms-Node: ip-10-128-16-74 Strict-Transport-Security: max-age=15552000; includeSubdomains Cache-Control: max-age=3600, s-maxage=86400 X-Cache: Miss from cloudfront Via: 1.1 b0c9ad1d0c780fc497c9cf1d8077809a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: ipGGH7wf1eR9t0ffTK_6miDhULDZlh86hOOzFqbGqtsFqE9kq1Zg1w==
2024-04-19 13:12:28 UTC	208	IN	Data Raw: 63 61 0d 0a 7b 0a 20 20 22 73 74 61 67 65 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 20 3a 20 31 2c 0a 20 20 22 73 69 74 65 5f 69 64 22 20 3a 20 37 34 34 33 2c 0a 20 20 22 70 75 62 6c 69 63 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 20 3a 20 5b 20 31 2c 20 35 20 5d 2c 0a 20 20 22 6d 75 6c 74 69 5f 63 61 6d 70 61 69 67 6e 5f 65 6e 61 62 6c 65 64 22 20 3a 20 74 72 75 65 2c 0a 20 20 22 73 74 61 67 65 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 70 75 62 6c 69 63 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 20 3a 20 32 0a 7d 0d 0a Data Ascii: ca{ "stage_message_limit" : 1, "site_id" : 7443, "public_campaign_type_priority" : [ 1, 5 ], "multi_campaign_enabled" : true, "stage_campaign_type_priority" : [ ], "public_message_limit" : 2}
2024-04-19 13:12:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49764	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 13:12:28 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=150560 Date: Fri, 19 Apr 2024 13:12:28 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 13:12:28 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49758	104.22.75.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	549	OUT	GET /tag?h=mediatradecraft-com&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:28 UTC	445	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"f282c471f99b9e260222f7f0d6db09db" Last-Modified: Fri, 19 Apr 2024 13:08:19 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 69 Server: cloudflare CF-RAY: 876d257c6a8e4584-ATL
2024-04-19 13:12:28 UTC	924	IN	Data Raw: 37 64 65 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7de1!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 69 3d 6f 2e 6f 70 73 2e 70 6f 70 28 29 2c 6f 2e 74 72 79 73 2e 70 6f 70 28 29 Data Ascii: \|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continue;case 7:i=o.ops.pop(),o.trys.pop()
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 6e 2e 73 65 6e 74 Data Ascii: id 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDetectAdBlock()];case 1:return[2,n.sent
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 22 21 3d 3d 64 6f Data Ascii: }))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}();var d=function(){try{return""!==do
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 61 6d 65 22 3a 22 22 2c 20 22 76 69 65 77 22 3a 22 22 2c 20 22 73 69 6e 67 6c 65 5f 63 6c 69 63 6b 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 70 61 67 65 5f 76 69 65 77 73 5f 74 6f 5f 72 65 6e 64 65 72 22 3a 22 30 22 2c 20 22 70 72 65 6d 69 75 6d 5f 62 79 70 61 73 73 5f 6d 6f 64 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 68 61 72 64 5f 6d 65 73 73 61 67 65 5f 77 61 6c 6c 5f 6d 6f 64 65 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 20 22 61 6c 6c 6f 77 5f 72 65 6e 64 65 72 5f 74 6f 5f 61 61 5f 75 73 65 72 73 22 3a 66 61 6c 73 65 2c 20 22 6c 61 6e 64 69 6e 67 5f 74 65 78 74 5f 65 6e 22 3a 22 22 2c 20 22 63 74 61 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 72 22 3a 22 22 2c 20 22 66 6f 6e 74 5f 74 79 70 65 22 3a 22 22 2c 20 22 72 65 6e 64 Data Ascii: ame":"", "view":"", "single_click_enabled":false, "page_views_to_render":"0", "premium_bypass_mode_enabled":false, "hard_message_wall_mode_enabled":false, "allow_render_to_aa_users":false, "landing_text_en":"", "cta_button_color":"", "font_type":"", "rend
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 65 73 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 35 36 36 32 37 39 31 34 34 37 38 37 31 34 38 38 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 70 61 74 68 65 6f 73 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 36 32 35 33 37 36 30 39 35 31 33 35 33 33 34 34 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 73 6e 6f 77 2d 66 6f 72 65 63 61 73 74 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 74 72 75 65 2c 22 6d 65 22 3a 74 72 75 65 2c 22 77 22 3a 22 35 31 33 33 34 33 37 37 36 38 38 32 36 38 38 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 73 Data Ascii: ess.com":{"ce":true,"me":true,"w":"5662791447871488","widget":false,"a":false},"patheos.com":{"ce":true,"me":true,"w":"6253760951353344","widget":false,"a":false},"snow-forecast.com":{"ce":true,"me":true,"w":"5133437768826880","widget":false,"a":false},"s
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 68 2c 67 2c 6d 2c 76 2c 62 2c 79 2c 45 2c 4c 2c 41 2c 52 2c 54 2c 44 2c 56 2c 50 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 69 66 28 74 3d 7b 77 65 62 73 69 74 65 49 44 3a 76 6f 69 64 20 30 2c 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3a 21 31 2c 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3a 21 31 2c 77 69 64 67 65 74 3a 21 31 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5c 5d 5d 2f 67 2c 22 5c 5c 24 26 22 29 3b 76 61 72 20 6e 3d 6e 65 77 20 Data Ascii: eturn t(this,void 0,void 0,(function(){var t,h,g,m,v,b,y,E,L,A,R,T,D,V,P;return n(this,(function(n){switch(n.label){case 0:if(t={websiteID:void 0,contentEnabled:!1,mobileContentEnabled:!1,widget:!1},h=function(e,t){e=e.replace(/[\[\]]/g,"\\$&");var n=new
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 6e 20 6e 2e 73 65 6e 74 28 29 2c 5b 33 2c 35 5d 3b 63 61 73 65 20 35 3a 69 66 28 67 26 26 67 20 69 6e 20 43 29 4c 3d 43 5b 67 5d 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 4c 2e 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 4c 2e 77 65 62 73 69 74 65 5f 69 64 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 72 3d 4c 2e 63 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 4c 2e 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 4c 2e 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 4c 2e 6d 6f 62 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 77 69 64 67 65 74 3d 6e 75 6c 6c 21 Data Ascii: n n.sent(),[3,5];case 5:if(g&&g in C)L=C[g],t.websiteID=null!==(s=L.w)&&void 0!==s?s:L.website_id,t.contentEnabled=null!==(r=L.ce)&&void 0!==r?r:L.content_enabled,t.mobileContentEnabled=null!==(i=L.me)&&void 0!==i?i:L.mobile_content_enabled,t.widget=null!
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 29 2c 54 29 7d 72 65 74 75 72 6e 5b 32 2c 7b 73 69 74 65 49 6e 66 6f 3a 74 7d 5d 7d 7d 29 29 7d 29 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 50 7d 50 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 5f 5f 62 74 5f 74 61 67 5f 64 3d 7b 6f 72 67 49 44 3a 77 2c 64 6f 6d 61 69 6e 3a 79 2c 73 69 74 65 49 6e 66 6f 3a 65 2e 73 69 74 65 49 6e 66 6f 2c 61 70 69 44 6f 6d 61 69 6e 3a 5f 2c 76 65 72 73 69 6f 6e 3a 53 2c 77 65 62 73 69 74 65 73 44 61 74 61 3a 43 7d 7d 29 29 3b 63 6c 61 73 73 20 4e 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 44 65 63 Data Ascii: codeURIComponent(S),T)}return[2,{siteInfo:t}]}}))}))}();function k(){return P}P.then((function(e){window.__bt_tag_d={orgID:w,domain:y,siteInfo:e.siteInfo,apiDomain:_,version:S,websitesData:C}}));class N extends Error{constructor(e){super(e),this.name="Dec
2024-04-19 13:12:28 UTC	1369	IN	Data Raw: 20 74 3d 65 2e 6c 65 6e 67 74 68 25 74 68 69 73 2e 4c 43 4d 3b 65 2b 3d 74 3f 22 30 22 2e 72 65 70 65 61 74 28 74 68 69 73 2e 4c 43 4d 2d 74 29 3a 22 22 3b 6c 65 74 20 6e 3d 22 22 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 3d 74 68 69 73 2e 42 41 53 49 53 29 6e 2b 3d 74 68 69 73 2e 44 49 43 54 5b 70 61 72 73 65 49 6e 74 28 65 2e 73 75 62 73 74 72 28 74 2c 74 68 69 73 2e 42 41 53 49 53 29 2c 32 29 5d 3b 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 63 20 64 65 63 6f 64 65 28 65 29 7b 69 66 28 21 2f 5e 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2d 5f 5d 2b 24 2f 2e 74 65 73 74 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 4e 28 22 49 6e 76 61 6c 69 64 6c 79 20 65 6e 63 6f 64 65 64 20 42 61 73 65 36 34 55 52 4c 20 73 74 72 69 6e 67 22 29 3b Data Ascii: t=e.length%this.LCM;e+=t?"0".repeat(this.LCM-t):"";let n="";for(let t=0;t<e.length;t+=this.BASIS)n+=this.DICT[parseInt(e.substr(t,this.BASIS),2)];return n}static decode(e){if(!/^[A-Za-z0-9\-_]+$/.test(e))throw new N("Invalidly encoded Base64URL string");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49765	35.190.59.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	626	OUT	POST /api/ HTTP/1.1 Host: r.skimresources.com Connection: keep-alive Content-Length: 199 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:28 UTC	199	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 70 75 62 63 6f 64 65 25 32 32 25 33 41 25 32 32 39 33 30 32 39 58 31 35 34 37 30 36 30 25 32 32 25 32 43 25 32 32 70 61 67 65 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 25 32 32 25 32 43 25 32 32 64 6f 6d 61 69 6e 73 25 32 32 25 33 41 25 35 42 25 32 32 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 25 32 32 25 32 43 25 32 32 6a 75 73 74 6a 61 72 65 64 6a 72 2e 63 6f 6d 25 32 32 25 35 44 25 32 43 25 32 32 6c 69 6e 6b 5f 73 77 61 70 70 69 6e 67 25 32 32 25 33 41 74 72 75 65 25 37 44 Data Ascii: data=%7B%22pubcode%22%3A%2293029X1547060%22%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22domains%22%3A%5B%22instagram.com%22%2C%22justjaredjr.com%22%5D%2C%22link_swapping%22%3Atrue%7D
2024-04-19 13:12:29 UTC	427	IN	HTTP/1.1 200 OK Server: openresty/1.19.9.1 Date: Fri, 19 Apr 2024 13:12:28 GMT Content-Type: application/json Content-Length: 176 Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:29 UTC	176	IN	Data Raw: 7b 22 63 73 70 22 3a 6e 75 6c 6c 2c 22 63 6f 75 6e 74 72 79 5f 73 74 61 74 65 22 3a 22 47 41 22 2c 22 63 6f 6e 73 65 6e 74 22 3a 6e 75 6c 6c 2c 22 74 73 22 3a 31 37 31 33 35 33 32 33 34 38 2c 22 6c 69 6e 6b 5f 73 77 61 70 70 69 6e 67 5f 64 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 62 76 22 3a 22 34 2e 34 2e 30 2d 66 34 33 63 33 31 66 64 22 2c 22 6d 65 72 63 68 61 6e 74 5f 64 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 65 73 73 69 64 22 3a 6e 75 6c 6c 2c 22 67 75 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"csp":null,"country_state":"GA","consent":null,"ts":1713532348,"link_swapping_domains":[],"bv":"4.4.0-f43c31fd","merchant_domains":[],"country":"US","sessid":null,"guid":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49767	34.107.165.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	639	OUT	GET /api/identity?pid=2&rt=envelope HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:28 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49771	3.211.134.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	620	OUT	GET /idex/ie/any HTTP/1.1 Host: idx.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:28 UTC	587	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:28 GMT Content-Type: application/json Content-Length: 75 Connection: close trace-id: 1b05b6150f13540a Vary: Origin Expires: Sat, 20 Apr 2024 13:12:28 GMT Set-Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a; Max-Age=63072000; Expires=Sun, 19 Apr 2026 13:12:28 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 6 Cache-Control: max-age=86399, private Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true
2024-04-19 13:12:28 UTC	75	IN	Data Raw: 7b 22 75 6e 69 66 69 65 64 49 64 22 3a 22 35 66 65 30 54 66 72 53 78 4b 37 77 54 4f 6e 50 4a 41 47 62 55 63 75 34 44 34 4d 76 31 55 54 45 65 6a 38 33 70 47 32 51 50 31 68 37 5a 48 77 76 7a 6c 37 44 6d 70 4a 53 64 32 67 22 7d Data Ascii: {"unifiedId":"5fe0TfrSxK7wTOnPJAGbUcu4D4Mv1UTEej83pG2QP1h7ZHwvzl7DmpJSd2g"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49766	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:28 UTC	654	OUT	GET /track/rid?ttd_pid=casale&fmt=json&p=191040 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:28 UTC	451	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:28 GMT Content-Type: application/json Content-Length: 63 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://www.justjared.com cache-control: private expires: Sun, 19 May 2024 13:12:28 GMT vary: Origin
2024-04-19 13:12:28 UTC	63	IN	Data Raw: 7b 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 32 38 22 7d Data Ascii: {"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:28"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49777	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	580	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	715	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Fri, 19 Apr 2024 13:12:30 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 25e64a2aad1dc2c59854b23f004eae8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: FF5KUiCZKynLVnXgg6Icf_WM0mcK1cXtL4-53GR5BuBN5RcwbgaesQ==
2024-04-19 13:12:29 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49778	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	729	OUT	GET /wrapper/v2/meta-data?hasCsp=true&accountId=1247&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%2C%22ccpa%22%3A%7B%7D%7D&propertyId=7443&ch=null&scriptVersion=4.21.0&scriptType=unified HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	732	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 301 Connection: close Date: Fri, 19 Apr 2024 13:12:29 GMT X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, SP_SCRIPT_VERSION Access-Control-Allow-Methods: GET, PUT, POST, DELETE Cache-Control: max-age=3600, s-maxage=3600 Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 82ce5bab746a28b327ef72a8c64aab5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: regdKZYKaQ7nMP_TNq1j_4Y3VswgdippPVROEn8ArPn58FjBoQblQQ==
2024-04-19 13:12:29 UTC	301	IN	Data Raw: 7b 22 63 63 70 61 22 3a 7b 22 72 65 73 70 65 63 74 47 50 43 22 3a 74 72 75 65 2c 22 73 61 6d 70 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 6c 69 65 73 22 3a 74 72 75 65 2c 22 73 61 6d 70 6c 65 52 61 74 65 22 3a 31 7d 2c 22 67 64 70 72 22 3a 7b 22 61 64 64 69 74 69 6f 6e 73 43 68 61 6e 67 65 44 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 32 38 54 31 35 3a 31 31 3a 33 39 2e 37 38 30 5a 22 2c 22 67 65 74 4d 65 73 73 61 67 65 41 6c 77 61 79 73 22 3a 66 61 6c 73 65 2c 22 6c 65 67 61 6c 42 61 73 69 73 43 68 61 6e 67 65 44 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 32 38 54 31 35 3a 31 31 3a 33 39 2e 37 38 30 5a 22 2c 22 73 61 6d 70 6c 65 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 31 31 31 2c 22 5f 69 64 22 3a 22 35 66 32 39 62 61 61 38 62 38 65 30 35 63 37 Data Ascii: {"ccpa":{"respectGPC":true,"sample":false,"applies":true,"sampleRate":1},"gdpr":{"additionsChangeDate":"2023-12-28T15:11:39.780Z","getMessageAlways":false,"legalBasisChangeDate":"2023-12-28T15:11:39.780Z","sample":true,"version":111,"_id":"5f29baa8b8e05c7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49782	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	556	OUT	GET /app/castbox/static/css/slick.min.css HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	482	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3554 Connection: close Date: Tue, 26 Mar 2024 23:41:45 GMT Last-Modified: Tue, 15 May 2018 09:45:35 GMT ETag: "0d6ca18ef0a22b73a85f662e4ff167e4" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2967588067324d960497a293d3923e58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 1KfUoSNH_fUzvJVGQAzA4qZTrrQn5uw3dJEiOfIOR19vrFuQ81NSfQ== Age: 2035845
2024-04-19 13:12:29 UTC	3554	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 2e 73 6c 69 63 6b 2d 6c 69 73 74 2c 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 2c 2e 73 6c 69 63 6b 2d 74 72 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2c 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 74 72 61 63 6b 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 Data Ascii: @charset 'UTF-8';.slick-list,.slick-slider,.slick-track{position:relative;display:block}.slick-loading .slick-slide,.slick-loading .slick-track{visibility:hidden}.slick-slider{box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49784	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	539	OUT	GET /webstatic/js/manifest.173670c1.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9549 Connection: close Date: Fri, 12 Apr 2024 12:50:17 GMT Last-Modified: Fri, 12 Apr 2024 12:28:59 GMT ETag: "2dc861789c89c9b49b00c145a9c1f410" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4643e0c3ddc7d1b9cecf79d63967ddba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: -Vlf3Q0VQpaaigGFTnmvg9FV5U_xDPijkC-LID0Iux9kv6UT5pW5SA== Age: 606133
2024-04-19 13:12:29 UTC	9549	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 66 6f 72 28 76 61 72 20 63 2c 72 2c 64 3d 61 5b 30 5d 2c 69 3d 61 5b 31 5d 2c 6c 3d 61 5b 32 5d 2c 73 3d 30 2c 6d 3d 5b 5d 3b 73 3c 64 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 72 3d 64 5b 73 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 74 5b 72 5d 26 26 6d 2e 70 75 73 68 28 74 5b 72 5d 5b 30 5d 29 2c 74 5b 72 5d 3d 30 3b 66 6f 72 28 63 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 63 29 26 26 28 65 5b 63 5d 3d 69 5b 63 5d 29 3b 66 6f 72 28 66 26 26 66 28 61 29 3b 6d 2e 6c 65 6e 67 74 68 3b 29 6d 2e 73 68 Data Ascii: !function(e){function a(a){for(var c,r,d=a[0],i=a[1],l=a[2],s=0,m=[];s<d.length;s++)r=d[s],Object.prototype.hasOwnProperty.call(t,r)&&t[r]&&m.push(t[r][0]),t[r]=0;for(c in i)Object.prototype.hasOwnProperty.call(i,c)&&(e[c]=i[c]);for(f&&f(a);m.length;)m.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49783	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	542	OUT	GET /webstatic/js/page.vendor.6f338e46.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 220960 Connection: close Last-Modified: Thu, 22 Feb 2024 12:28:22 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 13:12:31 GMT ETag: "d0d2a4fc2a83166647088cb81e6ec62f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3c790b7740916e9710f9e5f1b3e1dd0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: WKIa9k8IEAiGNESEwKOzHBjOYaBNWHiGl8p9nirdq5LrcUL4o24hGA==
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 37 34 29 7d 2c 32 30 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 5b 7b 6c 6f 63 61 6c 65 3a 22 65 6e 22 2c 70 6c 75 72 61 6c 52 75 6c 65 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 74 72 69 6e 67 28 65 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[9],{0:function(e,t,n){"use strict";e.exports=n(274)},203:function(e,t,n){e.exports=function(){"use strict";return[{locale:"en",pluralRuleFunction:function(e,t){var n=String(e
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 20 79 65 61 72 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 7b 6f 74 68 65 72 3a 22 2b 7b 30 7d 20 79 22 7d 2c 70 61 73 74 3a 7b 6f 74 68 65 72 3a 22 2d 7b 30 7d 20 79 22 7d 7d 7d 2c 22 79 65 61 72 2d 73 68 6f 72 74 22 3a 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 59 65 61 72 22 2c 72 65 6c 61 74 69 76 65 3a 7b 30 3a 22 74 68 69 73 20 79 65 61 72 22 2c 31 3a 22 6e 65 78 74 20 79 65 61 72 22 2c 22 2d 31 22 3a 22 6c 61 73 74 20 79 65 61 72 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 7b 6f 74 68 65 72 3a 22 2b 7b 30 7d 20 79 22 7d 2c 70 61 73 74 3a 7b 6f 74 68 65 72 3a 22 2d 7b 30 7d 20 79 22 7d 7d 7d 2c 6d 6f 6e 74 68 3a 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 4d 6f 6e 74 68 22 2c 72 65 6c 61 74 69 76 Data Ascii: year"},relativeTime:{future:{other:"+{0} y"},past:{other:"-{0} y"}}},"year-short":{displayName:"Year",relative:{0:"this year",1:"next year","-1":"last year"},relativeTime:{future:{other:"+{0} y"},past:{other:"-{0} y"}}},month:{displayName:"Month",relativ
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 22 7d 2c 70 61 73 74 3a 7b 6f 6e 65 3a 22 68 61 63 65 20 7b 30 7d 20 6d 65 73 22 2c 6f 74 68 65 72 3a 22 68 61 63 65 20 7b 30 7d 20 6d 65 73 65 73 22 7d 7d 7d 2c 22 6d 6f 6e 74 68 2d 73 68 6f 72 74 22 3a 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 6d 22 2c 72 65 6c 61 74 69 76 65 3a 7b 30 3a 22 65 73 74 65 20 6d 65 73 22 2c 31 3a 22 65 6c 20 70 72 5c 78 66 33 78 69 6d 6f 20 6d 65 73 22 2c 22 2d 31 22 3a 22 65 6c 20 6d 65 73 20 70 61 73 61 64 6f 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 7b 6f 6e 65 3a 22 64 65 6e 74 72 6f 20 64 65 20 7b 30 7d 20 6d 22 2c 6f 74 68 65 72 3a 22 64 65 6e 74 72 6f 20 64 65 20 7b 30 7d 20 6d 22 7d 2c 70 61 73 74 3a 7b 6f 6e 65 3a 22 68 61 63 65 20 7b 30 7d 20 6d 22 2c 6f 74 68 65 72 3a 22 68 61 63 65 Data Ascii: "},past:{one:"hace {0} mes",other:"hace {0} meses"}}},"month-short":{displayName:"m",relative:{0:"este mes",1:"el pr\xf3ximo mes","-1":"el mes pasado"},relativeTime:{future:{one:"dentro de {0} m",other:"dentro de {0} m"},past:{one:"hace {0} m",other:"hace
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 61 6e 79 22 3a 22 6f 74 68 65 72 22 3a 65 3e 3d 30 26 26 65 3c 3d 31 3f 22 6f 6e 65 22 3a 22 6f 74 68 65 72 22 7d 2c 66 69 65 6c 64 73 3a 7b 79 65 61 72 3a 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 5c 75 30 39 33 35 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 2c 72 65 6c 61 74 69 76 65 3a 7b 30 3a 22 5c 75 30 39 30 37 5c 75 30 39 33 38 20 5c 75 30 39 33 35 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 2c 31 3a 22 5c 75 30 39 30 35 5c 75 30 39 31 37 5c 75 30 39 33 32 5c 75 30 39 33 65 20 5c 75 30 39 33 35 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 2c 22 2d 31 22 3a 22 5c 75 30 39 32 61 5c 75 30 39 33 66 5c 75 30 39 31 62 5c 75 30 39 33 32 5c 75 30 39 33 65 20 5c 75 30 39 33 35 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 Data Ascii: any":"other":e>=0&&e<=1?"one":"other"},fields:{year:{displayName:"\u0935\u0930\u094d\u0937",relative:{0:"\u0907\u0938 \u0935\u0930\u094d\u0937",1:"\u0905\u0917\u0932\u093e \u0935\u0930\u094d\u0937","-1":"\u092a\u093f\u091b\u0932\u093e \u0935\u0930\u094d\u
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 5c 75 30 34 34 30 5c 75 30 34 33 35 5c 75 30 34 33 37 20 7b 30 7d 20 5c 75 30 34 33 62 2e 22 2c 6f 74 68 65 72 3a 22 5c 75 30 34 34 37 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 35 5c 75 30 34 33 37 20 7b 30 7d 20 5c 75 30 34 33 33 2e 22 7d 2c 70 61 73 74 3a 7b 6f 6e 65 3a 22 7b 30 7d 20 5c 75 30 34 33 33 2e 20 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 34 22 2c 66 65 77 3a 22 7b 30 7d 20 5c 75 30 34 33 33 2e 20 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 34 22 2c 6d 61 6e 79 3a 22 7b 30 7d 20 5c 75 30 34 33 62 2e 20 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 34 22 2c 6f 74 68 65 72 3a 22 7b 30 7d 20 5c 75 30 34 33 33 Data Ascii: \u0440\u0435\u0437 {0} \u043b.",other:"\u0447\u0435\u0440\u0435\u0437 {0} \u0433."},past:{one:"{0} \u0433. \u043d\u0430\u0437\u0430\u0434",few:"{0} \u0433. \u043d\u0430\u0437\u0430\u0434",many:"{0} \u043b. \u043d\u0430\u0437\u0430\u0434",other:"{0} \u0433
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 24 74 79 70 65 6f 66 3a 66 2c 72 65 6e 64 65 72 3a 65 7d 7d 2c 74 2e 69 73 56 61 6c 69 64 45 6c 65 6d 65 6e 74 3d 4c 2c 74 2e 6c 61 7a 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 68 2c 5f 63 74 6f 72 3a 65 2c 5f 73 74 61 74 75 73 3a 2d 31 2c 5f 72 65 73 75 6c 74 3a 6e 75 6c 6c 7d 7d 2c 74 2e 6d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 6d 2c 74 79 70 65 3a 65 2c 63 6f 6d 70 61 72 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 7d 7d 2c 74 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 28 29 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 65 2c 74 29 7d 2c 74 2e 75 73 65 43 6f 6e 74 65 78 74 3d Data Ascii: $typeof:f,render:e}},t.isValidElement=L,t.lazy=function(e){return{$$typeof:h,_ctor:e,_status:-1,_result:null}},t.memo=function(e,t){return{$$typeof:m,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return A().useCallback(e,t)},t.useContext=
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 2c 72 3d 6f 2c 6e 3d 61 3b 62 72 65 61 6b 7d 75 3d 75 2e 73 69 62 6c 69 6e 67 7d 69 66 28 21 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 69 28 31 38 39 29 29 7d 7d 69 66 28 6e 2e 61 6c 74 65 72 6e 61 74 65 21 3d 3d 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 69 28 31 39 30 29 29 7d 69 66 28 33 21 3d 3d 6e 2e 74 61 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 69 28 31 38 38 29 29 3b 72 65 74 75 72 6e 20 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 75 72 72 65 6e 74 3d 3d 3d 6e 3f 65 3a 74 7d 28 65 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 74 3d 65 3b 3b 29 7b 69 66 28 35 3d 3d 3d 74 2e 74 61 67 7c 7c 36 3d 3d 3d 74 2e 74 61 67 29 72 65 74 75 72 6e 20 74 3b 69 66 28 74 2e 63 68 69 6c 64 29 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 Data Ascii: ,r=o,n=a;break}u=u.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e)))return null;for(var t=e;;){if(5===t.tag\|\|6===t.tag)return t;if(t.child)t.child.return=t,t
2024-04-19 13:12:30 UTC	15261	IN	Data Raw: 2e 73 70 6c 69 74 28 22 20 22 29 7d 2c 63 6f 6d 70 6f 73 69 74 69 6f 6e 53 74 61 72 74 3a 7b 70 68 61 73 65 64 52 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 73 3a 7b 62 75 62 62 6c 65 64 3a 22 6f 6e 43 6f 6d 70 6f 73 69 74 69 6f 6e 53 74 61 72 74 22 2c 63 61 70 74 75 72 65 64 3a 22 6f 6e 43 6f 6d 70 6f 73 69 74 69 6f 6e 53 74 61 72 74 43 61 70 74 75 72 65 22 7d 2c 64 65 70 65 6e 64 65 6e 63 69 65 73 3a 22 62 6c 75 72 20 63 6f 6d 70 6f 73 69 74 69 6f 6e 73 74 61 72 74 20 6b 65 79 64 6f 77 6e 20 6b 65 79 70 72 65 73 73 20 6b 65 79 75 70 20 6d 6f 75 73 65 64 6f 77 6e 22 2e 73 70 6c 69 74 28 22 20 22 29 7d 2c 63 6f 6d 70 6f 73 69 74 69 6f 6e 55 70 64 61 74 65 3a 7b 70 68 61 73 65 64 52 65 67 69 73 74 72 61 74 69 6f 6e 4e 61 6d 65 73 3a 7b 62 75 62 62 6c 65 Data Ascii: .split(" ")},compositionStart:{phasedRegistrationNames:{bubbled:"onCompositionStart",captured:"onCompositionStartCapture"},dependencies:"blur compositionstart keydown keypress keyup mousedown".split(" ")},compositionUpdate:{phasedRegistrationNames:{bubble
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 3d 21 31 3b 76 61 72 20 69 3d 6f 2e 62 61 73 65 51 75 65 75 65 2c 6c 3d 6f 2e 73 68 61 72 65 64 2e 70 65 6e 64 69 6e 67 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6c 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 69 29 7b 76 61 72 20 75 3d 69 2e 6e 65 78 74 3b 69 2e 6e 65 78 74 3d 6c 2e 6e 65 78 74 2c 6c 2e 6e 65 78 74 3d 75 7d 69 3d 6c 2c 6f 2e 73 68 61 72 65 64 2e 70 65 6e 64 69 6e 67 3d 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 28 75 3d 65 2e 61 6c 74 65 72 6e 61 74 65 29 26 26 28 6e 75 6c 6c 21 3d 3d 28 75 3d 75 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 28 75 2e 62 61 73 65 51 75 65 75 65 3d 6c 29 29 7d 69 66 28 6e 75 6c 6c 21 3d 3d 69 29 7b 75 3d 69 2e 6e 65 78 74 3b 76 61 72 20 73 3d 6f 2e 62 61 73 65 53 74 61 74 65 2c 63 3d 30 2c 64 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c Data Ascii: =!1;var i=o.baseQueue,l=o.shared.pending;if(null!==l){if(null!==i){var u=i.next;i.next=l.next,l.next=u}i=l,o.shared.pending=null,null!==(u=e.alternate)&&(null!==(u=u.updateQueue)&&(u.baseQueue=l))}if(null!==i){u=i.next;var s=o.baseState,c=0,d=null,f=null,
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 69 28 21 31 29 2c 6e 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 74 3d 74 5b 31 5d 2c 5b 64 69 28 6d 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 65 29 2c 5b 74 2c 65 5d 29 2c 6e 5d 7d 7d 2c 67 69 3d 7b 72 65 61 64 43 6f 6e 74 65 78 74 3a 72 6f 2c 75 73 65 43 61 6c 6c 62 61 63 6b 3a 66 69 2c 75 73 65 43 6f 6e 74 65 78 74 3a 72 6f 2c 75 73 65 45 66 66 65 63 74 3a 69 69 2c 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3a 73 69 2c 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3a 6c 69 2c 75 73 65 4d 65 6d 6f 3a 70 69 2c 75 73 65 52 65 64 75 63 65 72 3a 5a 6f 2c 75 73 65 52 65 66 3a 6e 69 2c 75 73 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 6f 28 4a 6f 29 7d 2c 75 73 65 44 65 62 75 67 56 61 6c 75 65 3a 63 69 2c 75 73 65 52 Data Ascii: i(!1),n=t[0];return t=t[1],[di(mi.bind(null,t,e),[t,e]),n]}},gi={readContext:ro,useCallback:fi,useContext:ro,useEffect:ii,useImperativeHandle:si,useLayoutEffect:li,useMemo:pi,useReducer:Zo,useRef:ni,useState:function(){return Zo(Jo)},useDebugValue:ci,useR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49781	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	542	OUT	GET /webstatic/js/page.player.e8375b72.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 224561 Connection: close Date: Thu, 18 Apr 2024 10:52:57 GMT Last-Modified: Mon, 18 Mar 2024 07:04:13 GMT ETag: "91546647bffbbd97c6398f9a4ab74c84" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 68a40c405a2ba280d0b148d00472963e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: q5fFePU8a8vlH6b1g-22zmF9lkzAy8e1dx8Tm7cag65_a5ZU7bGnVA== Age: 94773
2024-04-19 13:12:29 UTC	15850	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 5d 2c 5b 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 33 36 29 3b 74 2e 61 3d 6e 2e 61 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[69],[,function(e,t,r){"use strict";var n=r(36);t.a=n.a},function(e,t,r){"use strict";function n(){return(n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 74 68 65 20 6f 62 73 65 72 76 65 72 20 74 6f 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 2e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 65 2e 6e 65 78 74 26 26 65 2e 6e 65 78 74 28 68 28 29 29 7d 72 65 74 75 72 6e 20 72 28 29 2c 7b 75 6e 73 75 62 73 63 72 69 62 65 3a 74 28 72 29 7d 7d 7d 29 5b 6e 2e 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 7d 72 65 74 75 72 6e 20 62 28 7b 74 79 70 65 3a 69 2e 49 4e 49 54 7d 29 2c 28 6f 3d 7b 64 69 73 70 61 74 63 68 3a 62 2c 73 75 62 73 63 72 69 62 65 3a 6d 2c 67 65 74 53 74 61 74 Data Ascii: n(e){if("object"!==typeof e\|\|null===e)throw new TypeError("Expected the observer to be an object.");function r(){e.next&&e.next(h())}return r(),{unsubscribe:t(r)}}})[n.a]=function(){return this},e}return b({type:i.INIT}),(o={dispatch:b,subscribe:m,getStat
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 5b 74 68 69 73 2e 67 65 74 43 61 63 68 65 4b 65 79 28 29 5d 3d 65 7d 2c 70 2e 6c 6f 61 64 41 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e 70 72 6f 6d 69 73 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6f 3d 28 6e 2e 5f 5f 63 68 75 6e 6b 45 78 74 72 61 63 74 6f 72 2c 6e 2e 66 6f 72 77 61 72 64 65 64 52 65 66 2c 4f 62 6a 65 63 74 28 69 2e 61 29 28 6e 2c 5b 22 5f 5f 63 68 75 6e 6b 45 78 74 72 61 63 74 6f 72 22 2c 22 66 6f 72 77 61 72 64 65 64 52 65 66 22 5d 29 29 3b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6c 2e 72 65 71 75 69 72 65 41 73 79 6e 63 28 6f 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 72 28 6e 2c 7b 4c 6f 61 64 61 62 6c 65 3a 76 7d 29 3b Data Ascii: [this.getCacheKey()]=e},p.loadAsync=function(){var e=this;if(!this.promise){var n=this.props,o=(n.__chunkExtractor,n.forwardedRef,Object(i.a)(n,["__chunkExtractor","forwardedRef"]));this.promise=l.requireAsync(o).then((function(n){var o=r(n,{Loadable:v});
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 65 3a 21 30 2c 73 74 72 69 63 74 3a 21 30 2c 61 72 72 61 79 46 6f 72 6d 61 74 3a 22 6e 6f 6e 65 22 2c 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 3a 22 2c 22 7d 2c 74 29 29 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 3b 63 6f 6e 73 74 20 72 3d 72 3d 3e 7b 72 65 74 75 72 6e 20 74 2e 73 6b 69 70 4e 75 6c 6c 26 26 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 5b 72 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 29 7c 7c 74 2e 73 6b 69 70 45 6d 70 74 79 53 74 72 69 6e 67 26 26 22 22 3d 3d 3d 65 5b 72 5d 3b 76 61 72 20 6e 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 29 7b 63 61 73 65 22 69 6e 64 65 78 22 3a 72 65 74 75 72 6e 20 74 3d 3e 28 72 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 Data Ascii: e:!0,strict:!0,arrayFormat:"none",arrayFormatSeparator:","},t)).arrayFormatSeparator);const r=r=>{return t.skipNull&&(null===(n=e[r])\|\|void 0===n)\|\|t.skipEmptyString&&""===e[r];var n},n=function(e){switch(e.arrayFormat){case"index":return t=>(r,n)=>{const
2024-04-19 13:12:29 UTC	12209	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6f 2c 69 2c 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 66 6f 72 28 74 3d 30 2c 72 3d 61 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 3d 31 29 69 66 28 6f 3d 61 5b 74 5d 29 66 6f 72 28 69 20 69 6e 20 6f 29 6e 2e 63 61 6c 6c 28 6f 2c 69 29 26 26 28 65 5b 69 5d 3d 6f 5b 69 5d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 74 2e 68 6f 70 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 28 66 75 6e 63 74 Data Ascii: nction(e,t,r){"use strict";t.extend=function(e){var t,r,o,i,a=Array.prototype.slice.call(arguments,1);for(t=0,r=a.length;t<r;t+=1)if(o=a[t])for(i in o)n.call(o,i)&&(e[i]=o[i]);return e};var n=Object.prototype.hasOwnProperty;t.hop=n},function(e,t,r){(funct
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 72 2e 70 65 72 73 69 73 74 65 6e 74 53 75 62 6d 69 74 45 72 72 6f 72 73 2c 75 3d 72 2e 66 69 65 6c 64 73 2c 6c 3d 65 3b 75 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 3d 64 28 6c 2c 22 61 73 79 6e 63 45 72 72 6f 72 73 2e 22 2b 74 29 2c 6f 7c 7c 28 6c 3d 64 28 6c 2c 22 73 75 62 6d 69 74 45 72 72 6f 72 73 2e 22 2b 74 29 29 2c 6c 3d 64 28 6c 2c 22 66 69 65 6c 64 73 2e 22 2b 74 2b 22 2e 61 75 74 6f 66 69 6c 6c 65 64 22 29 2c 6e 7c 7c 28 6c 3d 73 28 6c 2c 22 66 69 65 6c 64 73 2e 22 2b 74 2b 22 2e 74 6f 75 63 68 65 64 22 29 29 3b 76 61 72 20 72 3d 69 28 65 2c 22 69 6e 69 74 69 61 6c 2e 22 2b 74 29 3b 6c 3d 72 3f 61 28 6c 2c 22 76 61 6c 75 65 73 2e 22 2b 74 2c 72 29 3a 64 28 6c 2c 22 76 61 6c 75 65 73 2e 22 2b 74 29 7d 29 29 3b 76 61 72 Data Ascii: r.persistentSubmitErrors,u=r.fields,l=e;u.forEach((function(t){l=d(l,"asyncErrors."+t),o\|\|(l=d(l,"submitErrors."+t)),l=d(l,"fields."+t+".autofilled"),n\|\|(l=s(l,"fields."+t+".touched"));var r=i(e,"initial."+t);l=r?a(l,"values."+t,r):d(l,"values."+t)}));var
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 3a 6f 2c 67 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 53 74 72 69 6e 67 28 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 3d 4e 75 6d 62 65 72 28 72 5b 30 5d 29 3d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 31 3d 3d 65 3f 22 6f 6e 65 22 3a 22 6f 74 68 65 72 22 3a 31 3d 3d 65 3f 22 6f 6e 65 22 3a 32 3d 3d 65 3f 22 74 77 6f 22 3a 6e 26 26 65 3e 3d 33 26 26 65 3c 3d 36 3f 22 66 65 77 22 3a 6e 26 26 65 3e 3d 37 26 26 65 3c 3d 31 30 3f 22 6d 61 6e 79 22 3a 22 6f 74 68 65 72 22 7d 2c 67 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 53 74 72 69 6e 67 28 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 3d 4e 75 6d 62 65 72 28 72 5b 30 5d 29 3d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 31 3d 3d 65 7c 7c 31 31 3d 3d 65 3f 22 6f 6e 65 22 3a Data Ascii: :o,ga:function(e,t){var r=String(e).split("."),n=Number(r[0])==e;return t?1==e?"one":"other":1==e?"one":2==e?"two":n&&e>=3&&e<=6?"few":n&&e>=7&&e<=10?"many":"other"},gd:function(e,t){var r=String(e).split("."),n=Number(r[0])==e;return t?1==e\|\|11==e?"one":
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 74 28 65 2c 6e 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 69 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 2c 65 7d 29 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 Data Ascii: rototype,r),n&&t(e,n),e}function o(e){return(o=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__\|\|Object.getPrototypeOf(e)})(e)}function i(e,t){return(i=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e})(e,t)}function a
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6e 75 6d 62 65 72 46 6f 72 6d 61 74 2e 66 6f 72 6d 61 74 28 65 2d 74 68 69 73 2e 6f 66 66 73 65 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 2f 28 5e 7c 5b 5e 5c 5c 5d 29 23 2f 67 2c 22 24 31 22 2b 74 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 23 2f 67 2c 22 23 22 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3b 72 65 74 75 72 6e 20 74 5b 65 5d 7c 7c 74 2e 6f 74 68 65 72 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 74 3d 65 2e 65 78 70 6f 72 74 73 3d 72 28 31 31 37 29 2e 64 65 66 61 75 6c 74 29 2e 64 65 Data Ascii: e){var t=this.numberFormat.format(e-this.offset);return this.string.replace(/(^\|[^\\])#/g,"$1"+t).replace(/\\#/g,"#")},s.prototype.getOption=function(e){var t=this.options;return t[e]\|\|t.other}},function(e,t,r){"use strict";(t=e.exports=r(117).default).de
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 3d 63 3b 76 61 72 20 6c 3d 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 74 2e 64 61 74 65 4e 6f 77 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 7b 6c 6f 63 61 6c 65 3a 22 65 6e 22 2c 70 6c 75 72 61 6c 52 75 6c 65 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 53 74 72 69 6e 67 28 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 3d 21 72 5b 31 5d 2c 6f 3d 4e 75 6d 62 65 72 28 72 5b 30 5d 29 3d Data Ascii: =c;var l=Date.now\|\|function(){return(new Date).getTime()};t.dateNow=l},function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default={locale:"en",pluralRuleFunction:function(e,t){var r=String(e).split("."),n=!r[1],o=Number(r[0])=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49786	18.155.1.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	534	OUT	GET /beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	521	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4515 Connection: close Date: Fri, 19 Apr 2024 13:12:30 GMT Last-Modified: Thu, 07 Dec 2023 12:13:41 GMT ETag: "a06e7a176f40dc26aa5e9567ac9d2d5e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 dd476b5dc73d3dd6d27c3cdd2f07140a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 X-Amz-Cf-Id: VTXoDCQxAHOC2ldNniZAUtwYFLObrY8TXQRoMhdbSpBBuY_xhxu2ng==
2024-04-19 13:12:29 UTC	4515	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 72 29 7b 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 26 26 28 65 2b 3d 22 3f 22 29 3b 76 61 72 20 74 3d 21 31 3b 28 2d 31 21 3d 65 2e 69 6e 64 65 78 4f 66 28 22 26 22 29 7c 7c 65 2e 6c 65 6e 67 74 68 2d 31 3e 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 26 26 28 74 3d 21 30 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 7b 76 61 72 20 69 3d 6e 5b 61 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 69 29 74 26 26 28 65 2b 3d 22 26 22 29 2c 74 3d 21 30 2c 65 2b 3d 63 2b 22 3d 22 2b 6f 28 69 5b 63 5d 2b 22 22 29 7d 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 Data Ascii: var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49785	104.16.80.73	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	622	OUT	GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.justjared.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:29 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19261 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.4.0" Last-Modified: Mon, 15 Apr 2024 22:09:58 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 876d25819b4078cc-ATL
2024-04-19 13:12:29 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 7c 7c 30 2c 72 3d 74 3b 72 65 74 75 72 6e 5b 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i+
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 72 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|r(a)}},168:function(e,t,n){"use strict";var i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arg
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d Data Ascii: .getAttribute("src");if(g&&"function"==typeof URLSearchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6d 29 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6c 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 6c 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 6c 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 6c 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 6c 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 6c 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 6c 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 6c 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 6c 29 3b 72 65 74 75 72 6e 20 6c 2e 66 69 72 73 74 50 61 69 6e 74 3d 5f 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 6c 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 5f 28 Data Ascii: &&Array.isArray(m)&&m.length>0&&(l.timingsV2={},l.versions.timings=2,l.dt=m[0].deliveryType,delete l.timings,t(m[0],l.timingsV2))}1===l.versions.timings&&t(c,l.timings),t(u,l.memory)}else O(l);return l.firstPaint=_("first-paint"),l.firstContentfulPaint=_(
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 50 29 3a 50 28 29 2c 77 3d 7b 69 64 3a 64 2c 75 72 6c 3a 65 28 29 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 74 72 69 67 67 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 41 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 41 29 7d 29 29 3b 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 64 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 78 3d Data Ascii: P):P(),w={id:d,url:e(),ts:(new Date).getTime(),triggered:!0}};"complete"===window.document.readyState?A():window.addEventListener("load",(function(){window.setTimeout(A)}));var R=function(){return L&&0===v.filter((function(e){return e.id===d})).length},x=
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 2e 75 72 6c 2c 45 2e 6c 63 70 2e 72 6c 64 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 72 6c 74 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 Data Ascii: .url,E.lcp.rld=c.resourceLoadDelay,E.lcp.rlt=c.resourceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(r=c.lcpResourceEntry)\|\|void 0===r?void 0:r.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?voi
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 67 65 6e 74 29 74 72 79 7b 76 61 72 20 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 63 26 26 63 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 26 26 70 61 72 73 65 49 6e 74 28 63 5b 31 5d 29 3c 38 31 26 26 28 61 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 61 26 26 69 29 7b 74 2e 73 74 3d 31 3b 76 61 72 20 75 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2c 73 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e Data Ascii: gent)try{var c=navigator.userAgent.match(/Chrome\/([0-9]+)/);c&&c[0].toLowerCase().indexOf("chrome")>-1&&parseInt(c[1])<81&&(a=!1)}catch(e){}if(navigator&&"function"==typeof navigator.sendBeacon&&a&&i){t.st=1;var u=JSON.stringify(t),s=navigator.sendBeacon
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 22 3b 74 72 79 7b 66 6f 72 28 3b 65 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 7b 76 61 72 20 69 3d 65 2c 72 3d 69 2e 69 64 3f 22 23 22 2b 69 2e 69 64 3a 75 28 69 29 2b 28 69 2e 63 6c 61 73 73 4c 69 73 74 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3f 22 2e 22 2b 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 Data Ascii: e.nodeType?t.toLowerCase():t.toUpperCase().replace(/^#/,"")},s=function(e,t){var n="";try{for(;e&&9!==e.nodeType;){var i=e,r=i.id?"#"+i.id:u(i)+(i.classList&&i.classList.value&&i.classList.value.trim()&&i.classList.value.trim().length?"."+i.classList.valu
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 28 74 2e 76 61 6c 75 65 2c 6e 29 2c 65 28 74 29 29 7d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 29 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 65 28 74 29 7d 3b 61 64 64 45 76 65 6e 74 4c Data Ascii: ds-improvement":"good"}(t.value,n),e(t))}},y=function(e){requestAnimationFrame((function(){return requestAnimationFrame((function(){return e()}))}))},h=function(e){var t=function(t){"pagehide"!==t.type&&"hidden"!==document.visibilityState\|\|e(t)};addEventL
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 69 2e 74 69 6d 65 53 74 61 6d 70 2c 6e 28 21 30 29 7d 29 29 7d 29 29 29 7d 29 29 7d 2c 52 3d 5b 2e 31 2c 2e 32 35 5d 2c 78 3d 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 2c 46 3d 6e 65 77 20 44 61 74 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 7c 7c 28 74 3d 72 2c 6e 3d 65 2c 69 3d 6e 65 77 20 44 61 74 65 2c 4d 28 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 4f 28 29 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 3e 3d 30 26 26 6e 3c 69 2d 46 29 7b 76 61 72 20 65 3d 7b 65 6e 74 72 79 54 79 70 65 3a 22 66 69 72 73 74 2d 69 6e Data Ascii: ortAllChanges),y((function(){r.value=performance.now()-i.timeStamp,n(!0)}))})))}))},R=[.1,.25],x={passive:!0,capture:!0},F=new Date,I=function(e,r){t\|\|(t=r,n=e,i=new Date,M(removeEventListener),O())},O=function(){if(n>=0&&n<i-F){var e={entryType:"first-in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49789	18.64.236.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	525	OUT	GET /services.js HTTP/1.1 Host: js.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	651	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 120685 Connection: close Date: Fri, 19 Apr 2024 13:12:30 GMT x-amz-meta-access-control-allow-origin: * x-amz-meta-version: 3.88.29 Cache-Control: max-age=7200 x-amz-meta-timing-allow-origin: * Last-Modified: Wed, 17 Apr 2024 18:09:31 GMT x-amz-version-id: CJ3oNVZ.oRzmzfGe.g6A32Ems4zgVJB1 ETag: "1912ece13149e0baa6d45dde7b95852c" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 787da2b9a155d00032c7d0d9a8c2a7dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P1 X-Amz-Cf-Id: 2hJjYMRu-Sa923hbKMg2IclFREK5mZQtrZCS2zLSeqDe6q25k-_S3A==
2024-04-19 13:12:29 UTC	15733	IN	Data Raw: 2f 2a 2a 20 40 70 72 65 73 65 72 76 65 20 43 6f 70 79 72 69 67 68 74 20 47 75 6d 47 75 6d 20 28 63 29 20 32 30 32 34 20 40 20 33 2e 38 38 2e 32 39 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 64 6f 63 75 6d 65 6e 74 2c 6e 3d 22 67 75 6d 67 75 6d 2e 63 6f 6d 22 2c 72 3d 22 68 74 74 70 73 3a 2f 2f 22 2c 61 3d 22 22 2e 63 6f 6e 63 61 74 28 72 29 2e 63 6f 6e 63 61 74 28 6e 29 2c 69 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2c 22 67 32 2e 22 29 2e 63 6f 6e 63 61 74 28 6e 29 2c 6f 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2c 22 6a 73 2e 22 29 2e 63 6f 6e 63 61 74 28 6e 29 2c 63 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2c 22 63 2e 22 29 2e 63 6f 6e 63 61 74 28 6e 29 2c 73 3d 22 22 2e 63 6f 6e Data Ascii: /** @preserve Copyright GumGum (c) 2024 @ 3.88.29 */!function(){"use strict";var e=window,t=document,n="gumgum.com",r="https://",a="".concat(r).concat(n),i="".concat(r,"g2.").concat(n),o="".concat(r,"js.").concat(n),c="".concat(r,"c.").concat(n),s="".con
2024-04-19 13:12:29 UTC	5256	IN	Data Raw: 72 65 6e 74 2c 69 3d 72 2e 63 61 6c 6c 62 61 63 6b 2c 6f 3d 72 2e 6b 65 65 70 2c 63 3d 72 2e 74 79 70 65 2c 73 3d 72 2e 64 65 6c 61 79 2c 6c 3d 6e 75 6c 6c 3b 69 66 28 21 65 65 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 42 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 6c 2e 6f 6e 6c 6f 61 64 3d 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6c 2e 6f 6e 65 72 72 6f 72 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 66 6f 72 28 75 28 6e 75 6c 6c 29 2c 74 26 26 22 65 72 72 6f 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 77 65 28 22 47 47 2d 45 52 52 4f 52 22 2c 65 29 3b 6c 2e 6c 61 73 74 43 68 69 6c 64 3b 29 6a 65 28 6c 2c 6c 2e 6c 61 73 74 43 68 69 6c 64 29 3b 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6f 26 26 6a 65 28 21 31 Data Ascii: rent,i=r.callback,o=r.keep,c=r.type,s=r.delay,l=null;if(!ee(a))throw new Error(B);function u(e){l.onload=l.onreadystatechange=l.onerror=e}function d(t){for(u(null),t&&"error"===t.type&&we("GG-ERROR",e);l.lastChild;)je(l,l.lastChild);l.parentNode&&o&&je(!1
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 69 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 65 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 6e 5b 30 5d 2c 74 2e 72 69 67 68 74 3d 6e 5b 31 5d 7c 7c 6e 5b 30 5d 2c 74 2e 62 6f 74 74 6f 6d 3d 6e 5b 32 5d 7c 7c 6e 5b 30 5d 2c 74 2e 6c 65 66 74 3d 6e 5b 33 5d 7c 7c 6e 5b 31 5d 7c 7c 6e 5b 30 5d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 51 65 28 6e 2c 72 29 7b 76 61 72 20 61 3d 28 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 65 2c 69 3d 59 74 28 61 29 2c 6f 3d 7b 7d 2c 63 3d 6e 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 73 3d 42 65 28 61 29 2c 6c 3d 72 7c 7c 7b 74 6f 70 3a 73 2e 6f 66 66 73 65 74 54 6f 70 2c 6c Data Ascii: i}function Ze(e){var t={},n=e.split(" ");return t.top=n[0],t.right=n[1]\|\|n[0],t.bottom=n[2]\|\|n[0],t.left=n[3]\|\|n[1]\|\|n[0],t}function Qe(n,r){var a=(n.ownerDocument\|\|t).defaultView\|\|e,i=Yt(a),o={},c=n.getBoundingClientRect(),s=Be(a),l=r\|\|{top:s.offsetTop,l
2024-04-19 13:12:29 UTC	3307	IN	Data Raw: 37 37 38 36 35 36 65 35 29 72 65 74 75 72 6e 7b 75 73 70 43 6f 6e 73 65 6e 74 3a 22 31 2d 2d 2d 22 7d 3b 69 66 28 21 4b 28 74 29 29 69 66 28 65 2e 5f 5f 75 73 70 61 70 69 26 26 4b 28 65 2e 5f 5f 75 73 70 61 70 69 29 29 74 3d 65 2e 5f 5f 75 73 70 61 70 69 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 6c 2c 75 3d 65 3b 21 6c 3b 29 7b 74 72 79 7b 75 2e 66 72 61 6d 65 73 2e 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 26 26 28 6c 3d 75 29 7d 63 61 74 63 68 28 65 29 7b 77 65 28 22 47 47 2d 45 52 52 4f 52 22 2c 22 61 63 63 65 73 73 69 6e 67 20 77 69 6e 64 6f 77 20 66 72 61 6d 65 73 20 77 68 69 6c 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 55 53 50 41 50 49 22 2c 65 29 7d 69 66 28 75 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 75 3d 75 2e 70 61 72 65 Data Ascii: 778656e5)return{uspConsent:"1---"};if(!K(t))if(e.__uspapi&&K(e.__uspapi))t=e.__uspapi;else{for(var l,u=e;!l;){try{u.frames.__uspapiLocator&&(l=u)}catch(e){we("GG-ERROR","accessing window frames while looking for USPAPI",e)}if(u===window.top)break;u=u.pare
2024-04-19 13:12:29 UTC	2864	IN	Data Raw: 64 42 75 79 49 64 2c 69 3d 66 2e 73 69 7a 65 2c 6f 3d 6f 6e 28 29 2c 63 3d 6f 2e 76 70 77 2c 73 3d 6f 2e 76 70 68 2c 6c 3d 6f 2e 73 63 77 2c 75 3d 6f 2e 73 63 68 2c 64 3d 69 26 26 69 5b 30 5d 2c 70 3d 69 26 26 69 5b 31 5d 2c 67 3d 63 65 28 6f 2c 7b 74 3a 42 72 28 29 2c 70 69 3a 33 2c 73 69 3a 6e 2c 62 66 3a 69 2e 6a 6f 69 6e 28 22 78 22 29 2c 64 65 61 6c 49 64 3a 61 6e 28 22 67 67 64 65 61 6c 22 29 2c 6d 61 78 77 3a 64 2c 6d 61 78 68 3a 70 2c 61 64 42 75 79 49 64 3a 72 2c 65 41 64 42 75 79 49 64 3a 61 2c 76 77 3a 63 2c 76 68 3a 73 2c 73 77 3a 6c 2c 73 68 3a 75 7d 29 2c 22 22 2e 63 6f 6e 63 61 74 28 71 6e 28 29 2c 22 2f 68 62 69 64 2f 69 6d 70 22 29 2e 63 6f 6e 63 61 74 28 68 65 28 67 29 29 29 2c 68 29 7d 76 61 72 20 5a 6e 3d 54 72 28 29 3b 66 75 6e 63 74 Data Ascii: dBuyId,i=f.size,o=on(),c=o.vpw,s=o.vph,l=o.scw,u=o.sch,d=i&&i[0],p=i&&i[1],g=ce(o,{t:Br(),pi:3,si:n,bf:i.join("x"),dealId:an("ggdeal"),maxw:d,maxh:p,adBuyId:r,eAdBuyId:a,vw:c,vh:s,sw:l,sh:u}),"".concat(qn(),"/hbid/imp").concat(he(g))),h)}var Zn=Tr();funct
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 2e 32 39 22 2c 74 3a 42 72 28 29 2c 72 66 3a 44 72 28 29 2c 66 73 3a 63 6e 28 29 2c 63 65 3a 6c 6e 28 29 2c 70 3a 56 6e 28 43 72 28 29 29 2c 61 69 3a 57 72 28 29 2c 64 70 3a 4d 72 28 29 2c 61 3a 5b 74 5d 2c 61 63 3a 6f 3f 6f 2e 6f 63 63 75 72 72 65 6e 63 65 73 3a 7b 7d 2c 76 70 3a 7b 69 69 3a 65 2e 74 6f 70 26 26 74 6f 70 21 3d 3d 65 2c 77 3a 6d 2e 77 69 64 74 68 2c 68 3a 6d 2e 68 65 69 67 68 74 7d 2c 73 63 3a 7b 77 3a 65 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 2c 68 3a 65 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 2c 64 3a 65 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 7d 2c 74 72 3a 63 2e 69 6e 56 69 65 77 52 61 74 69 6f 7c 7c 6e 75 6c 6c 2c 6f 67 75 3a 77 74 28 29 7d 2c 79 3d 7b 61 64 49 64 3a 6c 2c 65 6e 63 72 79 70 74 65 64 41 64 49 64 Data Ascii: .29",t:Br(),rf:Dr(),fs:cn(),ce:ln(),p:Vn(Cr()),ai:Wr(),dp:Mr(),a:[t],ac:o?o.occurrences:{},vp:{ii:e.top&&top!==e,w:m.width,h:m.height},sc:{w:e.screen.width,h:e.screen.height,d:e.devicePixelRatio\|\|1},tr:c.inViewRatio\|\|null,ogu:wt()},y={adId:l,encryptedAdId
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 74 72 61 63 6b 69 6e 67 49 64 3d 65 7c 7c 74 2e 74 72 61 63 6b 69 6e 67 49 64 7d 66 75 6e 63 74 69 6f 6e 20 48 72 28 29 7b 72 65 74 75 72 6e 20 54 72 28 29 2e 70 75 62 6c 69 73 68 65 72 49 64 7c 7c 7e 7e 65 2e 67 67 70 69 64 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 72 28 29 7b 76 61 72 20 74 3d 54 72 28 29 3b 72 65 74 75 72 6e 28 46 74 28 29 3f 74 6f 70 2e 67 67 70 76 69 64 3a 65 2e 67 67 70 76 69 64 29 7c 7c 74 2e 70 76 69 64 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 56 72 28 65 29 7b 76 61 72 20 74 3d 54 72 28 29 3b 72 65 74 75 72 6e 20 74 2e 70 76 69 64 7c 7c 21 65 3f 77 65 28 22 50 61 67 65 56 69 65 77 49 44 20 61 6c 72 65 61 64 79 20 64 65 66 69 6e 65 64 20 6f 72 20 61 72 67 75 6d 65 6e 74 20 69 73 20 6e 75 6c 6c 2e 22 29 3a 4e 6e 28 Data Ascii: trackingId=e\|\|t.trackingId}function Hr(){return Tr().publisherId\|\|~~e.ggpid\|\|null}function Fr(){var t=Tr();return(Ft()?top.ggpvid:e.ggpvid)\|\|t.pvid\|\|null}function Vr(e){var t=Tr();return t.pvid\|\|!e?we("PageViewID already defined or argument is null."):Nn(
2024-04-19 13:12:29 UTC	16384	IN	Data Raw: 6f 64 75 63 74 50 72 65 66 69 78 2c 22 6c 6f 61 64 22 5d 2e 6a 6f 69 6e 28 22 2e 22 29 2c 7b 61 64 3a 51 65 28 61 2e 63 6f 6e 74 61 69 6e 65 72 29 2c 69 64 3a 61 2e 64 61 74 61 2e 61 64 62 75 79 69 64 2c 69 6d 61 67 65 3a 61 2e 65 6c 65 6d 65 6e 74 2c 63 6f 6e 74 61 69 6e 65 72 3a 61 2e 63 6f 6e 74 61 69 6e 65 72 7d 29 2c 6f 2e 68 61 73 73 75 72 76 65 79 26 26 66 61 28 6f 2e 61 64 62 75 79 69 64 2c 61 2e 70 72 6f 64 75 63 74 50 72 65 66 69 78 2c 61 2e 63 6f 6e 74 61 69 6e 65 72 2c 61 2e 63 6c 6f 73 65 62 74 6e 29 2c 6e 26 26 6e 2e 74 72 61 6e 73 70 61 72 65 6e 74 42 61 63 6b 67 72 6f 75 6e 64 26 26 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 26 26 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 7a 65 28 72 2e 63 6f 6e 74 65 Data Ascii: oductPrefix,"load"].join("."),{ad:Qe(a.container),id:a.data.adbuyid,image:a.element,container:a.container}),o.hassurvey&&fa(o.adbuyid,a.productPrefix,a.container,a.closebtn),n&&n.transparentBackground&&r.contentDocument&&r.contentDocument.body&&ze(r.conte
2024-04-19 13:12:29 UTC	6696	IN	Data Raw: 75 26 26 76 65 28 74 2e 61 64 2e 64 75 2c 7b 6a 63 73 69 3a 72 7d 29 2c 75 72 6c 63 6c 6f 73 65 3a 74 2e 61 64 2e 63 6c 73 75 72 6c 2c 75 72 6c 69 6d 70 72 65 73 73 69 6f 6e 3a 74 2e 61 64 2e 69 6d 70 75 72 6c 26 26 76 65 28 74 2e 61 64 2e 69 6d 70 75 72 6c 2c 7b 6a 63 73 69 3a 72 2c 6e 73 3a 61 2c 72 68 6e 3a 69 7d 29 2c 75 72 6c 69 6e 66 6f 3a 74 2e 61 64 2e 69 6e 66 6f 2c 75 72 6c 68 6f 76 65 72 3a 74 2e 61 64 2e 68 6f 76 65 72 2c 76 35 30 75 72 6c 3a 74 2e 61 64 2e 76 35 30 75 72 6c 26 26 76 65 28 74 2e 61 64 2e 76 35 30 75 72 6c 2c 7b 6a 63 73 69 3a 72 7d 29 2c 76 31 30 30 75 72 6c 3a 74 2e 61 64 2e 76 31 30 30 75 72 6c 26 26 76 65 28 74 2e 61 64 2e 76 31 30 30 75 72 6c 2c 7b 6a 63 73 69 3a 72 7d 29 2c 61 70 72 3a 74 2e 61 64 2e 61 70 72 2c 65 74 72 Data Ascii: u&&ve(t.ad.du,{jcsi:r}),urlclose:t.ad.clsurl,urlimpression:t.ad.impurl&&ve(t.ad.impurl,{jcsi:r,ns:a,rhn:i}),urlinfo:t.ad.info,urlhover:t.ad.hover,v50url:t.ad.v50url&&ve(t.ad.v50url,{jcsi:r}),v100url:t.ad.v100url&&ve(t.ad.v100url,{jcsi:r}),apr:t.ad.apr,etr
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 65 71 75 65 73 74 65 64 28 29 20 26 26 20 21 6d 61 6e 61 67 65 72 41 6c 72 65 61 64 79 44 65 66 69 6e 65 64 28 29 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 6c 6f 61 64 41 64 4d 61 6e 61 67 65 72 2c 20 33 36 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 6a 50 41 4d 2e 72 65 71 75 65 73 74 65 64 20 3d 20 21 30 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 53 63 72 69 70 74 28 6a 70 4c 69 62 2c 20 63 72 65 61 74 65 49 6e 73 74 61 6e 63 65 29 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 74 72 79 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 5c 22 53 74 61 72 74 20 6c 6f 61 64 69 6e 67 20 47 47 20 41 64 4d 61 6e Data Ascii: equested() && !managerAlreadyDefined()) {\n return setTimeout(loadAdManager, 36);\n }\n jPAM.requested = !0;\n loadScript(jpLib, createInstance);\n }\n try {\n console.log(\"Start loading GG AdMan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49793	31.13.65.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	533	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	1677	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: ac8ed21fbae6c0e0123b2636b57502c5 ETag: "6130d8dc12325bea90f1c4a0f0f84165" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: rI7SH7rmwOASOyY2tXUCxQ== Expires: Fri, 19 Apr 2024 13:25:13 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" X-Content-Type-Options: nosniff
2024-04-19 13:12:29 UTC	851	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-19 13:12:29 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-19 13:12:29 UTC	3092	IN	Data Raw: 2a 31 37 31 33 35 33 31 39 31 33 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 32 39 30 36 34 35 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1713531913,,JIT Construction: v1012906458,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49797	130.211.23.194	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	568	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Fri, 19 Apr 2024 13:12:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49798	172.67.68.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	576	OUT	GET /core/4.5.4/accessibility.js HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.justjared.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	927	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2204800 last-modified: Tue, 13 Jun 2023 11:16:57 GMT etag: W/"809ab690e89dd91:0" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52125 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SvVkI4jxw012CKvyaDfUpx9qdPgrOMkA4mknGrmqzN9YimHoXfegr0vZd%2Fxszj465b5bGUTcS9e%2F8ymNESgwJ4fzo4PKHmMIY9rG7px6RkknQH0J5B0ooMRahVK39xXEqGc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25825ec853aa-ATL
2024-04-19 13:12:29 UTC	442	IN	Data Raw: 37 63 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 63 6c 61 73 73 20 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 66 28 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 3b 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 3d 65 2e 61 31 31 79 3d 74 68 69 73 2c 65 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 34 2e 35 2e 34 22 2c 74 68 69 73 2e 47 65 74 44 65 66 61 75 6c 74 50 72 6f 70 28 29 2c 74 68 69 73 2e 53 65 74 50 6f 6c 79 66 69 6c 6c 73 28 29 2c 74 68 69 73 2e 73 65 74 4e 61 74 69 76 65 50 72 6f 74 6f 74 79 70 65 73 28 29 2c 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 69 73 44 65 76 22 2c 21 31 29 2c 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 Data Ascii: 7c00!function(e,t,i){class n{constructor(){if(this.instance)return this.instance;this.instance=e.a11y=this,e.version=this.version="4.5.4",this.GetDefaultProp(),this.SetPolyfills(),this.setNativePrototypes(),this.AssignConst("isDev",!1),this.AssignConst(
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 44 65 66 61 75 6c 74 50 72 6f 70 28 22 46 75 6e 63 74 69 6f 6e 22 29 2c 31 3d 3d 65 2e 6e 61 67 69 73 68 4f 6e 54 6f 70 7c 7c 30 3d 3d 65 2e 6e 61 67 69 73 68 4f 6e 54 6f 70 3f 28 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 6e 61 67 69 73 68 4f 6e 54 6f 70 22 2c 65 2e 6e 61 67 69 73 68 4f 6e 54 6f 70 29 2c 74 68 69 73 2e 69 6e 69 74 28 29 29 3a 74 68 69 73 2e 49 73 4e 61 67 69 63 68 4f 6e 54 6f 70 28 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 6e 61 67 69 73 68 4f 6e 54 6f 70 22 2c 65 29 7d 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 49 4e 44 6c 6f 67 28 22 49 73 4e 61 67 69 63 68 4f 6e 54 6f 70 20 66 61 69 6c 65 64 20 22 2c 65 29 2c 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 6e 61 67 69 73 Data Ascii: DefaultProp("Function"),1==e.nagishOnTop\|\|0==e.nagishOnTop?(this.AssignConst("nagishOnTop",e.nagishOnTop),this.init()):this.IsNagichOnTop().then((e=>{this.AssignConst("nagishOnTop",e)})).catch((e=>{INDlog("IsNagichOnTop failed ",e),this.AssignConst("nagis
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 61 67 65 2e 67 65 74 49 74 65 6d 28 22 49 4e 44 63 75 73 74 6f 6d 4d 65 6e 75 4c 61 6e 67 2d 66 75 6c 6c 2d 49 53 4f 22 29 7c 7c 65 2e 4d 65 6e 75 6c 61 6e 67 29 2c 65 2e 73 65 74 50 6f 73 69 74 69 6f 6e 28 65 2e 50 6f 73 69 74 69 6f 6e 29 2c 74 68 69 73 2e 69 6e 69 74 57 72 61 70 28 29 2c 74 68 69 73 2e 4c 6f 61 64 44 65 66 61 75 6c 74 73 28 28 28 29 3d 3e 7b 69 66 28 21 65 2e 69 73 4d 65 74 68 6f 64 73 53 65 74 26 26 4f 62 6a 65 63 74 2e 49 4e 44 6b 65 79 73 28 65 2e 6d 6f 64 65 29 2e 6c 65 6e 67 74 68 29 7b 69 66 28 65 2e 69 73 50 65 6e 64 69 6e 67 3d 21 30 2c 74 68 69 73 2e 61 31 31 79 42 74 6e 26 26 28 74 68 69 73 2e 61 31 31 79 42 74 6e 2e 64 69 73 61 62 6c 65 64 3d 21 30 29 2c 74 68 69 73 2e 69 73 49 66 72 61 6d 65 26 26 65 2e 61 31 31 79 2e 6e 61 Data Ascii: age.getItem("INDcustomMenuLang-full-ISO")\|\|e.Menulang),e.setPosition(e.Position),this.initWrap(),this.LoadDefaults((()=>{if(!e.isMethodsSet&&Object.INDkeys(e.mode).length){if(e.isPending=!0,this.a11yBtn&&(this.a11yBtn.disabled=!0),this.isIframe&&e.a11y.na
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 49 4e 44 64 61 74 61 46 69 6e 69 73 68 65 64 22 2c 28 69 3d 3e 7b 65 2e 69 73 50 65 6e 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 72 65 6d 6f 76 65 4c 6f 61 64 65 72 28 29 2c 74 68 69 73 2e 61 31 31 79 42 74 6e 26 26 28 74 68 69 73 2e 61 31 31 79 42 74 6e 2e 64 69 73 61 62 6c 65 64 3d 21 31 29 2c 74 28 21 30 29 7d 29 29 7d 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 74 68 69 73 2e 49 4e 44 4c 6f 67 28 22 20 67 65 74 41 31 31 79 4d 65 6e 75 20 66 61 69 6c 65 64 20 3a 20 22 2b 65 2c 22 65 72 72 22 29 2c 69 28 21 31 29 7d 29 29 7d 2e 49 4e 44 62 69 6e 64 28 74 68 69 73 29 29 7d 73 65 74 4c 6f 61 64 65 72 28 29 7b 69 66 28 65 2e 61 31 31 79 2e 6e 61 67 69 63 68 4f 6e 54 6f 70 7c 7c 21 74 68 69 73 2e 61 31 31 79 42 74 6e 29 72 65 74 Data Ascii: tListener("INDdataFinished",(i=>{e.isPending=!1,this.removeLoader(),this.a11yBtn&&(this.a11yBtn.disabled=!1),t(!0)}))})).catch((e=>{this.INDLog(" getA11yMenu failed : "+e,"err"),i(!1)}))}.INDbind(this))}setLoader(){if(e.a11y.nagichOnTop\|\|!this.a11yBtn)ret
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 29 7b 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 76 61 6c 69 64 4d 65 74 68 6f 64 73 22 2c 7b 73 6f 75 6e 64 72 65 64 65 72 3a 22 73 65 74 4e 61 76 69 67 61 74 69 6f 6e 22 2c 6b 65 79 62 6f 61 72 64 3a 22 73 65 74 4e 61 76 69 67 61 74 69 6f 6e 22 2c 73 6d 61 72 74 6e 61 76 3a 22 73 65 74 4e 61 76 69 67 61 74 69 6f 6e 22 2c 76 69 72 74 75 61 6c 4b 65 79 62 6f 61 72 64 3a 22 73 65 74 56 69 72 74 75 61 6c 4b 65 79 62 6f 61 72 64 22 2c 64 69 63 74 69 6f 6e 61 72 79 3a 22 73 65 74 44 69 63 74 69 6f 6e 61 72 79 22 2c 74 65 78 74 72 65 61 64 65 72 3a 22 73 65 74 54 65 78 74 52 65 61 64 65 72 22 2c 74 65 78 74 6d 61 67 6e 69 66 69 65 72 3a 22 73 65 74 74 65 78 74 6d 61 67 6e 69 66 69 65 72 22 2c 76 6f 69 63 65 63 6d 64 3a 22 73 65 74 56 6f 69 63 65 43 Data Ascii: ){this.AssignConst("validMethods",{soundreder:"setNavigation",keyboard:"setNavigation",smartnav:"setNavigation",virtualKeyboard:"setVirtualKeyboard",dictionary:"setDictionary",textreader:"setTextReader",textmagnifier:"settextmagnifier",voicecmd:"setVoiceC
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 7b 64 61 74 61 3a 73 7d 29 7b 74 72 79 7b 6c 65 74 20 69 3d 65 2e 61 31 31 79 2e 50 61 72 73 65 4a 53 4f 4e 28 73 29 2c 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 22 61 63 74 69 6f 6e 22 69 6e 28 69 7c 7c 7b 7d 29 3b 61 26 26 28 77 69 6e 64 6f 77 2e 49 4e 44 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 2c 74 28 21 28 21 61 7c 7c 21 69 2e 61 63 74 69 6f 6e 29 29 29 7d 63 61 74 63 68 28 65 29 7b 69 28 21 31 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 49 4e 44 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 2e 49 4e 44 62 69 6e 64 28 74 68 69 73 29 29 Data Ascii: it new Promise(((t,i)=>{function n({data:s}){try{let i=e.a11y.ParseJSON(s),a="object"==typeof i&&"action"in(i\|\|{});a&&(window.INDremoveEventListener("message",n),t(!(!a\|\|!i.action)))}catch(e){i(!1)}}if(window.INDaddEventListener("message",n.INDbind(this))
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 70 6f 73 74 46 72 61 6d 65 73 28 73 2c 7b 61 63 74 69 6f 6e 3a 6e 2e 73 65 74 49 6e 49 66 72 61 6d 65 2c 6d 6f 64 65 73 3a 65 2e 6d 6f 64 65 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 73 65 74 49 6e 49 66 72 61 6d 65 3a 6c 65 74 20 74 3d 4f 62 6a 65 63 74 2e 49 4e 44 65 6e 74 72 69 65 73 28 69 2e 6d 6f 64 65 73 29 2e 49 4e 44 66 69 6c 74 65 72 28 28 28 5b 74 2c 69 5d 29 3d 3e 74 68 69 73 2e 69 73 4d 6f 64 65 56 61 6c 69 64 28 69 29 26 26 21 28 74 20 69 6e 28 65 2e 6d 6f 64 65 7c 7c 7b 7d 29 26 26 65 2e 6d 6f 64 65 5b 74 5d 3d 3d 69 29 29 29 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 65 5b 74 5b 30 5d 5d 3d 74 5b 31 5d 2c 65 29 29 2c 7b 7d 29 3b 4f 62 6a 65 63 74 2e 49 4e 44 6b 65 79 73 28 74 29 2e 6c 65 Data Ascii: length&&this.postFrames(s,{action:n.setInIframe,modes:e.mode});break;case n.setInIframe:let t=Object.INDentries(i.modes).INDfilter((([t,i])=>this.isModeValid(i)&&!(t in(e.mode\|\|{})&&e.mode[t]==i))).reduce(((e,t)=>(e[t[0]]=t[1],e)),{});Object.INDkeys(t).le
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 7b 76 61 72 20 73 3d 74 5b 6e 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 29 7b 76 61 72 20 61 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 61 74 74 72 69 62 75 74 65 73 22 3a 61 3d 22 73 65 74 41 74 74 72 69 62 75 74 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 74 79 6c 65 22 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2e 73 74 79 6c 65 2c 73 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 22 65 76 65 6e 74 73 22 3a 61 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3b 62 72 65 61 6b 7d 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 73 29 69 5b 61 5d 28 6f 2c 73 Data Ascii: eateElement(e);if(t&&"object"==typeof t)for(var n in t){var s=t[n];if("object"==typeof s){var a;switch(n){case"attributes":a="setAttribute";break;case"style":Object.assign(i.style,s);continue;case"events":a="addEventListener";break}for(var o in s)i[a](o,s
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 74 68 69 73 2e 68 61 6e 64 6c 65 47 6c 6f 62 61 6c 43 6c 69 63 6b 29 29 7d 52 65 62 75 69 6c 64 28 29 7b 64 65 6c 65 74 65 20 65 2e 61 31 31 79 2c 65 2e 4d 65 6e 75 3d 6e 75 6c 6c 2c 65 2e 69 66 72 61 6d 65 3d 6e 75 6c 6c 2c 65 2e 69 73 44 65 66 69 6e 65 64 3d 21 31 2c 6e 65 77 20 6e 7d 47 65 74 44 65 66 61 75 6c 74 50 72 6f 70 28 74 29 7b 69 66 28 21 65 2e 69 66 72 61 6d 65 7c 7c 65 2e 69 66 72 61 6d 65 26 26 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 69 66 72 61 6d 65 29 29 7b 6c 65 74 20 74 3d 65 2e 69 66 72 61 6d 65 3d 74 68 69 73 2e 43 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 74 69 74 6c 65 3a 22 49 4e 44 20 2d 20 44 65 66 61 75 6c Data Ascii: this.handleGlobalClick))}Rebuild(){delete e.a11y,e.Menu=null,e.iframe=null,e.isDefined=!1,new n}GetDefaultProp(t){if(!e.iframe\|\|e.iframe&&!window.document.body.contains(e.iframe)){let t=e.iframe=this.CreateElement("iframe",{attributes:{title:"IND - Defaul
2024-04-19 13:12:29 UTC	1369	IN	Data Raw: 74 61 69 6e 73 22 2c 22 70 72 65 70 65 6e 64 22 2c 22 61 70 70 65 6e 64 22 5d 7d 2c 45 76 65 6e 74 54 61 72 67 65 74 3a 7b 70 72 6f 74 6f 74 79 70 65 3a 5b 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 22 64 69 73 70 61 74 63 68 45 76 65 6e 74 22 2c 22 69 6e 73 65 72 74 42 65 66 6f 72 65 22 2c 22 73 65 74 41 74 74 72 69 62 75 74 65 22 2c 22 67 65 74 41 74 74 72 69 62 75 74 65 22 2c 22 61 70 70 65 6e 64 43 68 69 6c 64 22 2c 22 63 6f 6e 74 61 69 6e 73 22 2c 22 70 72 65 70 65 6e 64 22 2c 22 61 70 70 65 6e 64 22 5d 7d 2c 77 69 6e 64 6f 77 3a 7b 63 6f 6e 73 6f 6c 65 3a 5b 22 61 73 73 65 72 74 22 2c 22 64 65 62 75 67 22 2c 22 65 72 72 6f 72 22 2c 22 77 61 72 6e 22 2c 22 69 6e 66 6f 22 Data Ascii: tains","prepend","append"]},EventTarget:{prototype:["removeEventListener","addEventListener","dispatchEvent","insertBefore","setAttribute","getAttribute","appendChild","contains","prepend","append"]},window:{console:["assert","debug","error","warn","info"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49790	151.101.12.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	531	OUT	GET /widgets.js HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93065 Last-Modified: Mon, 11 Dec 2023 17:20:28 GMT ETag: "824beb891744db98ccbd3a456e59e0f7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=1800 Content-Type: application/javascript; charset=utf-8 Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Accept-Ranges: bytes Date: Fri, 19 Apr 2024 13:12:29 GMT X-Served-By: cache-iad-kjyo7100044-IAD, cache-pdk-katl1840092-PDK X-Cache: HIT, HIT Vary: Accept-Encoding TW-CDN: FT
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 28 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 2e 77 69 64 67 65 74 73 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 65 64 26 26 77 69 6e 64 6f 77 2e 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 26 26 77 69 6e 64 6f 77 2e 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 28 29 2c 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 Data Ascii: Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|(window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.loaded&&window.twttr.widgets.load&&window.twttr.widgets.load(),window.__twtt
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 74 5d 3b 69 66 28 30 21 3d 3d 6e 29 7b 69 66 28 6e 29 7b 76 61 72 20 69 3d 65 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 65 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 65 2e 74 79 70 65 29 2c 6f 3d 65 26 26 65 2e 74 61 72 67 65 74 26 26 65 2e 74 61 72 67 65 74 2e 73 72 63 2c 73 3d 6e 65 77 20 45 72 72 6f 72 28 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 74 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 69 2b 22 3a 20 22 2b 6f 2b 22 29 22 29 3b 73 2e 74 79 70 65 3d 69 2c 73 2e 72 65 71 75 65 73 74 3d 6f 2c 6e 5b 31 5d 28 73 29 7d 72 5b 74 5d 3d 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 75 7d 29 7d 2c 31 32 65 34 Data Ascii: t];if(0!==n){if(n){var i=e&&("load"===e.type?"missing":e.type),o=e&&e.target&&e.target.src,s=new Error("Loading chunk "+t+" failed.\n("+i+": "+o+")");s.type=i,s.request=o,n[1](s)}r[t]=void 0}};var c=setTimeout(function(){s({type:"timeout",target:u})},12e4
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 5d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 6d 61 74 63 68 28 2f 5c 73 28 5b 61 2d 7a 41 2d 5a 5d 2b 29 2f 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 4f 62 6a 65 63 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 76 61 72 20 65 3b 69 66 28 21 73 28 74 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 29 72 65 74 75 72 6e 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 20 69 6e 20 74 29 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 Data Ascii: ]);return t}function o(t){return{}.toString.call(t).match(/\s([a-zA-Z]+)/)[1].toLowerCase()}function s(t){return t===Object(t)}function a(t){var e;if(!s(t))return!1;if(Object.keys)return!Object.keys(t).length;for(e in t)if(t.hasOwnProperty(e))return!1;ret
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 29 3f 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 28 5c 77 2b 29 5c 2f 28 3f 3a 6c 69 6b 65 73 7c 66 61 76 6f 72 69 74 65 73 29 2f 69 2c 68 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 28 5c 77 2b 29 5c 2f 6c 69 73 74 73 5c 2f 28 5b 5c 77 2d 25 5d 2b 29 2f 69 2c 70 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 69 5c 2f 6c 69 76 65 5c 2f 28 5c 64 2b 29 2f 69 2c 6d 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 73 65 74 74 69 6e 67 73 2f 69 2c 76 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 6c 6f 63 61 6c 68 6f 73 74 7c 70 6c 61 74 66 6f 72 6d 29 5c Data Ascii: )?twitter\.com\/(\w+)\/(?:likes\|favorites)/i,h=/^https?:\/\/(?:www\.)?twitter\.com\/(\w+)\/lists\/([\w-%]+)/i,p=/^https?:\/\/(?:www\.)?twitter\.com\/i\/live\/(\d+)/i,m=/^https?:\/\/syndication\.twitter\.com\/settings/i,v=/^https?:\/\/(localhost\|platform)\
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 2e 74 65 73 74 28 74 29 26 26 52 65 67 45 78 70 2e 24 31 7d 2c 6c 69 6b 65 73 53 63 72 65 65 6e 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 2e 74 65 73 74 28 74 29 26 26 52 65 67 45 78 70 2e 24 31 7d 2c 6c 69 73 74 53 63 72 65 65 6e 4e 61 6d 65 41 6e 64 53 6c 75 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3b 69 66 28 68 2e 74 65 73 74 28 74 29 29 7b 65 3d 52 65 67 45 78 70 2e 24 31 2c 6e 3d 52 65 67 45 78 70 2e 24 32 3b 74 72 79 7b 72 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 7b 6f 77 6e 65 72 53 63 72 65 65 6e 4e 61 6d 65 3a 65 2c 73 6c 75 67 3a 72 7c 7c 6e 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 65 76 Data Ascii: {return c.test(t)&&RegExp.$1},likesScreenName:function(t){return l.test(t)&&RegExp.$1},listScreenNameAndSlug:function(t){var e,n,r;if(h.test(t)){e=RegExp.$1,n=RegExp.$2;try{r=decodeURIComponent(n)}catch(t){}return{ownerScreenName:e,slug:r\|\|n}}return!1},ev
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 72 2e 74 6f 52 65 61 6c 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 6e 2e 63 6f 6e 63 61 74 28 69 29 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6c 6f 63 61 74 69 6f 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 72 28 22 5f 5f 74 77 74 74 72 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 30 29 2c 69 3d 2f 5c 62 28 5b 5c 77 2d 5f 5d 2b 29 5c 62 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5c Data Ascii: 2);return function(){var i=r.toRealArray(arguments);return t.apply(e,n.concat(i))}}},function(t,e){t.exports=location},function(t,e,n){var r=n(47);t.exports=new r("__twttr")},function(t,e,n){var r=n(0),i=/\b([\w-_]+)\b/g;function o(t){return new RegExp("\
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 30 39 29 2c 69 3d 6e 28 32 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 64 61 74 61 2d 74 77 69 74 74 65 72 2d 65 78 74 72 61 63 74 65 64 2d 22 2b 69 2e 67 65 6e 65 72 61 74 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 6e 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 74 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 22 74 72 75 65 22 29 2c 65 7d 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 Data Ascii: ction(t,e,n){var r=n(109),i=n(21);t.exports=function(){var t="data-twitter-extracted-"+i.generate();return function(e,n){return r(e,n).filter(function(e){return!e.hasAttribute(t)}).map(function(e){return e.setAttribute(t,"true"),e})}}},function(t,e){funct
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 29 2c 61 2e 61 73 42 6f 6f 6c 65 61 6e 28 66 2e 64 6e 74 29 26 26 69 2e 73 65 74 4f 6e 28 29 2c 68 3d 73 2e 67 65 74 45 78 70 65 72 69 6d 65 6e 74 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 2e 61 64 64 57 69 64 67 65 74 28 6e 28 66 2c 6c 2c 76 6f 69 64 20 30 2c 74 29 29 7d 29 2c 64 26 26 68 2e 74 68 65 6e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 21 31 29 7d 29 2c 68 29 3a 28 64 26 26 75 2e 61 73 79 6e 63 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 21 31 29 7d 29 2c 72 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 73 70 65 63 69 66 69 65 64 2e 20 45 78 70 65 63 74 65 64 3a 20 22 2b 63 29 29 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: ),a.asBoolean(f.dnt)&&i.setOn(),h=s.getExperiments().then(function(t){return o.addWidget(n(f,l,void 0,t))}),d&&h.then(d,function(){d(!1)}),h):(d&&u.async(function(){d(!1)}),r.reject(new Error("No target element specified. Expected: "+c)))}}},function(t,e,
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 6e 22 2c 74 29 26 26 28 6e 3d 65 2c 65 3d 74 2c 74 3d 31 29 2c 72 2e 64 65 66 65 72 28 74 2c 73 28 65 2c 61 29 2c 6e 29 2c 61 2e 70 72 6f 6d 69 73 65 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 29 2c 69 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 2c 73 3d 7b 7d 2c 61 3d 6f 2e 63 6f 6e 74 61 69 6e 73 28 72 2e 68 72 65 66 2c 22 74 77 5f 64 65 62 75 67 3d 74 72 75 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 69 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 2b 69 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 7c 7c 2b 6e 65 77 20 44 61 74 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 69 66 28 69 2e 63 6f Data Ascii: n",t)&&(n=e,e=t,t=1),r.defer(t,s(e,a),n),a.promise}}},function(t,e,n){var r=n(8),i=n(1),o=n(0),s={},a=o.contains(r.href,"tw_debug=true");function u(){}function c(){}function d(){return i.performance&&+i.performance.now()\|\|+new Date}function f(t,e){if(i.co
2024-04-19 13:12:29 UTC	1379	IN	Data Raw: 72 65 74 69 6e 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 3d 74 7c 7c 6f 29 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3f 74 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3e 3d 31 2e 35 3a 21 21 74 2e 6d 61 74 63 68 4d 65 64 69 61 26 26 74 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 34 34 64 70 69 29 22 29 2e 6d 61 74 63 68 65 73 7d 2c 61 6e 79 49 45 3a 75 2c 69 65 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2f 4d 53 49 45 20 39 2f 2e 74 65 73 74 28 74 3d 74 7c 7c 61 29 7d 2c 69 65 31 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2f 4d 53 49 45 20 31 30 2f 2e 74 65 73 74 28 74 3d 74 7c 7c 61 29 Data Ascii: retina:function(t){return(t=t\|\|o).devicePixelRatio?t.devicePixelRatio>=1.5:!!t.matchMedia&&t.matchMedia("only screen and (min-resolution: 144dpi)").matches},anyIE:u,ie9:function(t){return/MSIE 9/.test(t=t\|\|a)},ie10:function(t){return/MSIE 10/.test(t=t\|\|a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49800	35.190.59.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	347	OUT	GET /api/ HTTP/1.1 Host: r.skimresources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	403	IN	HTTP/1.1 200 OK Server: openresty/1.19.9.1 Date: Fri, 19 Apr 2024 13:12:29 GMT Content-Type: application/json Content-Length: 149 Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:29 UTC	149	IN	Data Raw: 7b 22 6d 65 72 63 68 61 6e 74 5f 64 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 67 75 69 64 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 74 22 3a 6e 75 6c 6c 2c 22 63 73 70 22 3a 6e 75 6c 6c 2c 22 73 65 73 73 69 64 22 3a 6e 75 6c 6c 2c 22 74 73 22 3a 31 37 31 33 35 33 32 33 34 39 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 73 74 61 74 65 22 3a 22 47 41 22 2c 22 62 76 22 3a 22 34 2e 34 2e 30 2d 66 34 33 63 33 31 66 64 22 7d Data Ascii: {"merchant_domains":[],"guid":null,"consent":null,"csp":null,"sessid":null,"ts":1713532349,"country":"US","country_state":"GA","bv":"4.4.0-f43c31fd"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49801	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	432	OUT	GET /mms/v2/get_site_data?hasCsp=true&href=https%3A%2F%2Fwww.justjared.com%2F&account_id=1247 HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	593	IN	HTTP/1.1 200 OK Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Date: Fri, 19 Apr 2024 13:12:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true X-Sp-Mms-Node: ip-10-128-16-74 Strict-Transport-Security: max-age=15552000; includeSubdomains Cache-Control: max-age=3600, s-maxage=86400 X-Cache: Hit from cloudfront Via: 1.1 4bdac961192507d044006fb8cf5c0d22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: s6zgzLBr8Vf8UfG3Qm9jCNAOIGPCILVdMUPd9Qm4FoyxaYehNdMU8w== Age: 1
2024-04-19 13:12:29 UTC	208	IN	Data Raw: 63 61 0d 0a 7b 0a 20 20 22 73 74 61 67 65 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 20 3a 20 31 2c 0a 20 20 22 73 69 74 65 5f 69 64 22 20 3a 20 37 34 34 33 2c 0a 20 20 22 70 75 62 6c 69 63 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 20 3a 20 5b 20 31 2c 20 35 20 5d 2c 0a 20 20 22 6d 75 6c 74 69 5f 63 61 6d 70 61 69 67 6e 5f 65 6e 61 62 6c 65 64 22 20 3a 20 74 72 75 65 2c 0a 20 20 22 73 74 61 67 65 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 70 75 62 6c 69 63 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 20 3a 20 32 0a 7d 0d 0a Data Ascii: ca{ "stage_message_limit" : 1, "site_id" : 7443, "public_campaign_type_priority" : [ 1, 5 ], "multi_campaign_enabled" : true, "stage_campaign_type_priority" : [ ], "public_message_limit" : 2}
2024-04-19 13:12:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49788	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	530	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	295	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:29 GMT Content-Type: application/javascript Content-Length: 23678 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "bvEECQq4Zy6gU9J/qv1O6Q==" Expires: Fri, 26 Apr 2024 13:12:29 GMT Vary: Accept-Encoding
2024-04-19 13:12:30 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-04-19 13:12:30 UTC	7589	IN	Data Raw: 5b 65 5d 26 26 28 74 3d 54 65 5b 65 5d 2c 6e 2e 70 75 73 68 28 74 29 2c 64 65 6c 65 74 65 20 54 65 5b 65 5d 29 3b 69 66 28 31 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 79 28 6e 5b 30 5d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 79 28 6e 5b 65 5d 29 7d 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 5b 5d 3b 66 6f 72 28 6e 3d 6a 65 2e 73 6c 69 63 65 28 30 29 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 3d 6e 5b 65 5d 2c 59 28 74 29 7c 7c 72 2e 70 75 73 68 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 6e 65 28 29 3b 65 6c 73 65 20 66 6f 72 28 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 3d 72 5b 65 5d 2c 43 65 2e 70 Data Ascii: [e]&&(t=Te[e],n.push(t),delete Te[e]);if(1==n.length&&y(n[0]),n.length>1)for(e=0;e<n.length;e++)y(n[e])}},re=function(){var e,t,n,r=[];for(n=je.slice(0),e=0;e<n.length;e++)t=n[e],Y(t)\|\|r.push(t);if(0===r.length)ne();else for(e=0;e<r.length;e++)t=r[e],Ce.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49733	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	573	OUT	GET /unified/4.21.0/custom.1a28bbe027bd69b90733.bundle.js HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:29 UTC	558	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9252 Connection: close Date: Thu, 18 Apr 2024 17:56:26 GMT Last-Modified: Tue, 16 Apr 2024 19:41:57 GMT ETag: "471430b604a249135cf6f76826ff3c59" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1488b4bac45e20ef7f7f89e2bdb01b4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: GDtYcH6PLDh0QNu1GiZTWMcSb5ug-3u4HUwVfPeGbE44cp3PQgM3ow== Age: 69364
2024-04-19 13:12:29 UTC	9252	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 73 70 5f 77 70 5f 6a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 5f 73 70 5f 77 70 5f 6a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 31 38 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 3b 72 28 32 37 29 2c 72 28 35 34 29 2c 72 28 31 30 32 29 2c 72 28 35 31 29 2c 72 28 34 39 29 2c 72 28 35 30 29 2c 72 28 33 30 29 2c 72 28 33 31 29 2c 72 28 33 32 29 2c 72 28 31 38 36 29 2c 72 28 31 38 37 29 2c 72 28 35 33 29 2c 72 28 35 35 29 2c 72 28 36 38 29 2c 72 28 33 35 29 2c 72 28 37 32 29 2c 72 28 33 33 29 2c 72 28 32 32 29 2c 72 28 32 38 29 2c 72 Data Ascii: (window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[2],{182:function(e,t,r){"use strict";r.r(t),r.d(t,"default",(function(){return m}));r(27),r(54),r(102),r(51),r(49),r(50),r(30),r(31),r(32),r(186),r(187),r(53),r(55),r(68),r(35),r(72),r(33),r(22),r(28),r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49803	54.85.178.249	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	400	OUT	GET /idex/ie/any HTTP/1.1 Host: idx.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a
2024-04-19 13:12:30 UTC	259	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 13:12:29 GMT Content-Type: application/json Content-Length: 93 Connection: close trace-id: 3666e410ddf01c83 Vary: Origin Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-19 13:12:30 UTC	93	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 68 74 74 70 53 74 61 74 75 73 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 20 6f 72 69 67 69 6e 20 68 65 61 64 65 72 20 66 6f 75 6e 64 2e 22 2c 22 65 72 72 6f 72 43 6f 64 65 22 3a 22 62 61 64 5f 72 65 71 75 65 73 74 22 7d 5d 7d Data Ascii: {"errors":[{"httpStatus":400,"message":"No origin header found.","errorCode":"bad_request"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49802	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	382	OUT	GET /track/rid?ttd_pid=casale&fmt=json&p=191040 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	208	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:29 GMT Content-Type: application/json Content-Length: 63 Connection: close server: Kestrel cache-control: private expires: Sun, 19 May 2024 13:12:29 GMT
2024-04-19 13:12:30 UTC	63	IN	Data Raw: 7b 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 32 39 22 7d Data Ascii: {"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:29"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49809	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	372	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Fri, 19 Apr 2024 07:23:14 GMT Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 920cb8f0750772f464cdcc505bb79b62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: L_bTBcVcD9hf1Vd1ruaA2-CDsW4UFtSLo1J8mBQcNvAgkp8ZNXuvCA== Age: 20957
2024-04-19 13:12:30 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49810	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:29 UTC	1482	OUT	GET /wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1247%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22ccpa%22%3A%7B%22alwaysDisplayDNS%22%3Afalse%2C%22hasLocalData%22%3Afalse%2C%22targetingParams%22%3A%7B%7D%7D%2C%22custom%22%3A%7B%22targetingParams%22%3A%7B%7D%7D%2C%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D&localState=null&metadata=%7B%22ccpa%22%3A%7B%22applies%22%3Atrue%7D%2C%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=4414543004414543003154&scriptVersion=4.21.0&scriptType=unified HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	731	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 20144 Connection: close Date: Fri, 19 Apr 2024 13:12:30 GMT X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, SP_SCRIPT_VERSION Access-Control-Allow-Methods: GET, PUT, POST, DELETE Cache-Control: max-age=0, s-maxage=1200 Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6c50fdb4a3331a94bc43c7d77415865a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: XvnbNKxAetmwVuLr48V_zruJEUeyuBgCv8ZI-_oo6HN1wQMcrUY15w==
2024-04-19 13:12:30 UTC	15653	IN	Data Raw: 7b 22 70 72 6f 70 65 72 74 79 49 64 22 3a 37 34 34 33 2c 22 70 72 6f 70 65 72 74 79 50 72 69 6f 72 69 74 79 44 61 74 61 22 3a 7b 22 73 74 61 67 65 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 3a 31 2c 22 73 69 74 65 5f 69 64 22 3a 37 34 34 33 2c 22 70 75 62 6c 69 63 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 3a 5b 31 2c 35 5d 2c 22 6d 75 6c 74 69 5f 63 61 6d 70 61 69 67 6e 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 74 61 67 65 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 3a 5b 5d 2c 22 70 75 62 6c 69 63 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 3a 32 7d 2c 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 47 44 50 52 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 6d 65 73 73 61 Data Ascii: {"propertyId":7443,"propertyPriorityData":{"stage_message_limit":1,"site_id":7443,"public_campaign_type_priority":[1,5],"multi_campaign_enabled":true,"stage_campaign_type_priority":[],"public_message_limit":2},"campaigns":[{"type":"GDPR","message":{"messa
2024-04-19 13:12:30 UTC	3535	IN	Data Raw: 2c 22 74 79 70 65 22 3a 31 32 2c 22 69 66 72 61 6d 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 6f 74 69 63 65 2e 73 70 2d 70 72 6f 64 2e 6e 65 74 2f 70 72 69 76 61 63 79 2d 6d 61 6e 61 67 65 72 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 6d 65 73 73 61 67 65 5f 69 64 3d 31 36 35 38 35 32 22 2c 22 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 31 35 39 34 32 34 30 37 37 37 30 39 39 22 7d 2c 7b 22 63 68 6f 69 63 65 5f 69 64 22 3a 31 32 33 33 31 36 33 39 2c 22 74 79 70 65 22 3a 31 31 2c 22 69 66 72 61 6d 65 5f 75 72 6c 22 3a 6e 75 6c 6c 2c 22 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 31 35 38 39 32 31 34 34 39 34 34 30 39 22 7d 5d 2c 22 73 69 74 65 5f 69 64 22 3a 37 34 34 33 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 7d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: ,"type":12,"iframe_url":"https://notice.sp-prod.net/privacy-manager/index.html?message_id=165852","button_text":"1594240777099"},{"choice_id":12331639,"type":11,"iframe_url":null,"button_text":"1589214494409"}],"site_id":7443,"language":"en"},"url":"https
2024-04-19 13:12:30 UTC	956	IN	Data Raw: 65 72 22 3a 74 72 75 65 2c 22 63 6f 6e 73 65 6e 74 65 64 41 6c 6c 22 3a 66 61 6c 73 65 2c 22 72 65 6a 65 63 74 65 64 43 61 74 65 67 6f 72 69 65 73 22 3a 5b 5d 2c 22 72 65 6a 65 63 74 65 64 56 65 6e 64 6f 72 73 22 3a 5b 5d 2c 22 72 65 6a 65 63 74 65 64 41 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 74 61 74 75 73 22 3a 22 72 65 6a 65 63 74 65 64 4e 6f 6e 65 22 2c 22 73 69 67 6e 65 64 4c 73 70 61 22 3a 66 61 6c 73 65 2c 22 75 73 70 73 74 72 69 6e 67 22 3a 22 31 59 4e 4e 22 2c 22 67 70 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 63 74 69 6f 6e 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 64 6e 73 44 69 73 70 6c 61 79 65 64 22 2c 22 73 65 74 50 61 74 68 22 3a 74 72 75 65 2c 22 6d 61 78 41 67 65 22 3a 33 31 35 33 36 30 30 30 7d Data Ascii: er":true,"consentedAll":false,"rejectedCategories":[],"rejectedVendors":[],"rejectedAll":false,"status":"rejectedNone","signedLspa":false,"uspstring":"1YNN","gpcEnabled":false,"actions":[],"cookies":[{"key":"dnsDisplayed","setPath":true,"maxAge":31536000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49812	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	575	OUT	GET /unified/4.21.0/gdpr-tcf.326dc0fcac2e9cce1493.bundle.js HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	560	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 160238 Connection: close Date: Thu, 18 Apr 2024 16:31:13 GMT Last-Modified: Tue, 16 Apr 2024 19:41:57 GMT ETag: "2143d49524e48555b3f69e0590182adf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d609bf18dc48991596c5819013c10fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: WEf2V-kFHqL6Rj-1LCeUS26oT7cQEsOY5h00zyUrh5PzIx71h6se2w== Age: 74478
2024-04-19 13:12:30 UTC	15824	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 73 70 5f 77 70 5f 6a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 5f 73 70 5f 77 70 5f 6a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 2c 33 5d 2c 7b 31 38 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 72 28 32 32 29 2c 72 28 32 37 29 2c 72 28 35 34 29 2c 72 28 32 38 29 2c 72 28 32 39 29 2c 72 28 37 31 29 2c 72 28 31 34 31 29 2c 72 28 31 30 32 29 2c 72 28 31 30 31 29 2c 72 28 35 31 29 2c 72 28 34 39 29 2c 72 28 35 30 29 2c 72 28 33 30 29 2c 72 28 33 31 29 2c 72 28 33 32 29 2c 72 28 31 38 36 29 2c 72 28 31 38 37 29 2c 72 28 33 33 29 2c 72 28 36 Data Ascii: (window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[4,3],{180:function(t,e,r){"use strict";r.r(e),r.d(e,"default",(function(){return P}));r(22),r(27),r(54),r(28),r(29),r(71),r(141),r(102),r(101),r(51),r(49),r(50),r(30),r(31),r(32),r(186),r(187),r(33),r(6
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 63 6d 70 49 64 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 63 6d 70 56 65 72 73 69 6f 6e 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 65 76 65 6e 74 53 74 61 74 75 73 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 64 70 72 41 70 70 6c 69 65 73 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 74 63 4d 6f 64 65 6c 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 74 63 53 74 72 69 6e 67 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 74 63 66 50 6f 6c 69 63 79 56 65 72 73 69 6f 6e 2c 74 68 69 73 2e 63 6d 70 53 74 61 74 75 73 3d 69 2e 4c 4f 41 44 49 4e 47 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 53 74 61 74 75 73 3d 75 2e 48 49 44 44 45 4e 2c 74 68 69 73 2e 65 76 65 6e 74 51 75 65 75 65 2e 63 6c 65 61 72 28 Data Ascii: n(){delete this.cmpId,delete this.cmpVersion,delete this.eventStatus,delete this.gdprApplies,delete this.tcModel,delete this.tcString,delete this.tcfPolicyVersion,this.cmpStatus=i.LOADING,this.disabled=!1,this.displayStatus=u.HIDDEN,this.eventQueue.clear(
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 7d 28 29 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 2c 6e 3d 4e 74 28 74 29 3b 69 66 28 65 29 7b 76 61 72 20 6f 3d 4e 74 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2c 6f 29 7d 65 6c 73 65 20 72 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 52 74 28 74 68 69 73 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 74 2c 65 29 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 43 74 28 65 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 72 65 74 75 72 6e 20 65 3b 69 Data Ascii: urn function(){return!!t}()}();return function(){var r,n=Nt(t);if(e){var o=Nt(this).constructor;r=Reflect.construct(n,arguments,o)}else r=n.apply(this,arguments);return Rt(this,r)}}function Rt(t,e){if(e&&("object"===Ct(e)\|\|"function"==typeof e))return e;i
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 53 49 53 29 2c 32 29 5d 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 7b 6b 65 79 3a 22 64 65 63 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 5e 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2d 5f 5d 2b 24 2f 2e 74 65 73 74 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 74 65 28 22 49 6e 76 61 6c 69 64 6c 79 20 65 6e 63 6f 64 65 64 20 42 61 73 65 36 34 55 52 4c 20 73 74 72 69 6e 67 22 29 3b 66 6f 72 28 76 61 72 20 65 3d 22 22 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 52 45 56 45 52 53 45 5f 44 49 43 54 2e 67 65 74 28 74 5b 72 5d 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 3b 65 2b 3d 22 30 22 2e 72 65 70 65 61 74 28 74 68 69 73 2e 42 41 53 49 53 2d 6e 2e 6c 65 6e 67 74 68 29 2b 6e 7d 72 65 74 75 Data Ascii: SIS),2)];return r}},{key:"decode",value:function(t){if(!/^[A-Za-z0-9\-_]+$/.test(t))throw new te("Invalidly encoded Base64URL string");for(var e="",r=0;r<t.length;r++){var n=this.REVERSE_DICT.get(t[r]).toString(2);e+="0".repeat(this.BASIS-n.length)+n}retu
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 74 75 72 6e 20 6f 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 68 69 73 2e 69 73 4f 6b 54 6f 48 61 76 65 28 65 2e 72 65 73 74 72 69 63 74 69 6f 6e 54 79 70 65 2c 65 2e 70 75 72 70 6f 73 65 49 64 2c 74 29 29 7b 76 61 72 20 72 3d 65 2e 68 61 73 68 3b 74 68 69 73 2e 68 61 73 28 72 29 7c 7c 28 74 68 69 73 2e 6d 61 70 2e 73 65 74 28 72 2c 6e 65 77 20 53 65 74 29 2c 74 68 69 73 2e 62 69 74 4c 65 6e 67 74 68 3d 30 29 2c 74 68 69 73 2e 6d 61 70 2e 67 65 74 28 72 29 2e 61 64 64 28 74 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 72 65 73 74 72 69 63 74 50 75 72 70 6f 73 65 54 6f 4c 65 67 61 6c 42 61 73 69 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 Data Ascii: turn o}},{key:"add",value:function(t,e){if(this.isOkToHave(e.restrictionType,e.purposeId,t)){var r=e.hash;this.has(r)\|\|(this.map.set(r,new Set),this.bitLength=0),this.map.get(r).add(t)}}},{key:"restrictPurposeToLegalBasis",value:function(t){var e=argument
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 6e 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 77 6e 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d Data Ascii: })(t)}function On(t,e){for(var r=0;r<e.length;r++){var n=e[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,Sn(n.key),n)}}function Sn(t){var e=function(t,e){if("object"!=wn(t)\|\|!t)return t;var r=t[Sym
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: l.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function lo(t,e){for(var r=0;r<e.length;r++){var n=e[r];n.enumerable=n.enumerable\|\|!1,n.configurab
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 65 63 69 61 6c 46 65 61 74 75 72 65 56 65 6e 64 6f 72 4d 61 70 22 2c 76 6f 69 64 20 30 29 2c 52 6f 28 4c 6f 28 65 29 2c 22 73 74 61 63 6b 73 22 2c 76 6f 69 64 20 30 29 2c 52 6f 28 4c 6f 28 65 29 2c 22 64 61 74 61 43 61 74 65 67 6f 72 69 65 73 22 2c 76 6f 69 64 20 30 29 2c 52 6f 28 4c 6f 28 65 29 2c 22 6c 61 6e 67 5f 22 2c 76 6f 69 64 20 30 29 2c 52 6f 28 4c 6f 28 65 29 2c 22 63 61 63 68 65 4c 61 6e 67 5f 22 2c 76 6f 69 64 20 30 29 2c 52 6f 28 4c 6f 28 65 29 2c 22 69 73 4c 61 74 65 73 74 22 2c 21 31 29 3b 76 61 72 20 72 3d 61 2e 62 61 73 65 55 72 6c 3b 69 66 28 65 2e 6c 61 6e 67 5f 3d 61 2e 44 45 46 41 55 4c 54 5f 4c 41 4e 47 55 41 47 45 2c 65 2e 63 61 63 68 65 4c 61 6e 67 5f 3d 61 2e 44 45 46 41 55 4c 54 5f 4c 41 4e 47 55 41 47 45 2c 65 2e 69 73 56 65 6e Data Ascii: ecialFeatureVendorMap",void 0),Ro(Lo(e),"stacks",void 0),Ro(Lo(e),"dataCategories",void 0),Ro(Lo(e),"lang_",void 0),Ro(Lo(e),"cacheLang_",void 0),Ro(Lo(e),"isLatest",!1);var r=a.baseUrl;if(e.lang_=a.DEFAULT_LANGUAGE,e.cacheLang_=a.DEFAULT_LANGUAGE,e.isVen
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 64 65 28 75 2c 67 6e 2e 73 65 67 6d 65 6e 74 54 79 70 65 29 2e 74 6f 53 74 72 69 6e 67 28 29 5d 3b 79 6f 2e 64 65 63 6f 64 65 28 69 2c 65 2c 61 29 7d 72 65 74 75 72 6e 20 65 7d 7d 5d 2c 28 72 3d 6e 75 6c 6c 29 26 26 59 6f 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 59 6f 28 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 71 6f 28 74 29 7b 72 65 74 75 72 6e 28 71 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: de(u,gn.segmentType).toString()];yo.decode(i,e,a)}return e}}],(r=null)&&Yo(e.prototype,r),n&&Yo(e,n),Object.defineProperty(e,"prototype",{writable:!1}),t}();function qo(t){return(qo="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){r
2024-04-19 13:12:30 UTC	13342	IN	Data Raw: 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 75 75 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 75 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6f 75 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6f 75 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 Data Ascii: le=!0),Object.defineProperty(t,uu(n.key),n)}}function uu(t){var e=function(t,e){if("object"!=ou(t)\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var n=r.call(t,e\|\|"default");if("object"!=ou(n))return n;throw new TypeError("@@toPrimitive must ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49737	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	678	OUT	GET /pagead/managed/js/gpt/m202404150101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	741	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 461563 X-XSS-Protection: 0 Date: Thu, 18 Apr 2024 20:31:16 GMT Expires: Fri, 18 Apr 2025 20:31:16 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 5207049941980230013 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 60074 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:30 UTC	514	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 0a 20 4c 69 63 65 6e 73 65 64 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 20 0a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 20 0a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 Data Ascii: to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations und
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 2c 4c 6f 2c 4e 6f 2c 4f 6f 2c 51 6f 2c 53 6f 2c 54 6f 2c 52 6f 2c 57 6f 2c 58 6f 2c 61 70 2c 63 70 2c 65 70 2c 6f 70 2c 71 70 2c 73 70 2c 76 70 2c 75 70 2c 74 70 2c 46 70 2c 49 70 2c 4a 70 2c 4b 70 2c 4c 70 2c 4e 70 2c 50 70 2c 51 70 2c 52 70 2c 54 70 2c 55 70 2c 57 70 2c 56 70 2c 59 70 2c 61 71 2c 24 70 2c 62 71 2c 64 71 2c 65 71 2c 68 71 2c 69 71 2c 6b 71 2c 6e 71 2c 6d 71 2c 70 71 2c 71 71 2c 72 71 2c 74 71 2c 75 71 2c 77 71 2c 76 71 2c 7a 71 2c 42 71 2c 44 71 2c 46 71 2c 4b 71 2c 4c 71 2c 4d 71 2c 4e 71 2c 50 71 2c 53 71 2c 51 71 2c 52 71 2c 54 71 2c 55 71 2c 58 71 2c 59 71 2c 5a 71 2c 24 71 2c 61 72 2c 62 72 2c 63 72 2c 64 72 2c 66 72 2c 6a 72 2c 6c 72 2c 6d 72 2c 6e 72 2c 71 72 2c 41 72 2c 74 72 2c 46 72 2c 47 72 2c 48 72 2c 49 72 2c 4b 72 2c 4d 72 Data Ascii: ,Lo,No,Oo,Qo,So,To,Ro,Wo,Xo,ap,cp,ep,op,qp,sp,vp,up,tp,Fp,Ip,Jp,Kp,Lp,Np,Pp,Qp,Rp,Tp,Up,Wp,Vp,Yp,aq,$p,bq,dq,eq,hq,iq,kq,nq,mq,pq,qq,rq,tq,uq,wq,vq,zq,Bq,Dq,Fq,Kq,Lq,Mq,Nq,Pq,Sq,Qq,Rq,Tq,Uq,Xq,Yq,Zq,$q,ar,br,cr,dr,fr,jr,lr,mr,nr,qr,Ar,tr,Fr,Gr,Hr,Ir,Kr,Mr
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 3b 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 75 61 3a 62 3b 61 3a 69 66 28 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 75 61 3a 62 2c 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 70 61 29 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 61 26 26 64 2e 49 6c 28 61 29 29 7b 61 3d 6e 65 77 20 Data Ascii: ;ta=function(a){return new sa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.wa=function(a){var b=void 0===b?ua:b;a:if(b=void 0===b?ua:b,!(a instanceof _.pa)){for(var c=0;c<b.length;++c){var d=b[c];if(d instanceof sa&&d.Il(a)){a=new
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 6c 75 65 29 7c 7c 66 2e 69 6e 64 65 78 2d 67 2e 69 6e 64 65 78 7d 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 61 5b 62 5d 3d 63 5b 62 5d 2e 76 61 6c 75 65 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 54 61 28 61 29 7c 7c 21 5f 2e 54 61 28 62 29 7c 7c 61 2e 6c 65 6e 67 74 68 21 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 55 61 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 69 66 28 21 64 28 61 5b 65 5d 2c 62 5b 65 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3b 5f 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3e 62 3f 31 3a 61 3c 62 3f 2d 31 3a 30 7d 3b 55 61 3d 66 75 6e 63 74 69 Data Ascii: lue)\|\|f.index-g.index});for(b=0;b<a.length;b++)a[b]=c[b].value};Va=function(a,b){if(!_.Ta(a)\|\|!_.Ta(b)\|\|a.length!=b.length)return!1;for(var c=a.length,d=Ua,e=0;e<c;e++)if(!d(a[e],b[e]))return!1;return!0};_.Na=function(a,b){return a>b?1:a<b?-1:0};Ua=functi
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 62 29 62 3d 62 2e 67 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 62 3b 66 62 28 61 29 7d 3b 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 69 62 28 62 29 3b 66 62 28 61 29 7d 3b 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 6e 61 6d 65 3d 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 62 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 7d 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 Data Ascii: "")&&a.setAttribute("nonce",b)};hb=function(a,b){if(b instanceof gb)b=b.g;else throw Error("");a.textContent=b;fb(a)};jb=function(a,b){a.src=_.ib(b);fb(a)};kb=function(a){a=a(function(b){b.name=b.constructor.name;b.stack=Error().stack});a.prototype=Object
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 72 6f 72 28 22 46 6f 75 6e 64 20 61 6e 20 75 6e 70 61 69 72 65 64 20 73 75 72 72 6f 67 61 74 65 22 29 3b 66 3d 36 35 35 33 33 7d 64 5b 63 2b 2b 5d 3d 66 3e 3e 31 32 7c 32 32 34 3b 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 26 36 33 7c 31 32 38 7d 64 5b 63 2b 2b 5d 3d 66 26 36 33 7c 31 32 38 7d 7d 61 3d 63 3d 3d 3d 64 2e 6c 65 6e 67 74 68 3f 64 3a 64 2e 73 75 62 61 72 72 61 79 28 30 2c 63 29 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 72 62 29 72 65 74 75 72 6e 20 73 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 Data Ascii: ror("Found an unpaired surrogate");f=65533}d[c++]=f>>12\|224;d[c++]=f>>6&63\|128}d[c++]=f&63\|128}}a=c===d.length?d:d.subarray(0,c)}return a};qb=function(a){_.t.setTimeout(function(){throw a;},0)};tb=function(a){if(!rb)return sb(a);for(var b="",c=0,d=a.lengt
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 29 2e 76 61 6c 75 65 2c 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 61 3d 22 2d 22 2b 49 62 28 61 2c 62 29 29 3a 61 3d 49 62 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 36 3e 61 2e 6c 65 6e 67 74 68 29 47 62 28 4e 75 6d 62 65 72 28 61 29 29 3b 65 6c 73 65 20 69 66 28 42 62 28 29 29 61 3d 42 69 67 49 6e 74 28 61 29 2c 44 62 3d 4e 75 6d 62 65 72 28 61 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3e 3e 3e 30 2c 46 62 3d 4e 75 6d 62 65 72 28 61 3e 3e 42 69 67 49 6e 74 28 33 32 29 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 2b 28 22 2d 22 3d 3d 3d 61 5b 30 5d 29 3b 46 62 3d 44 62 3d 30 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c Data Ascii: ).value,b=b.next().value,a="-"+Ib(a,b)):a=Ib(a,b);return a};Kb=function(a){if(16>a.length)Gb(Number(a));else if(Bb())a=BigInt(a),Db=Number(a&BigInt(4294967295))>>>0,Fb=Number(a>>BigInt(32)&BigInt(4294967295));else{var b=+("-"===a[0]);Fb=Db=0;for(var c=a.l
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 61 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 61 7d 3b 6a 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 69 63 28 61 29 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 5f 2e 78 28 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 63 61 6c 6c 28 62 2c 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 55 62 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 3b 6b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 26 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 7d 3b 6f 63 3d 66 Data Ascii: hrow Error();a=void 0}return a};jc=function(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d=ic(a);if(d&1)return!0;if(!(b&&(Array.isArray(b)?_.x(b,"includes").call(b,c):b.has(c))))return!1;Ub(a,d\|1);return!0};kc=function(a){if(a&2)throw Error();};oc=f
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 61 3a 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 73 63 28 22 69 6e 74 33 32 22 29 3b 69 66 28 21 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 74 68 72 6f 77 20 73 63 28 22 69 6e 74 33 32 22 29 3b 72 65 74 75 72 6e 20 61 7c 30 7d 3b 45 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 61 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 3d 2b Data Ascii: a:_.x(Number,"isFinite").call(Number,a)?a\|0:void 0};Dc=function(a){if("number"!==typeof a)throw sc("int32");if(!_.x(Number,"isFinite").call(Number,a))throw sc("int32");return a\|0};Ec=function(a){if(null==a)return a;if("string"===typeof a){if(!a)return;a=+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49814	74.125.136.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	626	OUT	GET /adsense/search/ads.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	843	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 187261 Date: Fri, 19 Apr 2024 13:12:30 GMT Expires: Fri, 19 Apr 2024 13:12:30 GMT Cache-Control: private, max-age=3600 ETag: "750721060384509187" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:30 UTC	412	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 35 36 37 30 31 30 33 30 32 37 30 35 30 33 36 35 30 39 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 73 65 61 72 63 68 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 33 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 32 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15670103027050365096",packages:"search",module:"ads",version:"3",m:{cei:"17301431,17301432,1730
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 6e 61 62 6c 65 4e 65 77 43 6f 6e 73 65 6e 74 53 74 72 61 74 65 67 79 22 3a 74 72 75 65 2c 22 5f 66 69 78 43 74 63 4c 69 6e 6b 73 4f 6e 49 6f 73 22 3a 74 72 75 65 2c 22 5f 67 6f 6f 67 45 6e 61 62 6c 65 51 75 70 22 3a 74 72 75 65 2c 22 5f 73 77 69 74 63 68 47 77 73 52 65 71 75 65 73 74 54 6f 55 73 65 41 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 Data Ascii: nableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCooki
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 62 65 3d 66 3b 63 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d Data Ascii: anceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.be=f;ca(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.be};var d="jscom
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 2c 6d 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6d 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e 61 3b 61 3a 7b 76 61 72 20 6f 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 61 3b 6e 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6e 61 3d 21 31 7d 6d 61 3d 6e 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 Data Ascii: ,ma;if("function"==typeof Object.setPrototypeOf)ma=Object.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}ma=na?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 28 74 68 69 73 2e 43 29 3b 69 66 28 74 68 69 73 2e 43 2e 67 61 29 72 65 74 75 72 6e 20 77 61 28 74 68 69 73 2c 74 68 69 73 2e 43 2e 67 61 5b 22 74 68 72 6f 77 22 5d 2c 61 2c 74 68 69 73 2e 43 2e 55 61 29 3b 74 68 69 73 2e 43 2e 5a 61 28 61 29 3b 72 65 74 75 72 6e 20 78 61 28 74 68 69 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 43 2e 67 61 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e Data Ascii: (this.C);if(this.C.ga)return wa(this,this.C.ga["throw"],a,this.C.Ua);this.C.Za(a);return xa(this)};function wa(a,b,c,d){try{var e=b.call(a.C.ga,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 73 2e 5a 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 5a 29 7b 74 68 69 73 2e 5a 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 6c 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 50 65 28 29 7d 29 7d 74 68 69 73 2e 5a 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 65 3d 68 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 65 28 67 2c 30 29 7d 3b 63 2e 70 72 6f Data Ascii: s.Z=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if(a)return a;c.prototype.kd=function(g){if(null==this.Z){this.Z=[];var h=this;this.ld(function(){h.Pe()})}this.Z.push(g)};var e=ha.setTimeout;c.prototype.ld=function(g){e(g,0)};c.pro
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 2e 47 66 28 29 3b 74 68 69 73 2e 51 65 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 47 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 71 66 28 29 29 7b 76 61 72 20 68 3d 68 61 2e 63 6f 6e 73 6f 6c 65 3b 0a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 2e 65 72 72 6f 72 28 67 2e 59 61 29 7d 7d 2c 31 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 71 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 79 64 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 68 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 68 3d 68 61 2e 45 76 65 6e 74 2c 6b 3d 68 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 Data Ascii: .Gf();this.Qe()};b.prototype.Gf=function(){var g=this;e(function(){if(g.qf()){var h=ha.console;"undefined"!==typeof h&&h.error(g.Ya)}},1)};b.prototype.qf=function(){if(this.yd)return!1;var g=ha.CustomEvent,h=ha.Event,k=ha.dispatchEvent;if("undefined"===t
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 6b 64 28 6b 29 3a 74 68 69 73 2e 44 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 79 64 3d 21 30 7d 3b 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d 29 7d 3b 62 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 77 28 67 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6e 2e 76 61 6c 75 65 29 2e 6c 62 28 68 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 77 28 67 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b Data Ascii: kd(k):this.Da.push(k);this.yd=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)})};b.race=function(g){return new b(function(h,k){for(var l=w(g),n=l.next();!n.done;n=l.next())d(n.value).lb(h,k)})};b.all=function(g){var h=w(g),k=h.next();
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 Data Ascii: unction(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});function Ea(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length)
2024-04-19 13:12:30 UTC	1255	IN	Data Raw: 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 0a 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 29 29 72 Data Ascii: eturn b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});p("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b))r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49815	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	571	OUT	GET /unified/4.21.0/ccpa.e4cc64d4573eb818690d.bundle.js HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	559	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 15603 Connection: close Date: Thu, 18 Apr 2024 16:59:42 GMT Last-Modified: Tue, 16 Apr 2024 19:41:57 GMT ETag: "59ec903ee173b6bb068133d819c939c2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cdd3ad81a418306f5534311932da4ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: BQB9RxoYZ94cU8-sDrRAL1l6GFw0BhFIlEmBlORJ-lIy03m201H4XA== Age: 72769
2024-04-19 13:12:30 UTC	15603	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 73 70 5f 77 70 5f 6a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 5f 73 70 5f 77 70 5f 6a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 3b 6e 28 32 32 29 2c 6e 28 32 37 29 2c 6e 28 35 34 29 2c 6e 28 32 38 29 2c 6e 28 32 39 29 2c 6e 28 37 31 29 2c 6e 28 31 30 32 29 2c 6e 28 31 30 31 29 2c 6e 28 35 31 29 2c 6e 28 34 39 29 2c 6e 28 35 30 29 2c 6e 28 33 30 29 2c 6e 28 33 31 29 2c 6e 28 33 32 29 2c 6e 28 31 38 36 29 2c 6e 28 31 38 37 29 2c 6e 28 35 33 29 2c 6e 28 35 35 29 2c 6e 28 36 38 29 2c Data Ascii: (window._sp_wp_jsonp=window._sp_wp_jsonp\|\|[]).push([[0],{179:function(e,t,n){"use strict";n.r(t),n.d(t,"default",(function(){return S}));n(22),n(27),n(54),n(28),n(29),n(71),n(102),n(101),n(51),n(49),n(50),n(30),n(31),n(32),n(186),n(187),n(53),n(55),n(68),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49742	18.64.155.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	568	OUT	GET /justjared/main/95.590f6028e7dfe1219d0d.js HTTP/1.1 Host: 01.cdn.mediatradecraft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4186 Connection: close Date: Fri, 19 Apr 2024 13:12:31 GMT x-amz-replication-status: FAILED Last-Modified: Thu, 18 Apr 2024 20:27:30 GMT ETag: "bdbaa00495f4e3b2a0402d9879990bc5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7600 x-amz-version-id: Ofd1gQBoDzFcASqy7NUlZMbLOUYZSSmY Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4d792dd5dbd5ab4dc350d6b2663e23c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v9LC1a-JwLmco_3_aDB8RVqTK_PkLZijZ5qKtj6Js1cVgpNQ9dmyzg== Vary: Origin
2024-04-19 13:12:30 UTC	4186	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4d 65 64 69 61 54 72 61 64 65 63 72 61 66 74 5f 54 65 6d 70 6c 61 74 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4d 65 64 69 61 54 72 61 64 65 63 72 61 66 74 5f 54 65 6d 70 6c 61 74 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 35 5d 2c 7b 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 35 33 34 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 Data Ascii: "use strict";(self.webpackChunkMediaTradecraft_Template=self.webpackChunkMediaTradecraft_Template\|\|[]).push([[95],{95:function(e,t,n){n.r(t),n.d(t,{default:function(){return l}});var o=n(534);function d(){let e=arguments.length>0&&void 0!==arguments[0]?ar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49818	35.201.67.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	610	OUT	POST /api/v2/page HTTP/1.1 Host: t.skimresources.com Connection: keep-alive Content-Length: 252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	252	OUT	Data Raw: 7b 22 70 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 67 75 69 64 22 3a 22 22 2c 22 75 75 69 64 22 3a 22 33 66 38 35 30 34 39 34 63 66 65 34 63 32 39 64 36 32 35 38 61 62 61 33 39 35 32 38 36 38 64 61 22 2c 22 74 7a 22 3a 2d 31 32 30 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 39 33 30 32 39 2c 22 70 75 62 6c 69 73 68 65 72 5f 64 6f 6d 61 69 6e 5f 69 64 22 3a 31 35 34 37 30 36 30 2c 22 70 68 72 22 3a 7b 7d 2c 22 75 6e 6c 22 3a 7b 7d 2c 22 73 6c 63 22 3a 30 2c 22 73 77 63 22 3a 30 2c 22 75 6c 63 22 3a 30 2c 22 6a 73 6c 22 3a 31 37 37 30 2c 22 70 72 65 66 22 3a 22 22 2c 22 75 63 22 3a 66 61 6c 73 65 2c 22 74 22 3a 31 2c 22 6a 73 66 22 3a 22 22 2c 22 6a 76 22 3a 22 31 35 2e 35 2e 30 22 7d Data Ascii: {"pag":"https://www.justjared.com/","guid":"","uuid":"3f850494cfe4c29d6258aba3952868da","tz":-120,"publisher_id":93029,"publisher_domain_id":1547060,"phr":{},"unl":{},"slc":0,"swc":0,"ulc":0,"jsl":1770,"pref":"","uc":false,"t":1,"jsf":"","jv":"15.5.0"}
2024-04-19 13:12:30 UTC	624	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Content-Type: application/javascript Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Access-Control-Allow-Credentials: true Content-Length: 22 Date: Fri, 19 Apr 2024 13:12:30 GMT Server: Python/3.11 aiohttp/3.8.6 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:30 UTC	22	IN	Data Raw: 2f 2f 20 4a 61 76 61 73 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 Data Ascii: // Javascript Document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49817	35.201.67.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	624	OUT	GET /api/v2/robots.txt?__skimjs_preflight__please_ignore__=true&rnd=0.7968783611185342 HTTP/1.1 Host: t.skimresources.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	256	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Fri, 19 Apr 2024 13:12:30 GMT Content-Type: text/plain Content-Length: 0 Via: 1.1 google Cache-Control: private, no-store Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49824	35.190.91.160	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	612	OUT	GET /px.gif?ch=1&rn=8.172352690297082 HTTP/1.1 Host: p.skimresources.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	340	IN	HTTP/1.1 200 OK Content-Length: 43 Content-Type: image/gif P3p: policyref="http://skimlinks.com/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Server: Skimlinks Pixel 1.0 Date: Fri, 19 Apr 2024 13:12:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49823	35.190.91.160	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	612	OUT	GET /px.gif?ch=2&rn=8.172352690297082 HTTP/1.1 Host: p.skimresources.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	340	IN	HTTP/1.1 200 OK Content-Length: 43 Content-Type: image/gif P3p: policyref="http://skimlinks.com/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Server: Skimlinks Pixel 1.0 Date: Fri, 19 Apr 2024 13:12:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49833	31.13.65.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	603	OUT	GET /en_US/sdk.js?hash=a17587e6f7df45ea7319feb1b1d06d23 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.justjared.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	1691	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 334beb97a0ba690f1263aa80a277c40d ETag: "bbe8c6add83004ba0a42e03eb2a723d8" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: M0vrl6C6aQ8SY6qAonfEDQ== Expires: Sat, 19 Apr 2025 12:04:37 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" X-Content-Type-Options: nosniff
2024-04-19 13:12:30 UTC	853	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-19 13:12:30 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-19 13:12:30 UTC	15254	IN	Data Raw: 2a 31 37 31 33 35 32 38 32 37 37 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 32 39 30 36 34 35 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1713528277,,JIT Construction: v1012906458,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-04-19 13:12:30 UTC	16384	IN	Data Raw: 6d 3b 6a 2b 2b 29 3b 66 6f 72 28 6b 3d 41 28 28 6d 2d 43 28 6a 2c 30 29 29 2f 33 30 2e 34 32 29 3b 43 28 6a 2c 6b 2b 31 29 3c 3d 6d 3b 6b 2b 2b 29 3b 6d 3d 31 2b 6d 2d 43 28 6a 2c 6b 29 3b 72 3d 28 68 25 38 36 34 65 35 2b 38 36 34 65 35 29 25 38 36 34 65 35 3b 73 3d 41 28 72 2f 33 36 65 35 29 25 32 34 3b 74 3d 41 28 72 2f 36 65 34 29 25 36 30 3b 7a 3d 41 28 72 2f 31 65 33 29 25 36 30 3b 72 3d 72 25 31 65 33 7d 65 6c 73 65 20 6a 3d 68 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 6b 3d 68 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2c 6d 3d 68 2e 67 65 74 55 54 43 44 61 74 65 28 29 2c 73 3d 68 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 2c 74 3d 68 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 2c 7a 3d 68 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 Data Ascii: m;j++);for(k=A((m-C(j,0))/30.42);C(j,k+1)<=m;k++);m=1+m-C(j,k);r=(h%864e5+864e5)%864e5;s=A(r/36e5)%24;t=A(r/6e4)%60;z=A(r/1e3)%60;r=r%1e3}else j=h.getUTCFullYear(),k=h.getUTCMonth(),m=h.getUTCDate(),s=h.getUTCHours(),t=h.getUTCMinutes(),z=h.getUTCSeconds(
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 3a 35 30 30 7d 29 3b 5f 5f 64 28 22 4a 53 53 44 4b 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 61 6c 6c 6f 77 5f 6e 6f 6e 5f 63 61 6e 76 61 73 5f 61 70 70 5f 65 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 3a 7b 22 72 61 74 65 22 3a 34 7d 2c 22 65 32 65 5f 70 69 6e 67 5f 74 72 61 63 6b 69 6e 67 22 3a 7b 22 72 61 74 65 22 3a 30 2e 31 7d 2c 22 78 64 5f 74 69 6d 65 6f 75 74 22 3a 7b 22 72 61 74 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 36 30 30 30 30 7d 2c 22 75 73 65 5f 62 75 6e 64 6c 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 6c 6f 67 5f 72 65 73 70 6f 6e 73 65 5f 65 72 72 6f 72 22 3a 74 72 75 65 2c 22 70 6f 70 75 70 5f 62 6c 6f 63 6b 65 72 5f 73 63 72 69 62 65 5f 6c 6f 67 67 69 Data Ascii: :500});__d("JSSDKConfig",[],{"features":{"allow_non_canvas_app_events":false,"error_handling":{"rate":4},"e2e_ping_tracking":{"rate":0.1},"xd_timeout":{"rate":1,"value":60000},"use_bundle":false,"should_log_response_error":true,"popup_blocker_scribe_loggi
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 67 2e 6e 61 74 69 76 65 41 70 70 7c 7c 67 2e 6e 61 74 69 76 65 41 6e 64 72 6f 69 64 41 70 70 7c 7c 67 2e 6e 61 74 69 76 65 49 6e 73 74 61 67 72 61 6d 41 70 70 7d 3b 6b 2e 6d 42 61 73 69 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 28 69 2e 75 63 57 65 62 7c 7c 69 2e 6f 70 65 72 61 4d 69 6e 69 29 7d 3b 6b 2e 69 6e 73 74 61 67 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 6e 61 74 69 76 65 49 6e 73 74 61 67 72 61 6d 41 70 70 7d 3b 6b 2e 6d 65 73 73 65 6e 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 6e 61 74 69 76 65 4d 65 73 73 65 6e 67 65 72 69 4f 53 41 70 70 7c 7c 67 2e 6e 61 74 69 76 65 4d 65 73 73 65 6e 67 65 72 41 6e 64 72 6f 69 64 41 70 70 7d 3b 6b 2e 69 73 Data Ascii: {return g.nativeApp\|\|g.nativeAndroidApp\|\|g.nativeInstagramApp};k.mBasic=function(){return!!(i.ucWeb\|\|i.operaMini)};k.instagram=function(){return g.nativeInstagramApp};k.messenger=function(){return g.nativeMessengeriOSApp\|\|g.nativeMessengerAndroidApp};k.is
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 61 3d 64 28 22 73 64 6b 2e 46 65 61 74 75 72 65 46 75 6e 63 74 6f 72 22 29 2e 63 72 65 61 74 65 28 64 28 22 4a 53 53 44 4b 43 6f 6e 66 69 67 22 29 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 73 64 6b 2e 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 22 2c 5b 22 73 64 6b 2e 45 72 72 6f 72 48 61 6e 64 6c 65 72 22 2c 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 2c 22 73 64 6b 2e 53 63 72 69 62 65 22 2c 22 73 64 6b 2e 66 65 61 74 75 72 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 61 3d 63 28 22 73 64 6b 2e 66 65 61 74 75 72 65 22 29 28 22 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 2c 21 31 29 3b 62 3d 64 28 22 73 64 6b 2e 45 Data Ascii: ction(a,b,c,d,e,f,g){a=d("sdk.FeatureFunctor").create(d("JSSDKConfig"));g["default"]=a}),98);__d("sdk.ErrorHandling",["sdk.ErrorHandler","sdk.Runtime","sdk.Scribe","sdk.feature"],(function(a,b,c,d,e,f,g){a=c("sdk.feature")("error_handling",!1);b=d("sdk.E
2024-04-19 13:12:31 UTC	14884	IN	Data Raw: 6f 72 22 29 63 6f 6e 74 69 6e 75 65 3b 69 3d 21 31 3b 68 5b 6b 5d 3d 6a 28 6c 2c 62 2b 22 3a 22 2b 6b 2c 6b 2c 67 29 7d 7d 72 65 74 75 72 6e 21 69 3f 68 3a 69 3f 67 3a 68 7d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 64 3d 61 3f 63 28 22 64 6f 74 41 63 63 65 73 73 22 29 28 68 2c 61 2c 21 30 29 3a 68 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 62 5b 63 5d 3b 69 66 28 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 66 3d 28 61 3f 61 2b 22 2e 22 3a 22 22 29 2b 63 3b 66 3d 6a 28 65 2c 66 2c 63 2c 62 29 3b 66 26 26 28 64 5b 63 5d 3d 66 29 7d 65 6c 73 65 28 74 79 70 65 6f 66 20 65 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c Data Ascii: or")continue;i=!1;h[k]=j(l,b+":"+k,k,g)}}return!i?h:i?g:h},b)}function a(a,b){var d=a?c("dotAccess")(h,a,!0):h;Object.keys(b).forEach(function(c){var e=b[c];if(typeof e==="function"){var f=(a?a+".":"")+c;f=j(e,f,c,b);f&&(d[c]=f)}else(typeof e==="object"\|\|
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 6e 67 28 33 32 29 2b 68 5b 62 25 33 32 5d 3a 68 5b 62 25 33 32 5d 7d 65 3d 22 22 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 65 2b 3d 63 5b 61 5b 62 5d 5d 3b 64 2e 75 6e 73 68 69 66 74 28 67 2c 64 2e 6c 65 6e 67 74 68 29 3b 64 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 64 2e 6a 6f 69 6e 28 22 7e 22 29 7d 7d 3b 62 3d 61 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 67 65 74 42 6c 61 6e 6b 49 66 72 61 6d 65 53 72 63 22 2c 5b 22 73 64 6b 2e 55 41 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 63 28 22 73 64 6b 2e 55 41 22 29 2e 69 65 28 29 3c 31 30 3f 22 6a 61 76 61 73 63 72 69 70 74 3a 66 61 Data Ascii: ng(32)+h[b%32]:h[b%32]}e="";for(b=0;b<a.length;b++)e+=c[a[b]];d.unshift(g,d.length);d.push(e);return d.join("~")}};b=a;f["default"]=b}),66);__d("getBlankIframeSrc",["sdk.UA"],(function(a,b,c,d,e,f,g){function a(){return c("sdk.UA").ie()<10?"javascript:fa
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 6f 69 64 20 30 3f 63 3a 6e 75 6c 6c 2c 67 75 61 72 64 4c 69 73 74 3a 61 2e 67 75 61 72 64 4c 69 73 74 2c 6c 69 6e 65 3a 61 2e 6c 69 6e 65 2c 6c 6f 67 67 69 6e 67 46 72 61 6d 65 77 6f 72 6b 3a 62 2e 6c 6f 67 67 69 6e 67 46 72 61 6d 65 77 6f 72 6b 2c 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 3a 71 61 28 61 2e 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 29 2c 6d 65 73 73 61 67 65 50 61 72 61 6d 73 3a 61 2e 6d 65 73 73 61 67 65 50 61 72 61 6d 73 2e 6d 61 70 28 71 61 29 2c 6e 61 6d 65 3a 61 2e 6e 61 6d 65 2c 73 61 6d 70 6c 65 5f 77 65 69 67 68 74 3a 59 28 62 2e 73 61 6d 70 6c 65 5f 77 65 69 67 68 74 29 2c 73 63 72 69 70 74 3a 61 2e 73 63 72 69 70 74 2c 73 69 74 65 5f 63 61 74 65 67 6f 72 79 3a 62 2e 73 69 74 65 5f 63 61 74 65 67 6f 72 79 2c 73 74 61 63 6b 46 72 61 6d Data Ascii: oid 0?c:null,guardList:a.guardList,line:a.line,loggingFramework:b.loggingFramework,messageFormat:qa(a.messageFormat),messageParams:a.messageParams.map(qa),name:a.name,sample_weight:Y(b.sample_weight),script:a.script,site_category:b.site_category,stackFram

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49816	13.248.218.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	521	OUT	OPTIONS /embed/updateSession HTTP/1.1 Host: api2.sided.co Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	812	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:30 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALBTG=ssUq7/dAQy70CnoMk2ha25BneFy7pv5i4ou/bZ8mPmxo6M/oLPILpmUJyPLFvMM5KX13dg7MnMincBLVoboH5aSZqy1SNf5dvi3fSUInPVOeP8QQhDAP/7DkXMrzjnjV89Ufji4CvfhyQgu3rHk124fI8J6jhrUetrKsPRggTjKE; Expires=Fri, 26 Apr 2024 13:12:30 GMT; Path=/ Set-Cookie: AWSALBTGCORS=ssUq7/dAQy70CnoMk2ha25BneFy7pv5i4ou/bZ8mPmxo6M/oLPILpmUJyPLFvMM5KX13dg7MnMincBLVoboH5aSZqy1SNf5dvi3fSUInPVOeP8QQhDAP/7DkXMrzjnjV89Ufji4CvfhyQgu3rHk124fI8J6jhrUetrKsPRggTjKE; Expires=Fri, 26 Apr 2024 13:12:30 GMT; Path=/; SameSite=None; Secure X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49829	104.26.3.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	587	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	1147	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPp85LajDHz2OYpwZP_H1ScmujtWt-mQvzrFiAJoZLnoy3Vaynte8570mX4qLWprXCTMlnC3mh6Ijg Expires: Sat, 20 Apr 2024 13:12:30 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * CF-Cache-Status: HIT Age: 359 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mQAG9NBmAskH6RQQuUGTGWwdrlM6%2FXymt2qMBF5%2F7aIOlN43%2FFlzs1JtiMQcbQN2ZhXZZg2OxJ1fDZOguQFMAg%2BVYeA2%2BV%2F0Y1nxwwaPN2EspAdN32sl%2FPMpIgCnUOnZEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25885f4e53a9-ATL
2024-04-19 13:12:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49831	142.250.9.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	738	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	742	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:12:30 GMT Expires: Sat, 20 Apr 2024 13:12:30 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:30 UTC	513	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-04-19 13:12:30 UTC	565	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49830	104.26.3.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	608	OUT	GET /px.gif?ch=1&e=0.5486801981214138 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	1147	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPp85LajDHz2OYpwZP_H1ScmujtWt-mQvzrFiAJoZLnoy3Vaynte8570mX4qLWprXCTMlnC3mh6Ijg Expires: Sat, 20 Apr 2024 13:12:30 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * CF-Cache-Status: HIT Age: 352 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l5xspEeyJsD%2Bj8RDKSghlCEEfIHQBtb9hn909QqvA%2BSqjweHNcMLh6VAVlq5k4hc7%2Fd02fyoUZSbFCc4%2FFIaF777dzSlNPJFRtB4%2FpQrvdjsYZTF%2Bip%2FaYxTFPMu0Q9Ovg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25885dfa1361-ATL
2024-04-19 13:12:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49828	72.21.91.66	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:30 UTC	782	OUT	GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.justjared.com HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:30 UTC	627	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 2181987 Cache-Control: public, max-age=315360000 Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:30 GMT Etag: "81267302efdfb3e4524a22631a8fc99e" Last-Modified: Mon, 11 Dec 2023 17:19:49 GMT P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Server: ECS (agb/A435) Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ Vary: Accept-Encoding x-amz-server-side-encryption: AES256 X-Cache: HIT x-tw-cdn: VZ Content-Length: 327164 Connection: close
2024-04-19 13:12:30 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 74 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 54 77 69 74 74 65 72 20 57 69 64 67 65 74 20 49 66 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: <!DOCTYPE HTML><meta chartset="utf-8"><title>Twitter Widget Iframe</title><body><script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){v
2024-04-19 13:12:30 UTC	16383	IN	Data Raw: 28 70 2c 47 29 7c 30 2c 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 5a 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 47 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 5a 29 7c 30 3b 76 61 72 20 5f 65 3d 28 63 2b 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 51 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 28 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 65 65 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 51 29 7c 30 29 29 3c 3c 31 33 29 7c 30 3b 63 3d 28 28 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 65 65 29 7c 30 29 2b 28 69 3e 3e 3e 31 33 29 7c 30 29 2b 28 5f 65 3e 3e 3e 32 36 29 7c 30 2c 5f 65 26 3d 36 37 31 30 38 38 36 33 2c 6e 3d 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 7a 29 2c 69 3d 28 69 3d 4d 61 Data Ascii: (p,G)\|0,i=(i=i+Math.imul(p,Z)\|0)+Math.imul(b,G)\|0,o=o+Math.imul(b,Z)\|0;var _e=(c+(n=n+Math.imul(u,Q)\|0)\|0)+((8191&(i=(i=i+Math.imul(u,ee)\|0)+Math.imul(d,Q)\|0))<<13)\|0;c=((o=o+Math.imul(d,ee)\|0)+(i>>>13)\|0)+(_e>>>26)\|0,_e&=67108863,n=Math.imul(k,z),i=(i=Ma
2024-04-19 13:12:30 UTC	16383	IN	Data Raw: 3b 30 21 3d 3d 6e 2e 6e 65 67 61 74 69 76 65 3b 29 64 2d 2d 2c 6e 2e 6e 65 67 61 74 69 76 65 3d 30 2c 6e 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c 28 69 2c 31 2c 75 29 2c 6e 2e 69 73 5a 65 72 6f 28 29 7c 7c 28 6e 2e 6e 65 67 61 74 69 76 65 5e 3d 31 29 3b 66 26 26 28 66 2e 77 6f 72 64 73 5b 75 5d 3d 64 29 7d 72 65 74 75 72 6e 20 66 26 26 66 2e 73 74 72 69 70 28 29 2c 6e 2e 73 74 72 69 70 28 29 2c 22 64 69 76 22 21 3d 3d 74 26 26 30 21 3d 3d 72 26 26 6e 2e 69 75 73 68 72 6e 28 72 29 2c 7b 64 69 76 3a 66 7c 7c 6e 75 6c 6c 2c 6d 6f 64 3a 6e 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 76 6d 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 28 21 65 2e 69 73 5a 65 72 6f 28 29 29 2c 74 68 69 73 2e 69 73 5a 65 72 6f 28 29 3f 7b Data Ascii: ;0!==n.negative;)d--,n.negative=0,n._ishlnsubmul(i,1,u),n.isZero()\|\|(n.negative^=1);f&&(f.words[u]=d)}return f&&f.strip(),n.strip(),"div"!==t&&0!==r&&n.iushrn(r),{div:f\|\|null,mod:n}},o.prototype.divmod=function(e,t,r){return n(!e.isZero()),this.isZero()?{
2024-04-19 13:12:30 UTC	16383	IN	Data Raw: 79 70 65 6f 66 20 65 29 69 66 28 74 29 7b 69 66 28 22 68 65 78 22 3d 3d 3d 74 29 66 6f 72 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 30 2d 39 5d 2b 2f 67 69 2c 22 22 29 29 2e 6c 65 6e 67 74 68 25 32 21 3d 30 26 26 28 65 3d 22 30 22 2b 65 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 32 29 72 2e 70 75 73 68 28 70 61 72 73 65 49 6e 74 28 65 5b 6e 5d 2b 65 5b 6e 2b 31 5d 2c 31 36 29 29 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 2c 6f 3d 69 3e 3e 38 2c 61 3d 32 35 35 26 69 3b 6f 3f 72 2e 70 75 73 68 28 6f 2c 61 29 3a 72 2e 70 75 73 68 28 61 29 7d 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 Data Ascii: ypeof e)if(t){if("hex"===t)for((e=e.replace(/[^a-z0-9]+/gi,"")).length%2!=0&&(e="0"+e),n=0;n<e.length;n+=2)r.push(parseInt(e[n]+e[n+1],16))}else for(var n=0;n<e.length;n++){var i=e.charCodeAt(n),o=i>>8,a=255&i;o?r.push(o,a):r.push(a)}else for(n=0;n<e.leng
2024-04-19 13:12:30 UTC	4	IN	Data Raw: 22 75 74 66 Data Ascii: "utf
2024-04-19 13:12:30 UTC	16383	IN	Data Raw: 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 32 2a 72 3b 63 61 73 65 22 68 65 78 22 3a 72 65 74 75 72 6e 20 72 3e 3e 3e 31 3b 63 61 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 7a 28 65 29 2e 6c 65 6e 67 74 68 3b 64 65 66 61 75 6c 74 3a 69 66 28 6e 29 72 65 74 75 72 6e 20 71 28 65 29 2e 6c 65 6e 67 74 68 3b 74 3d 28 22 22 2b 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 65 5b 72 5d 2c 65 5b 72 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 3f 28 6e 3d 72 2c 72 Data Ascii: -16le":return 2*r;case"hex":return r>>>1;case"base64":return z(e).length;default:if(n)return q(e).length;t=(""+t).toLowerCase(),n=!0}}function b(e,t,r){var n=e[t];e[t]=e[r],e[r]=n}function y(e,t,r,n,i){if(0===e.length)return-1;if("string"==typeof r?(n=r,r
2024-04-19 13:12:30 UTC	1	IN	Data Raw: 33 Data Ascii: 3
2024-04-19 13:12:31 UTC	16383	IN	Data Raw: 39 2c 31 39 31 2c 31 38 39 29 3b 69 66 28 69 3d 6e 75 6c 6c 2c 72 3c 31 32 38 29 7b 69 66 28 28 74 2d 3d 31 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 29 7d 65 6c 73 65 20 69 66 28 72 3c 32 30 34 38 29 7b 69 66 28 28 74 2d 3d 32 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 36 7c 31 39 32 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 20 69 66 28 72 3c 36 35 35 33 36 29 7b 69 66 28 28 74 2d 3d 33 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 31 32 7c 32 32 34 2c 72 3e 3e 36 26 36 33 7c 31 32 38 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 7b 69 66 28 21 28 72 3c 31 31 31 34 31 31 32 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b 69 66 28 28 74 2d Data Ascii: 9,191,189);if(i=null,r<128){if((t-=1)<0)break;o.push(r)}else if(r<2048){if((t-=2)<0)break;o.push(r>>6\|192,63&r\|128)}else if(r<65536){if((t-=3)<0)break;o.push(r>>12\|224,r>>6&63\|128,63&r\|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-
2024-04-19 13:12:31 UTC	16383	IN	Data Raw: 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 3d 28 72 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 2e 6c 65 6e 67 74 68 2c 6f 3d 2d 31 2c 72 3d 3d 3d 74 7c 7c 6e 28 72 2e 6c 69 73 74 65 6e 65 72 29 26 26 72 2e 6c 69 73 74 65 6e 65 72 3d 3d 3d 74 29 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 65 2c 74 29 3b 65 6c 73 65 20 69 66 28 69 28 72 29 29 7b 66 6f 72 28 66 3d 61 Data Ascii: istener must be a function");if(!this._events\|\|!this._events[e])return this;if(a=(r=this._events[e]).length,o=-1,r===t\|\|n(r.listener)&&r.listener===t)delete this._events[e],this._events.removeListener&&this.emit("removeListener",e,t);else if(i(r)){for(f=a
2024-04-19 13:12:31 UTC	2	IN	Data Raw: 35 29 Data Ascii: 5)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49834	172.67.68.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	563	OUT	GET /style/style.css HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	921	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2204800 last-modified: Wed, 22 Mar 2023 11:12:03 GMT etag: W/"80833021af5cd91:0" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52126 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iOIh1%2Bu7mnTc5tVDOUUzkKRLVspWFxbJ1MYK5wL%2BmUzRQ4h%2F2O4Mt1JqRHbkWjxoN8N2hbBkJSrT%2Fw6OcquoCMb3leTFomx7eX7S7vC%2FyCDvFZQSngdIL2Y%2BkR8IgOO5Nfw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d258aa941453f-ATL
2024-04-19 13:12:31 UTC	448	IN	Data Raw: 34 38 36 30 0d 0a 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2c 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 20 73 76 67 20 2a 2c 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 73 74 72 6f 6b 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 70 6f 70 75 70 2c 2e 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 66 6f 63 75 73 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 2c 2e 49 4e Data Ascii: 4860#INDmenu-btn,#INDquickAccess button{position:fixed;height:auto;width:auto;cursor:pointer}#INDmenu-btn svg *,#INDmenu-btn-moveArrow :first-child{stroke:none!important}#INDpopup,.INDhasDragTooltip #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,.IN
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 2d 6c 6f 61 64 69 6e 67 29 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 6e 6f 74 28 2e 49 4e 44 62 74 6e 2d 6c 6f 61 64 69 6e 67 29 3a 68 6f 76 65 72 3a 61 66 74 65 72 2c 2e 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 6e 6f 74 28 2e 49 4e 44 62 74 6e 2d 6c 6f 61 64 69 6e 67 29 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 5b 64 61 74 61 2d 69 6e 64 68 61 73 64 72 61 67 74 6f 6f 6c 74 69 70 5d 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 66 6f 63 75 73 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 2c 5b 64 61 74 61 2d 69 Data Ascii: -loading):focus:before,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:after,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:before,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,[data-i
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 49 4e 44 62 6c 69 6e 64 4e 6f 74 69 66 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 49 4e 44 6c 6f 61 64 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 3a 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 69 6e 64 6d 61 69 6e 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 49 4e 44 6c 6f 61 64 65 72 7d 23 49 4e 44 6d 65 6e 75 20 2e 49 4e 44 Data Ascii: INDblindNotif{position:fixed!important}.INDloader:after{content:" ";display:block;width:25px;height:25px;margin:1px;border-radius:50%;border:5px solid var(--indmaincolor);border-color:#fff transparent;animation:1.2s linear infinite INDloader}#INDmenu .IND
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 52 69 67 68 74 20 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 2c 5b 64 61 74 61 2d 69 6e 64 70 6f 73 69 74 69 6f 6e 72 69 67 68 74 5d 20 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 7b 72 69 67 68 74 3a 31 38 30 70 78 7d 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 74 6f 70 3a 30 7d 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2c 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 20 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 6c 65 66 2c 4f 70 65 6e 20 53 61 6e 73 20 48 65 62 72 65 77 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 Data Ascii: ositionRight #INDquickAccess button,[data-indpositionright] #INDquickAccess button{right:180px}#INDquickAccess button:focus{top:0}:not(#INDdummy).INDtooltip,:not(#INDdummy).INDtooltip *{line-height:24px;font-family:Alef,Open Sans Hebrew,Arial,sans-serif;f
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 6e 3a 61 62 73 6f 6c 75 74 65 7d 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2e 49 4e 44 74 69 70 4c 65 66 74 3a 61 66 74 65 72 2c 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2e 49 4e 44 74 69 70 52 69 67 68 74 3a 61 66 74 65 72 7b 74 6f 70 3a 31 37 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 38 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 38 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2e 49 4e 44 74 69 70 42 6f 74 74 6f 6d 3a 61 66 74 65 72 2c 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 Data Ascii: n:absolute}:not(#INDdummy).INDtooltip.INDtipLeft:after,:not(#INDdummy).INDtooltip.INDtipRight:after{top:17px;margin-top:-8px;border-top:8px solid transparent;border-bottom:8px solid transparent}:not(#INDdummy).INDtooltip.INDtipBottom:after,:not(#INDdummy)
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 7d 23 49 4e 44 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6f 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f Data Ascii: x;overflow:hidden;clip:rect(1px,1px,1px,1px)}#INDmenu{position:fixed;top:0;margin:0;padding:0;width:180px;height:180px;z-index:100000;visibility:visible;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;-o-user-select:none;user-select:no
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 49 4e 44 64 72 61 67 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 65 72 72 6f 72 20 68 32 2c 23 49 4e 44 6c 6f 61 64 65 72 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 32 34 70 78 20 30 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 69 74 69 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 69 74 69 61 6c 7d 23 49 4e 44 65 72 72 6f 72 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 34 34 34 7d 3a 6e 6f 74 28 23 49 4e 44 64 Data Ascii: INDdrag] #INDmenu-btn-moveArrow{display:block!important}#INDerror h2,#INDloader img{margin:24px 0;width:auto;line-height:initial;letter-spacing:initial}#INDerror *{font-family:Arial,Helvetica,sans-serif;font-weight:500;font-size:25px;color:#444}:not(#INDd
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 73 3b 2d 2d 69 6e 64 73 63 61 6c 65 3a 31 3b 2d 2d 69 6e 64 73 63 61 6c 65 2d 63 6f 6e 74 72 61 3a 63 61 6c 63 28 31 20 2d 20 76 61 72 28 2d 2d 69 6e 64 73 63 61 6c 65 29 29 3b 2d 2d 69 6e 64 73 63 61 6c 65 2d 6d 61 72 67 69 6e 3a 63 61 6c 63 28 20 76 61 72 28 2d 2d 69 6e 64 73 63 61 6c 65 2d 63 6f 6e 74 72 61 29 20 2a 20 31 30 20 2a 20 2d 34 70 78 20 29 3b 7a 2d 69 6e 64 65 78 3a 69 6e 68 65 72 69 74 7d 2e 49 4e 44 4d 6f 62 69 6c 65 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2c 5b 64 61 74 61 2d 69 6e 64 6d 6f 62 69 6c 65 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 7b 74 6f 70 3a 75 6e 73 65 74 3b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 49 4e 44 70 6f 73 69 74 69 6f 6e 52 69 67 68 74 20 23 49 4e 44 6d 65 Data Ascii: sition:transform .6s;--indscale:1;--indscale-contra:calc(1 - var(--indscale));--indscale-margin:calc( var(--indscale-contra) * 10 * -4px );z-index:inherit}.INDMobile #INDmenu-btn,[data-indmobile] #INDmenu-btn{top:unset;bottom:24px}.INDpositionRight #INDme
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 61 72 72 6f 77 2d 62 74 6e 3e 73 70 61 6e 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 61 72 72 6f 77 2d 62 74 6e 3e 73 70 61 6e 3a 61 66 74 65 72 7b 72 69 67 68 74 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 61 72 72 6f 77 2d 72 69 67 68 74 2d 62 74 6e 3e 73 70 61 6e 3a 61 66 74 65 72 2c 23 49 4e 44 6d Data Ascii: ortant;border-bottom-left-radius:2px;border-top:none!important;border-right:none!important}#INDmenu-btn.INDarrow-btn>span:before{left:15px!important}#INDmenu-btn.INDarrow-btn>span:after{right:15px!important}#INDmenu-btn.INDarrow-right-btn>span:after,#INDm
2024-04-19 13:12:31 UTC	1369	IN	Data Raw: 5b 64 61 74 61 2d 69 6e 64 70 6f 73 69 74 69 6f 6e 6c 65 66 74 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 73 65 6d 69 63 69 72 63 6c 65 2d 62 74 6e 2e 49 4e 44 6f 75 74 6c 69 6e 65 2d 62 74 6e 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 49 4e 44 70 6f 73 69 74 69 6f 6e 52 69 67 68 74 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 73 65 6d 69 63 69 72 63 6c 65 2d 62 74 6e 2e 49 4e 44 6f 75 74 6c 69 6e 65 2d 62 74 6e 2c 5b 64 61 74 61 2d 69 6e 64 70 6f 73 69 74 69 6f 6e 72 69 67 68 74 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 73 65 6d 69 63 69 72 63 6c 65 2d 62 74 6e 2e 49 4e 44 6f 75 74 6c 69 6e 65 2d 62 74 6e 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 49 4e Data Ascii: [data-indpositionleft] #INDmenu-btn.INDsemicircle-btn.INDoutline-btn{border-left:0!important}.INDpositionRight #INDmenu-btn.INDsemicircle-btn.INDoutline-btn,[data-indpositionright] #INDmenu-btn.INDsemicircle-btn.INDoutline-btn{border-right:0!important}.IN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49835	172.67.68.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	566	OUT	GET /style/btncolor.css HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	910	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2204800 last-modified: Mon, 11 Feb 2019 11:17:50 GMT etag: W/"4c2a96cfbc1d41:0" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52126 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=buHczqoklULCKUJszrFZtrccBWAjPEGZTDP03jR6lTluNI8HayceE40WyTLEUHER9BjRFgY0367ULVFxpVxkHZ60eiEM6GVEmDzdm24ShYt3uOoqDmx7%2F6YGmVjlbNHOyPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d258aadd717f3-ATL
2024-04-19 13:12:31 UTC	113	IN	Data Raw: 36 62 0d 0a 2f 2a 20 4e 61 67 69 63 68 2e 63 6f 6d 20 63 6f 6c 6f 72 20 2a 2f 0d 0a 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 20 7b 0d 0a 09 2d 2d 69 6e 64 6d 61 69 6e 63 6f 6c 6f 72 3a 20 20 20 20 20 20 23 30 36 37 64 38 64 3b 0d 0a 09 2d 2d 69 6e 64 73 65 63 6f 6e 64 63 6f 6c 6f 72 3a 20 20 20 20 57 68 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a Data Ascii: 6b/* Nagich.com color */#INDmenu-btn {--indmaincolor: #067d8d;--indsecondcolor: White;}
2024-04-19 13:12:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49836	172.67.68.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	569	OUT	GET /assets/locale/en.json HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	909	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Type: application/json Content-Length: 810 Connection: close Cache-Control: public, max-age=2204800 last-modified: Tue, 15 Jun 2021 15:40:09 GMT accept-ranges: bytes etag: "f45920b9fc61d71:0" access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y6R%2FhSOUDV1mAp8EURyUvkI6ypkQQSckJs6aj1w%2F%2Fq1TASUjghdjVM0Sz5%2BAOuYqhG4Q2j2tpJKDCDzTu17IrA8jtkWhXwJ8JPbWpApfqmjdb%2F10IjpiuW1dRdZsWtfkzSg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d258aabc4add5-ATL
2024-04-19 13:12:31 UTC	460	IN	Data Raw: 7b 0d 0a 09 22 63 6c 6f 73 65 42 74 6e 22 20 3a 20 22 43 6c 6f 73 65 3c 3c 20 44 69 61 6c 6f 67 3e 3e 22 2c 0d 0a 09 22 61 31 31 79 42 74 6e 22 20 3a 20 7b 20 0d 0a 09 09 22 74 78 74 22 20 3a 20 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 0d 0a 09 09 22 74 69 70 22 20 3a 20 22 4f 70 65 6e 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 73 20 6d 65 6e 75 22 2c 0d 0a 09 09 22 64 72 61 67 22 20 3a 20 22 45 78 70 6c 6f 72 65 20 79 6f 75 72 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 73 22 0d 0a 09 7d 2c 0d 0a 09 22 62 6c 69 6e 64 4e 6f 74 69 66 22 20 3a 20 7b 20 0d 0a 09 09 22 6e 6f 74 65 22 20 3a 20 22 50 6c 65 61 73 65 20 6e 6f 74 65 3a 20 54 68 69 73 20 77 65 62 73 69 74 65 20 69 6e 63 6c 75 64 65 73 20 61 6e 20 61 63 Data Ascii: {"closeBtn" : "Close<< Dialog>>","a11yBtn" : { "txt" : "Accessibility","tip" : "Open accessibility options menu","drag" : "Explore your accessibility options"},"blindNotif" : { "note" : "Please note: This website includes an ac
2024-04-19 13:12:31 UTC	350	IN	Data Raw: 09 09 22 61 31 31 79 4d 65 6e 75 22 20 3a 20 22 50 72 65 73 73 20 65 6e 74 65 72 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 6d 65 6e 75 22 2c 0d 0a 09 09 22 61 31 31 79 4d 65 6e 75 4d 6f 62 69 6c 65 22 20 3a 20 22 50 72 65 73 73 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 6d 65 6e 75 22 2c 0d 0a 09 09 22 62 6c 69 6e 64 22 20 3a 20 7b 20 0d 0a 09 09 09 22 74 78 74 22 20 3a 22 50 72 65 73 73 20 65 6e 74 65 72 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 66 6f 72 20 62 6c 69 6e 64 20 70 65 6f 70 6c 65 22 2c 0d 0a 09 09 09 22 6d 6f 62 69 6c 65 54 78 74 22 20 3a 20 22 50 72 65 73 73 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 66 6f 72 20 62 6c 69 6e 64 20 70 65 6f 70 6c 65 22 2c 0d 0a 09 09 09 22 73 75 70 22 Data Ascii: "a11yMenu" : "Press enter for Accessibility menu","a11yMenuMobile" : "Press for Accessibility menu","blind" : { "txt" :"Press enter for Accessibility for blind people","mobileTxt" : "Press for Accessibility for blind people","sup"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49838	13.248.218.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	618	OUT	POST /embed/updateSession HTTP/1.1 Host: api2.sided.co Connection: keep-alive Content-Length: 185 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	185	OUT	Data Raw: 7b 22 64 6f 6d 61 69 6e 22 3a 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 61 67 65 54 69 74 6c 65 22 3a 22 4a 75 73 74 20 4a 61 72 65 64 3a 20 43 65 6c 65 62 72 69 74 79 20 4e 65 77 73 20 61 6e 64 20 47 6f 73 73 69 70 20 7c 20 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 2c 22 70 75 62 6c 69 73 68 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 20 31 30 3a 30 30 3a 30 30 22 2c 22 70 61 67 65 54 61 67 73 22 3a 22 22 7d Data Ascii: {"domain":"justjared.com","pageUrl":"https://www.justjared.com/","pageTitle":"Just Jared: Celebrity News and Gossip \| Entertainment","publishedDate":"2024-04-19 10:00:00","pageTags":""}
2024-04-19 13:12:31 UTC	385	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 93 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, authorization,x-access-token,apikey Access-Control-Allow-Methods: GET,PUT,POST,DELETE,PATCH,OPTIONS ETag: W/"5d-7U7m+P11vqiaNj7q1C1juomDpLc"
2024-04-19 13:12:31 UTC	93	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6d 62 65 64 20 70 61 67 65 20 73 61 76 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 22 2c 22 64 61 74 61 22 3a 7b 22 65 6d 62 65 64 44 6f 6d 61 69 6e 50 61 67 65 49 64 22 3a 30 7d 7d Data Ascii: {"status":"success","message":"Embed page saved successfully","data":{"embedDomainPageId":0}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49845	172.67.68.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	547	OUT	GET /assets/scripts/classManager.js HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	931	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2204800 last-modified: Mon, 22 May 2023 09:07:38 GMT etag: W/"aec317db8c8cd91:0" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52131 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1vkhS5BAw%2Fum8G%2BlIyQFHb2qbl15cjzFfmv%2BxVUCXOlL2P7wIQmgxShYPg2eq2WQ531EZd7teqiwCNOiu4dq50fwb0iLMMfI6SAM%2FSxzWJSTZCbYVRwf4fu2uQBtCDjiCCA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d258c6cac53c6-ATL
2024-04-19 13:12:31 UTC	438	IN	Data Raw: 36 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 43 6c 61 73 73 4d 61 6e 61 67 65 72 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 6e 69 74 7c 7c 28 74 68 69 73 2e 62 6f 64 79 44 61 74 61 53 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 64 61 74 61 73 65 74 2c 74 68 69 73 2e 62 6f 64 79 43 6c 61 73 73 6c 69 73 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2c 74 68 69 73 2e 64 6f 63 44 61 74 61 73 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 73 65 74 2c 74 68 69 73 2e 65 78 63 6c 75 64 65 73 3d 5b 22 69 6e 64 52 61 74 69 6f 22 5d 2c 74 68 69 73 2e 69 6e 64 52 45 47 45 58 3d 2f 5e 69 6e 64 2f 67 2c 74 Data Ascii: 6ef!function(t){t.ClassManager=class{constructor(){return this.isInit\|\|(this.bodyDataSet=document.body.dataset,this.bodyClasslist=document.body.classList,this.docDataset=document.documentElement.dataset,this.excludes=["indRatio"],this.indREGEX=/^ind/g,t
2024-04-19 13:12:31 UTC	1344	IN	Data Raw: 67 44 69 72 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 7c 7c 74 2e 6c 61 6e 67 44 69 72 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 7d 60 2c 60 49 4e 44 24 7b 74 2e 61 31 31 79 2e 63 61 6d 65 6c 43 61 73 65 28 60 70 6f 73 69 74 69 6f 6e 2d 24 7b 74 2e 6d 65 6e 75 50 6f 73 7c 7c 22 6c 65 66 74 22 7d 60 29 2e 74 72 69 6d 28 29 7d 60 5d 3b 5b 2e 2e 2e 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 62 6f 64 79 43 6c 61 73 73 6c 69 73 74 29 2c 22 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 22 2c 2e 2e 2e 73 5d 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 2f 5e 49 4e 44 2f 67 2e 74 65 73 74 28 74 29 26 26 21 74 68 69 73 2e 65 78 63 6c 75 64 65 73 2e 69 6e 63 6c 75 64 65 73 28 74 29 26 26 74 68 69 73 2e 61 64 64 28 74 29 Data Ascii: gDir.toUpperCase().trim()\|\|t.langDir.toUpperCase().trim()}`,`IND${t.a11y.camelCase(`position-${t.menuPos\|\|"left"}`).trim()}`];[...Array.from(this.bodyClasslist),"INDhasDragTooltip",...s].forEach(t=>{/^IND/g.test(t)&&!this.excludes.includes(t)&&this.add(t)
2024-04-19 13:12:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49847	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	563	OUT	GET /webstatic/css/playerpage.24722ef5.chunk.css HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	520	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 46238 Connection: close Date: Tue, 16 Apr 2024 04:01:07 GMT Last-Modified: Thu, 22 Feb 2024 12:28:17 GMT ETag: "e980e227fcb9d77361ef161ca802b1b8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bfcf96734b4cc9857b114ec0d9419dc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: zNRztrlB9f82MB_zKcecYuXAMUu9-x2znXu1Zpa1scObEXzgg63d_Q== Age: 292285
2024-04-19 13:12:31 UTC	15864	IN	Data Raw: 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e Data Ascii: *,:after,:before{-webkit-box-sizing:border-box;box-sizing:border-box}main{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,N
2024-04-19 13:12:31 UTC	2034	IN	Data Raw: 6d 61 72 67 69 6e 3a 33 70 78 20 30 20 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 70 6c 61 79 65 72 50 61 67 65 4d 61 69 6e 2e 69 73 4c 61 72 67 65 20 2e 70 6c 61 79 65 72 50 61 67 65 54 6f 70 20 2e 70 6c 61 79 65 72 2d 63 74 72 6c 73 20 2e 70 6c 61 79 65 72 62 74 6e 7b 77 69 64 74 68 3a 37 30 70 78 3b 68 65 69 67 68 74 3a 37 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 37 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 37 30 70 78 7d 2e 70 6c 61 79 65 72 50 61 67 65 4d 61 69 6e 2e 69 73 4c 61 72 67 65 20 2e 70 6c 61 79 65 72 50 61 67 65 54 6f 70 20 2e 70 6c 61 79 65 72 2d 63 74 72 6c 73 2d 73 74 69 63 6b 65 72 7b 6c 65 66 74 3a 37 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 3b 72 69 67 68 74 3a 30 7d 2e 70 6c 61 79 65 72 50 61 67 Data Ascii: margin:3px 0 0;max-height:80px}.playerPageMain.isLarge .playerPageTop .player-ctrls .playerbtn{width:70px;height:70px;max-height:70px;max-width:70px}.playerPageMain.isLarge .playerPageTop .player-ctrls-sticker{left:70px;margin-left:15px;right:0}.playerPag
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 74 68 3a 2e 37 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 70 6c 61 79 65 72 50 61 67 65 4d 61 69 6e 2e 69 73 5f 62 6c 6f 67 20 2e 61 75 64 69 6f 2d 62 6c 6f 67 20 2e 63 6f 76 65 72 20 2e 70 6c 61 79 42 74 6e 5f 62 6c 6f 67 2e 70 61 75 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 Data Ascii: th:.7rem;-webkit-transition:all .3s;-o-transition:all .3s;transition:all .3s;background-size:auto 100%;background-position:0;background-repeat:no-repeat;cursor:pointer}.playerPageMain.is_blog .audio-blog .cover .playBtn_blog.pause{background-image:url(dat
2024-04-19 13:12:31 UTC	11956	IN	Data Raw: 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 5a 6d 6c 73 62 43 31 79 64 57 78 6c 50 53 4a 6c 64 6d 56 75 62 32 52 6b 49 6a 34 38 59 32 6c 79 59 32 78 6c 49 48 4e 30 63 6d 39 72 5a 54 30 69 49 30 59 31 4e 55 49 79 4d 79 49 67 63 33 52 79 62 32 74 6c 4c 58 64 70 5a 48 52 6f 50 53 49 79 49 69 42 6a 65 44 30 69 4d 54 49 69 49 47 4e 35 50 53 49 78 4d 69 49 67 63 6a 30 69 4d 54 45 69 4c 7a 34 38 63 47 46 30 61 43 42 6b 50 53 4a 4e 4f 53 34 7a 4f 44 67 67 4f 53 34 32 4d 54 56 6a 4c 54 45 75 4d 54 41 33 49 44 41 74 4d 53 34 30 4f 54 49 75 4e 7a 51 79 4c 53 34 34 4e 6a 4d 67 4d 53 34 32 4e 54 56 73 4d 69 34 7a 4d 7a 51 67 4d 79 34 7a 4f 44 4e 6a 4c 6a 59 7a 4c 6a 6b 78 4e 43 41 78 4c 6a 59 31 4d 79 34 35 4d 54 4d 67 4d 69 34 79 4f 44 49 67 4d 47 77 79 4c 6a 4d Data Ascii: ZmlsbD0ibm9uZSIgZmlsbC1ydWxlPSJldmVub2RkIj48Y2lyY2xlIHN0cm9rZT0iI0Y1NUIyMyIgc3Ryb2tlLXdpZHRoPSIyIiBjeD0iMTIiIGN5PSIxMiIgcj0iMTEiLz48cGF0aCBkPSJNOS4zODggOS42MTVjLTEuMTA3IDAtMS40OTIuNzQyLS44NjMgMS42NTVsMi4zMzQgMy4zODNjLjYzLjkxNCAxLjY1My45MTMgMi4yODIgMGwyLjM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49846	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	645	OUT	GET /webstatic/js/page.vendors~audiobooks~audiobooks.genre~castbox.main~categories~ch~channellist~claim~claim.failed~claim.~b62a876c.e28b21f0.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 93262 Connection: close Date: Fri, 29 Mar 2024 09:42:37 GMT Last-Modified: Fri, 23 Feb 2024 03:34:52 GMT ETag: "bc2aa6173ab28fe890b16540e63b47bc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 446e4a52e4dec2539366be9b1bc2e2a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: VX8IKNzRVikBz3Z_svI1H9f9xEqzPTxfKNHTBsDpcZd17d5N30J05A== Age: 1826995
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 72 2e 63 61 6c 6c 28 65 29 7d 7d 2c 31 30 33 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 72 28 39 30 36 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[0],{1035:function(e,t){var r={}.toString;e.exports=Array.isArray\|\|function(e){return"[object Array]"==r.call(e)}},1036:function(e,t,r){"use strict";(function(t,n){var i=r(906
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 20 21 3d 20 30 22 29 3b 69 66 28 65 2e 5f 74 72 61 6e 73 66 6f 72 6d 53 74 61 74 65 2e 74 72 61 6e 73 66 6f 72 6d 69 6e 67 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 69 6e 67 20 74 72 61 6e 73 66 6f 72 6d 20 64 6f 6e 65 20 77 68 65 6e 20 73 74 69 6c 6c 20 74 72 61 6e 73 66 6f 72 6d 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 6e 75 6c 6c 29 7d 69 2e 69 6e 68 65 72 69 74 73 3d 72 28 37 37 38 29 2c 69 2e 69 6e 68 65 72 69 74 73 28 73 2c 6e 29 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 72 61 6e 73 66 6f 72 6d 53 74 61 74 65 2e 6e 65 65 64 54 72 61 6e 73 66 6f 72 6d 3d 21 31 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: length != 0");if(e._transformState.transforming)throw new Error("Calling transform done when still transforming");return e.push(null)}i.inherits=r(778),i.inherits(s,n),s.prototype.push=function(e,t){return this._transformState.needTransform=!1,n.prototype
2024-04-19 13:12:31 UTC	3028	IN	Data Raw: 22 5d 2c 22 41 66 72 69 63 61 2f 4a 6f 68 61 6e 6e 65 73 62 75 72 67 22 3a 5b 22 41 73 69 61 2f 47 61 7a 61 22 2c 22 41 66 72 69 63 61 2f 43 61 69 72 6f 22 5d 7d 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2d 65 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 3f 74 3a 30 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 65 2c 30 2c 31 2c 30 2c 30 2c 31 2c 30 29 2e 67 65 74 54 69 6d 65 28 29 2c 72 3d 6e 65 77 20 44 61 74 65 28 65 2c 31 32 2c 33 31 2c 32 33 2c 35 39 2c 35 39 29 2e 67 65 74 54 69 6d 65 28 29 2c 69 3d 74 2c 6f 3d 6e 65 77 20 44 61 74 65 28 69 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2c Data Ascii: "],"Africa/Johannesburg":["Asia/Gaza","Africa/Cairo"]}},t=function(e){var t=-e.getTimezoneOffset();return null!==t?t:0},r=function(e){for(var t=new Date(e,0,1,0,0,1,0).getTime(),r=new Date(e,12,31,23,59,59).getTime(),i=t,o=new Date(i).getTimezoneOffset(),
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 72 69 63 61 2f 47 75 61 74 65 6d 61 6c 61 22 2c 22 2d 33 36 30 2c 31 22 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 22 2d 33 36 30 2c 31 2c 73 22 3a 22 50 61 63 69 66 69 63 2f 45 61 73 74 65 72 22 2c 22 2d 33 30 30 2c 30 22 3a 22 41 6d 65 72 69 63 61 2f 42 6f 67 6f 74 61 22 2c 22 2d 33 30 30 2c 31 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 2d 32 37 30 2c 30 22 3a 22 41 6d 65 72 69 63 61 2f 43 61 72 61 63 61 73 22 2c 22 2d 32 34 30 2c 31 22 3a 22 41 6d 65 72 69 63 61 2f 48 61 6c 69 66 61 78 22 2c 22 2d 32 34 30 2c 30 22 3a 22 41 6d 65 72 69 63 61 2f 53 61 6e 74 6f 5f 44 6f 6d 69 6e 67 6f 22 2c 22 2d 32 34 30 2c 31 2c 73 22 3a 22 41 6d 65 72 69 63 61 2f 41 73 75 6e 63 69 6f 6e 22 2c 22 2d 32 31 30 2c 31 22 3a 22 41 6d 65 Data Ascii: rica/Guatemala","-360,1":"America/Chicago","-360,1,s":"Pacific/Easter","-300,0":"America/Bogota","-300,1":"America/New_York","-270,0":"America/Caracas","-240,1":"America/Halifax","-240,0":"America/Santo_Domingo","-240,1,s":"America/Asuncion","-210,1":"Ame
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 28 72 5b 30 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 74 28 72 5b 30 5d 2c 72 5b 31 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 28 72 5b 30 5d 2c 72 5b 31 5d 2c 72 5b 32 5d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 72 29 7d 7d 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 66 28 65 29 2c 73 3d 21 31 7d 7d 7d 7d 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 65 3f 74 68 69 73 3a 65 3a 73 65 6c 66 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 72 28 32 30 29 2c 72 28 37 38 29 29 7d 2c 31 30 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 28 66 75 6e 63 74 69 6f 6e Data Ascii: reak;case 1:t(r[0]);break;case 2:t(r[0],r[1]);break;case 3:t(r[0],r[1],r[2]);break;default:t.apply(void 0,r)}}(t)}finally{f(e),s=!1}}}}}("undefined"===typeof self?"undefined"===typeof e?this:e:self)}).call(this,r(20),r(78))},1077:function(e,t,r){(function
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 2d 62 69 74 73 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 3b 74 2b 3d 34 29 67 28 74 68 69 73 2c 74 2c 74 2b 33 29 2c 67 28 74 68 69 73 2c 74 2b 31 2c 74 2b 32 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 73 77 61 70 36 34 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 66 28 65 25 38 21 3d 3d 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 42 75 66 66 65 72 20 73 69 7a 65 20 6d 75 73 74 20 62 65 20 61 20 6d 75 6c 74 69 70 6c 65 20 6f 66 20 36 34 2d 62 69 74 73 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 3b 74 2b 3d 38 29 67 28 74 68 69 73 2c 74 2c 74 2b 37 29 2c 67 28 74 68 69 73 2c 74 2b 31 2c 74 2b 36 29 2c 67 28 74 68 69 73 2c Data Ascii: -bits");for(var t=0;t<e;t+=4)g(this,t,t+3),g(this,t+1,t+2);return this},u.prototype.swap64=function(){var e=this.length;if(e%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(var t=0;t<e;t+=8)g(this,t,t+7),g(this,t+1,t+6),g(this,
2024-04-19 13:12:31 UTC	8314	IN	Data Raw: 64 20 30 21 3d 3d 6e 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 65 2c 73 7c 7c 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 66 66 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 72 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 29 72 65 74 75 72 6e 20 30 3d 3d 3d 61 72 67 75 6d 65 Data Ascii: d 0!==n.removeListener&&this.emit("removeListener",e,s\|\|t)}return this},a.prototype.off=a.prototype.removeListener,a.prototype.removeAllListeners=function(e){var t,r,n;if(void 0===(r=this._events))return this;if(void 0===r.removeListener)return 0===argume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49851	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	645	OUT	GET /webstatic/js/page.vendors~audiobooks~audiobooks.genre~categories~ch~channellist~claim~claim.failed~claim.link_claimed~~48565954.976d7da0.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 25967 Connection: close Date: Tue, 26 Mar 2024 23:48:32 GMT Last-Modified: Fri, 23 Feb 2024 03:34:52 GMT ETag: "9ebee6dad30bad81d480f56b98e2a44c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0267356cf064f354cd0358140b89faca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: KbEcXr33WuYDksH87g2EPkVz_Dp9iU9Hyqo8_vfBwdvSlz8v2HEcAw== Age: 2035439
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 31 30 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 34 29 2c 72 3d 6e 28 37 29 2c 61 3d 28 6e 28 33 29 2c 6e 28 30 29 29 2c 69 3d 6e 2e 6e 28 61 29 2c 73 3d 6e 28 33 38 29 2c 63 3d 6e 2e 6e 28 73 29 2c 6c 3d 21 31 2c 75 3d 6e 28 38 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[1],{1032:function(e,t,n){"use strict";n.d(t,"b",(function(){return d})),n.d(t,"a",(function(){return f}));var o=n(4),r=n(7),a=(n(3),n(0)),i=n.n(a),s=n(38),c=n.n(s),l=!1,u=n(8
2024-04-19 13:12:31 UTC	9583	IN	Data Raw: 52 69 67 68 74 22 2c 65 29 7d 29 29 7d 2c 74 7d 28 4b 29 3b 63 26 26 77 69 6e 64 6f 77 3b 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 35 29 3b 76 61 72 20 6f 3d 21 31 2c 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 48 54 4d 4c 45 76 65 6e 74 73 22 29 3b 74 2e 69 6e 69 74 45 76 65 6e 74 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 21 30 2c 21 30 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 74 29 7d 28 65 29 7d 29 2c 74 2b 6e 29 2c 61 3d 78 28 65 2c 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: Right",e)}))},t}(K);c&&window;function ne(e,t,n){void 0===n&&(n=5);var o=!1,r=setTimeout((function(){o\|\|function(e){var t=document.createEvent("HTMLEvents");t.initEvent("transitionend",!0,!0),e.dispatchEvent(t)}(e)}),t+n),a=x(e,"transitionend",(function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49850	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	645	OUT	GET /webstatic/js/page.vendors~audiobooks~castbox.main~ch~creator.analytics~creator.ch~creator.ch.des~creator.comments~crea~60d4e606.5fba21ae.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 33941 Connection: close Date: Thu, 18 Apr 2024 04:09:41 GMT Last-Modified: Mon, 18 Mar 2024 07:04:14 GMT ETag: "062af624516cd65261ecf703dbe36ad8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0e227d05dec6e4f9fddab21a200ee232.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: OP22ouAx1wlmUHu1KtJ1JE6-r38lEXhmGfTJotuQmY5Zd8MpRg4IDQ== Age: 118971
2024-04-19 13:12:31 UTC	8949	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 31 30 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 21 65 28 38 31 36 29 26 26 21 65 28 37 38 30 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 28 31 30 34 32 29 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 31 30 34 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[3],{1041:function(t,n,e){t.exports=!e(816)&&!e(780)((function(){return 7!=Object.defineProperty(e(1042)("div"),"a",{get:function(){return 7}}).a}))},1042:function(t,n,e){var
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 61 3d 65 28 36 37 30 29 2e 66 2c 75 3d 30 2c 73 3d 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 63 3d 21 65 28 37 38 30 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 28 4f 62 6a 65 63 74 2e 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 28 7b 7d 29 29 7d 29 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 28 74 2c 72 2c 7b 76 61 6c 75 65 3a 7b 69 3a 22 4f 22 2b 20 2b 2b 75 2c 77 3a 7b 7d 7d 7d 29 7d 2c 6c 3d 74 2e 65 78 70 6f 72 74 73 3d 7b 4b 45 59 3a 72 2c 4e 45 45 44 3a 21 31 2c 66 61 73 74 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 6f 28 74 29 29 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 Data Ascii: a=e(670).f,u=0,s=Object.isExtensible\|\|function(){return!0},c=!e(780)((function(){return s(Object.preventExtensions({}))})),f=function(t){a(t,r,{value:{i:"O"+ ++u,w:{}}})},l=t.exports={KEY:r,NEED:!1,fastKey:function(t,n){if(!o(t))return"symbol"==typeof t?t
2024-04-19 13:12:31 UTC	8608	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 74 2c 65 2c 6e 29 7d 29 29 3a 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 30 29 7d 2c 72 65 6d 6f 76 65 53 74 61 72 74 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 30 21 3d 3d 69 2e 6c 65 6e 67 74 68 26 26 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 28 74 2c 65 2c 6e 29 7d 29 29 7d 2c 65 6e 64 45 76 65 6e 74 73 3a 61 2c 61 64 64 45 6e 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 30 21 3d 3d 61 2e 6c 65 6e 67 74 68 3f 61 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 74 2c 65 2c 6e 29 7d 29 29 3a 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 30 29 7d Data Ascii: (function(e){u(t,e,n)})):window.setTimeout(n,0)},removeStartEventListener:function(t,n){0!==i.length&&i.forEach((function(e){s(t,e,n)}))},endEvents:a,addEndEventListener:function(t,n){0!==a.length?a.forEach((function(e){u(t,e,n)})):window.setTimeout(n,0)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49848	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	645	OUT	GET /webstatic/js/page.vendors~castbox.main~creator.analytics~creator.ch~creator.ch.des~creator.comments~creator.ep~creator~546696e9.f3d7572b.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12628 Connection: close Date: Wed, 17 Apr 2024 17:34:19 GMT Last-Modified: Fri, 23 Feb 2024 03:34:52 GMT ETag: "208c2c49b2b280376e2405b61587027b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4ea27cdf8ff7ba5bd5923d3dc2371c3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: rRECgdUV4RASCvTD1Nk6tDACjiIS3KhxvxPHSGgNWAQNgdY58uq4iQ== Age: 157093
2024-04-19 13:12:31 UTC	12628	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 5d 2c 7b 33 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 7b 4d 41 43 5f 45 4e 54 45 52 3a 33 2c 42 41 43 4b 53 50 41 43 45 3a 38 2c 54 41 42 3a 39 2c 4e 55 4d 5f 43 45 4e 54 45 52 3a 31 32 2c 45 4e 54 45 52 3a 31 33 2c 53 48 49 46 54 3a 31 36 2c 43 54 52 4c 3a 31 37 2c 41 4c 54 3a 31 38 2c 50 41 55 53 45 3a 31 39 2c 43 41 50 53 5f 4c 4f 43 4b 3a 32 30 2c 45 53 43 3a 32 37 2c 53 50 41 43 45 3a 33 32 2c 50 41 47 45 5f 55 50 3a 33 33 2c 50 41 47 45 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[6],{313:function(e,t,n){"use strict";var o={MAC_ENTER:3,BACKSPACE:8,TAB:9,NUM_CENTER:12,ENTER:13,SHIFT:16,CTRL:17,ALT:18,PAUSE:19,CAPS_LOCK:20,ESC:27,SPACE:32,PAGE_UP:33,PAGE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49849	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	546	OUT	GET /webstatic/js/page.playerpage.89c87f35.js HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 233193 Connection: close Date: Fri, 12 Apr 2024 17:20:16 GMT Last-Modified: Fri, 12 Apr 2024 12:29:04 GMT ETag: "aba5645111dd0af79bee8f032245088d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec088df9bde2f31789483558823c5a1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: DN5IhD3CYicp9ZBAp8-sNh_pNzcad1t5NLlqkMh1MaJaUQAZnua0_w== Age: 589935
2024-04-19 13:12:31 UTC	15849	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 3d 77 69 6e 64 6f 77 2e 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 2c 32 2c 31 31 5d 2c 7b 31 30 33 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 29 2c 69 3d 6e 28 31 30 29 2c 6f 3d 6e 28 31 39 29 2c 61 3d 6e 28 31 37 29 2c 73 3d 6e 28 31 38 29 2c 63 3d 6e 28 35 34 29 2c 75 3d 28 6e 28 39 33 35 29 2c 6e 28 30 29 29 2c 6c 3d 6e 2e 6e 28 75 29 2c 70 3d 28 6e 28 39 33 36 29 2c 6e 28 35 33 29 29 2c 64 3d 6e 28 38 37 32 29 2c 66 3d 6e 28 38 32 38 29 2c 68 3d 6e 28 37 34 37 29 2c 6d 3d 6e 28 33 30 33 29 2c 76 Data Ascii: (window.__LOADABLE_LOADED_CHUNKS__=window.__LOADABLE_LOADED_CHUNKS__\|\|[]).push([[70,2,11],{1031:function(e,t,n){"use strict";var r=n(9),i=n(10),o=n(19),a=n(17),s=n(18),c=n(54),u=(n(935),n(0)),l=n.n(u),p=(n(936),n(53)),d=n(872),f=n(828),h=n(747),m=n(303),v
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 62 32 38 76 4c 79 39 76 62 32 38 76 4c 79 39 76 62 32 38 76 4c 79 39 76 62 32 38 76 4c 79 39 76 62 32 38 76 4c 79 39 76 62 32 2b 76 72 36 2f 76 37 2f 42 77 63 48 43 77 73 4c 45 78 4d 54 46 78 63 58 48 78 38 66 49 79 4d 6a 4a 79 63 6e 52 30 64 48 53 30 74 4c 54 30 39 50 59 32 4e 6a 61 32 74 72 62 32 39 76 63 33 4e 7a 64 33 64 33 68 34 65 48 69 34 75 4c 6a 34 2b 50 6b 35 4f 54 6d 35 75 62 6f 36 4f 6a 74 37 65 33 76 37 2b 2f 77 38 50 44 78 38 66 48 79 38 76 4c 30 39 50 54 32 39 76 62 34 2b 50 6a 35 2b 66 6e 36 2b 76 72 37 2b 2f 76 38 2f 50 7a 39 2f 66 33 2f 2f 2f 38 6a 69 6c 46 49 41 41 41 41 52 48 52 53 54 6c 4d 41 41 67 4d 45 42 51 59 48 44 42 45 54 46 78 6f 62 48 53 45 6c 4a 69 6f 76 4f 44 6f 38 50 6b 64 4a 53 30 31 58 57 47 56 72 62 48 46 32 64 33 79 42 Data Ascii: b28vLy9vb28vLy9vb28vLy9vb28vLy9vb28vLy9vb2+vr6/v7/BwcHCwsLExMTFxcXHx8fIyMjJycnR0dHS0tLT09PY2Nja2trb29vc3Nzd3d3h4eHi4uLj4+Pk5OTm5ubo6Ojt7e3v7+/w8PDx8fHy8vL09PT29vb4+Pj5+fn6+vr7+/v8/Pz9/f3///8jilFIAAAARHRSTlMAAgMEBQYHDBETFxobHSElJiovODo8PkdJS01XWGVrbHF2d3yB
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 31 65 34 2c 6e 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 65 2e 74 68 65 6e 28 6e 29 2e 63 61 74 63 68 28 72 29 3b 76 61 72 20 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 2c 72 28 22 74 69 6d 65 6f 75 74 22 29 7d 29 2c 74 29 7d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 29 7b 2f 5e 5c 2f 61 70 70 5c 2f 63 61 73 74 62 6f 78 5c 2f 70 6c 61 79 65 72 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 7c 7c 69 2e 73 65 74 28 65 2c 74 29 7d 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 Data Ascii: ]?arguments[1]:1e4,n=new Promise((function(n,r){e.then(n).catch(r);var i=setTimeout((function(){i&&clearTimeout(i),r("timeout")}),t)}));return n}function E(e,t){/^\/app\/castbox\/player/.test(window.location.pathname)\|\|i.set(e,t)}var N=function(){var e=ar
2024-04-19 13:12:31 UTC	15796	IN	Data Raw: 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 22 63 61 6e 27 74 20 66 69 6e 64 20 65 70 69 73 6f 64 65 5f 69 64 22 29 3b 76 61 72 20 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 63 2e 68 2c 22 2f 61 63 63 6f 75 6e 74 2f 65 70 69 73 6f 64 65 2f 6c 69 6b 65 3f 65 70 69 73 6f 64 65 5f 69 64 3d 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 26 65 6e 61 62 6c 65 3d 22 29 2e 63 6f 6e 63 61 74 28 74 3f 31 3a 30 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 63 2e 63 29 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e Data Ascii: (n)}function X(e,t){if(!e)return Promise.reject("can't find episode_id");var n="".concat(c.h,"/account/episode/like?episode_id=").concat(e,"&enable=").concat(t?1:0);return Object(c.c)(n)}function q(){var e=arguments.length>0&&void 0!==arguments[0]?argumen
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 74 28 63 2e 6e 2c 22 2f 6d 79 2f 72 65 63 6f 72 64 73 22 29 2c 7b 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 72 65 63 6f 72 64 5f 6c 69 73 74 3a 70 2e 63 6f 6e 63 61 74 28 64 29 7d 29 7d 29 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 65 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 65 2e 73 65 6e 74 29 3b 63 61 73 65 20 31 30 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 29 2c 65 29 7d 29 29 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 33 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 Data Ascii: t(c.n,"/my/records"),{body:JSON.stringify({record_list:p.concat(d)})});case 9:return e.abrupt("return",e.sent);case 10:case"end":return e.stop()}}),e)})))).apply(this,arguments)}},306:function(e,t,n){"use strict";n.d(t,"d",(function(){return p})),n.d(t,"g
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 3c 6f 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 6f 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 69 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 69 7d 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 7d 2c 33 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 22 4d 2b 22 3a 65 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 31 2c 22 64 2b 22 3a 65 2e 67 65 74 44 61 74 65 28 29 2c 22 68 2b 22 3a 65 2e 67 65 74 48 6f 75 72 73 28 29 2c 22 Data Ascii: <o.length;r++)n=o[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}n.d(t,"a",(function(){return r}))},312:function(e,t,n){"use strict";function r(e,t){var n={"M+":e.getMonth()+1,"d+":e.getDate(),"h+":e.getHours(),"
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 6e 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 2c 6e 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 28 29 2c 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 74 29 7d 72 65 74 75 72 6e 20 69 2e 63 6c 65 61 72 3d 72 2c 69 7d 28 74 68 69 73 2e 66 6f 72 63 65 41 6c 69 67 6e 2c 74 68 69 73 2e 70 72 6f 70 73 2e 6d 6f 6e 69 74 6f 72 42 75 66 66 65 72 54 69 6d 65 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 3d 4f 62 6a 65 63 74 28 79 2e 61 29 28 77 69 6e 64 6f 77 2c 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 62 75 66 66 65 72 4d 6f 6e 69 74 6f 72 29 29 7d 7d 2c 7b 6b 65 79 3a 22 73 74 6f 70 4d 6f 6e 69 74 6f 72 57 69 6e 64 6f 77 52 65 73 69 Data Ascii: t){var n=void 0;function r(){n&&(clearTimeout(n),n=null)}function i(){r(),n=setTimeout(e,t)}return i.clear=r,i}(this.forceAlign,this.props.monitorBufferTime),this.resizeHandler=Object(y.a)(window,"resize",this.bufferMonitor))}},{key:"stopMonitorWindowResi
2024-04-19 13:12:31 UTC	16384	IN	Data Raw: 70 43 6c 61 73 73 4e 61 6d 65 46 72 6f 6d 41 6c 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 5b 5d 2c 72 3d 65 2e 70 72 6f 70 73 2c 69 3d 72 2e 70 6f 70 75 70 50 6c 61 63 65 6d 65 6e 74 2c 6f 3d 72 2e 62 75 69 6c 74 69 6e 50 6c 61 63 65 6d 65 6e 74 73 2c 61 3d 72 2e 70 72 65 66 69 78 43 6c 73 2c 73 3d 72 2e 61 6c 69 67 6e 50 6f 69 6e 74 2c 63 3d 72 2e 67 65 74 50 6f 70 75 70 43 6c 61 73 73 4e 61 6d 65 46 72 6f 6d 41 6c 69 67 6e 3b 72 65 74 75 72 6e 20 69 26 26 6f 26 26 6e 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 6e 2e 70 6f 69 6e 74 73 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 6b 28 65 5b 6f 5d 2e 70 6f 69 6e Data Ascii: pClassNameFromAlign=function(t){var n=[],r=e.props,i=r.popupPlacement,o=r.builtinPlacements,a=r.prefixCls,s=r.alignPoint,c=r.getPopupClassNameFromAlign;return i&&o&&n.push(function(e,t,n,r){var i=n.points;for(var o in e)if(e.hasOwnProperty(o)&&k(e[o].poin
2024-04-19 13:12:31 UTC	12792	IN	Data Raw: 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2c 74 3d 65 2e 6f 76 65 72 6c 61 79 2c 6e 3d 65 2e 70 72 65 66 69 78 43 6c 73 2c 72 3d 65 2e 69 64 3b 72 65 74 75 72 6e 20 68 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 2b 22 2d 69 6e 6e 65 72 22 2c 69 64 3a 72 2c 72 6f 6c 65 3a 22 74 6f 6f 6c 74 69 70 22 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 3f 74 28 29 3a 74 29 7d 2c 74 7d 28 68 2e 61 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 79 2e 70 72 6f 70 54 79 70 65 73 3d 7b 70 72 65 66 69 78 43 6c 73 3a 76 2e 61 2e 73 74 72 69 6e 67 2c 6f 76 65 72 6c 61 79 3a 76 2e 61 2e 6f 6e 65 4f 66 54 79 70 65 28 5b 76 2e 61 2e 6e Data Ascii: pe.render=function(){var e=this.props,t=e.overlay,n=e.prefixCls,r=e.id;return h.a.createElement("div",{className:n+"-inner",id:r,role:"tooltip"},"function"===typeof t?t():t)},t}(h.a.Component);y.propTypes={prefixCls:v.a.string,overlay:v.a.oneOfType([v.a.n
2024-04-19 13:12:31 UTC	6396	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 3b 72 65 74 75 72 6e 20 6e 2e 73 63 72 6f 6c 6c 4c 69 73 74 65 6e 65 72 3d 6e 2e 73 63 72 6f 6c 6c 4c 69 73 74 65 6e 65 72 2e 62 69 6e 64 28 6e 29 2c 6e 2e 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 4f 70 74 69 6f 6e 73 3d 6e 2e 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 4f 70 74 69 6f 6e 73 2e 62 69 6e 64 28 6e 29 2c 6e 2e 6d 6f 75 73 65 77 68 65 65 6c 4c 69 73 74 65 6e 65 72 3d 6e 2e 6d 6f 75 73 65 77 68 65 65 6c 4c 69 73 74 65 6e 65 72 2e 62 69 6e 64 28 6e 29 2c 6e 7d 72 65 74 75 72 Data Ascii: ypeof t&&"function"!==typeof t?e:t}(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e));return n.scrollListener=n.scrollListener.bind(n),n.eventListenerOptions=n.eventListenerOptions.bind(n),n.mousewheelListener=n.mousewheelListener.bind(n),n}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49839	3.215.243.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	986	OUT	GET /zones/jstjared/services?dp=https%3A%2F%2Fwww.justjared.com%2F&pu=https%3A%2F%2Fwww.justjared.com%2F&ogu=https%3A%2F%2Fwww.justjared.com&rf=&r=3.88.29&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=10240&bf=f42f33720e241642e593da0d840ca6c8d6073588&ce=true&fs=false&dpr=1&sch=1024&scw=1280&lt=1713532349547&to=-120&vpii=false&vph=907&vpw=1280 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	575	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 759 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:31 GMT; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Set-Cookie: vst=u_bd73a985-3ef7-4416-a679-3a9309181613; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:31 GMT; Path=/; Secure; SameSite=None ETag: "045254b2d25d61e53ec658aa3ee3408ef" Timing-Allow-Origin: *
2024-04-19 13:12:31 UTC	759	IN	Data Raw: 7b 22 61 74 22 3a 7b 22 6d 77 22 3a 32 35 30 2c 22 63 65 22 3a 5b 22 2e 63 6e 78 70 6c 2d 76 70 61 69 64 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 22 23 68 6f 74 5f 73 74 6f 72 69 65 73 5f 73 6c 69 64 65 72 22 2c 22 2e 6c 69 6b 65 2d 74 68 69 73 22 2c 22 23 73 69 64 65 31 22 2c 22 2e 63 73 73 2d 37 71 6f 37 75 35 22 2c 22 2e 63 6f 6e 6e 61 74 69 78 22 2c 22 23 73 69 64 65 62 61 72 22 2c 22 2e 7a 65 72 67 6d 6f 64 22 2c 22 23 72 63 2d 77 69 64 67 65 74 2d 34 63 65 64 31 33 22 2c 22 2e 74 68 75 6d 62 6e 61 69 6c 22 5d 2c 22 72 65 66 22 3a 7b 22 6d 61 78 22 3a 35 2c 22 69 6e 74 22 3a 33 30 7d 2c 22 6d 68 22 3a 32 30 30 2c 22 70 73 22 3a 74 72 75 65 2c 22 74 72 22 3a 30 2e 34 2c 22 6f 66 22 3a 66 61 6c 73 65 2c 22 69 6e 49 6d 61 67 65 50 72 65 66 65 74 63 68 22 3a Data Ascii: {"at":{"mw":250,"ce":[".cnxpl-vpaid-container","#hot_stories_slider",".like-this","#side1",".css-7qo7u5",".connatix","#sidebar",".zergmod","#rc-widget-4ced13",".thumbnail"],"ref":{"max":5,"int":30},"mh":200,"ps":true,"tr":0.4,"of":false,"inImagePrefetch":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49854	31.13.65.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	531	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-19 13:12:31 UTC	1522	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-19 13:12:31 UTC	13	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 Data Ascii: /*** Copyrig
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 Data Ascii: ht (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web se
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 Data Ascii: console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterator:"@@itera
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 Data Ascii: .prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,config
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 3a 69 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e Data Ascii: :i(HTMLElement))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})();return k.
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 6e 7b 65 72 72 6f 72 3a 6e 75 6c 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6d 28 7b 74 79 70 65 3a 22 Data Ascii: n{error:null,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)return m({type:"
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 68 69 73 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 63 5d 3d 61 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 62 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 63 5d 7d 7d 7d 2c 7b 6b 65 79 3a 22 6c 69 73 74 65 6e 4f 6e 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 26 26 62 28 29 3b 62 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 62 3d 74 68 69 73 2e 6c 69 73 74 65 6e 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 66 6f 72 28 Data Ascii: his._subscriptions[c]=a;return function(){delete b._subscriptions[c]}}},{key:"listenOnce",value:function(a){var b=null,c=function(){b&&b();b=null;return a.apply(void 0,arguments)};b=this.listen(c);return b}},{key:"trigger",value:function(){var a=this;for(
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 69 73 2e 5f 64 61 74 61 2e 6c 65 6e 67 74 68 3e 30 26 26 74 68 69 73 2e 5f 63 62 28 74 68 69 73 2e 5f 64 61 74 61 29 2c 74 68 69 73 2e 5f 64 61 74 61 3d 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 69 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 Data Ascii: is._data.length>0&&this._cb(this._data),this._data=[]}}]);return a}();l.exports=i})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBrowserPropertiesConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(f
2024-04-19 13:12:31 UTC	1500	IN	Data Raw: 6c 6c 28 62 2e 73 74 72 69 6e 67 4f 72 4e 75 6d 62 65 72 28 29 29 2c 72 75 6c 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 4f 72 53 74 72 69 6e 67 28 29 29 7d 29 29 29 29 2c 77 63 61 52 75 6c 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 4f 72 4e 75 6d 62 65 72 28 29 29 2c 72 75 6c 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 4f 72 53 74 72 69 6e 67 28 29 29 7d 29 29 29 29 2c 76 61 6c 75 65 52 75 6c 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a Data Ascii: ll(b.stringOrNumber()),rule:b.allowNull(b.objectOrString())})))),wcaRules:b.allowNull(b.arrayOf(b.allowNull(b.objectWithFields({id:b.allowNull(b.stringOrNumber()),rule:b.allowNull(b.objectOrString())})))),valueRules:b.allowNull(b.arrayOf(b.allowNull(b.obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49856	18.67.76.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	774	OUT	GET /index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	547	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 5157 Connection: close Last-Modified: Thu, 18 Apr 2024 14:55:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 12:45:03 GMT Cache-Control: max-age=3600 ETag: "b8f0ef29ca2a86358de0ad2fa8ca6c73" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6aa8d2883437a2897f326bfc58beed3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: D34BzRnWsc1J_KpJ8Q4aJCsnJFve1x9qml-yLxVyQlS40n3jV5fgIg== Age: 1649
2024-04-19 13:12:31 UTC	5157	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 69 63 65 20 4d 65 73 73 61 67 65 20 41 70 70 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>Notice Message App</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no,viewport-fit=cover"> <meta name="mobile-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49853	151.101.193.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	541	OUT	GET /libtrc/castbox-desktop/loader.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 775334 x-amz-id-2: c4jjeZpKXlycwhrMcYcH6g1Afxd0oE+s1cAP4IcZyRXeLdNEEu1FOPAANH8lobu4BCYyLa5Y5r8= x-amz-request-id: E2B0BFQW1TBK79ND x-amz-replication-status: FAILED Last-Modified: Thu, 18 Apr 2024 11:53:24 GMT ETag: "94a5626eb472e8df09751feb6d7a46a6" x-amz-server-side-encryption: AES256 x-amz-version-id: dxh9o2brLEW_qEwj9zrlLHhu5EWfrRQq Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Fri, 19 Apr 2024 13:12:31 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130039-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1713532352.570713,VS0,VE40 Cache-Control: private,max-age=14401 Vary: Accept-Encoding abp: 91 Access-Control-Allow-Origin: *
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 36 33 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 79 70 65 29 22 69 73 49 6e 74 65 72 73 65 63 Data Ascii: (function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersec
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 65 72 44 6f 63 75 6d 65 6e 74 29 2c 30 3d 3d 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 75 6e 72 65 67 69 73 74 65 72 49 6e 73 74 61 6e 63 65 28 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 63 6f 6e 6e 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 41 6c 6c 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 29 2c 74 68 69 73 2e 5f 75 6e 72 65 67 69 73 74 65 72 49 6e 73 74 61 6e 63 65 28 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 6b 65 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e Data Ascii: erDocument),0==this._observationTargets.length&&this._unregisterInstance()},a.prototype.disconnect=function(){this._observationTargets=[],this._unmonitorAllIntersections(),this._unregisterInstance()},a.prototype.takeRecords=function(){var e=this._queuedEn
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 65 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 29 2c 73 28 65 2c 22 72 65 73 69 7a 65 22 2c 6e 2c 21 30 29 29 2c 73 28 74 2c 22 73 63 72 6f 6c 6c 22 2c 6e 2c 21 30 29 2c 61 26 26 61 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 7d 29 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 72 6f 6f 74 26 26 28 74 68 69 73 2e 72 6f 6f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 72 6f 6f 74 29 7c 7c 65 3b 69 66 28 74 21 3d 63 29 7b 76 61 72 20 75 3d 6f 28 74 29 3b 75 26 26 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 75 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 7d 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: e.clearInterval(i),s(e,"resize",n,!0)),s(t,"scroll",n,!0),a&&a.disconnect()}));var c=this.root&&(this.root.ownerDocument\|\|this.root)\|\|e;if(t!=c){var u=o(t);u&&this._monitorIntersections(u.ownerDocument)}}},a.prototype._unmonitorIntersections=function(t){v
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 2e 65 6e 74 72 79 3d 6e 65 77 20 69 28 7b 74 69 6d 65 3a 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 74 61 72 67 65 74 3a 6f 2c 62 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 3a 61 2c 72 6f 6f 74 42 6f 75 6e 64 73 3a 64 2c 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 3a 75 7d 29 3b 73 3f 65 26 26 6c 3f 74 68 69 73 2e 5f 68 61 73 43 72 6f 73 73 65 64 54 68 72 65 73 68 6f 6c 64 28 73 2c 70 29 26 26 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 2e 70 75 73 68 28 70 29 3a 73 26 26 73 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 26 26 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 2e 70 75 73 68 28 70 29 3a 74 Data Ascii: .entry=new i({time:window.performance&&performance.now&&performance.now(),target:o,boundingClientRect:a,rootBounds:d,intersectionRect:u});s?e&&l?this._hasCrossedThreshold(s,p)&&this._queuedEntries.push(p):s&&s.isIntersecting&&this._queuedEntries.push(p):t
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 6e 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 6f 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 77 69 64 74 68 3a 6e 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 6f 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 6e 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 6f 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 68 65 69 67 68 74 3a 6e 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 6f 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 78 70 61 6e 64 52 65 63 74 42 79 52 6f 6f 74 4d 61 72 67 69 6e 28 74 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 78 70 61 6e 64 52 65 63 74 42 79 52 6f 6f 74 4d 61 72 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f Data Ascii: ,left:0,right:n.clientWidth\|\|o.clientWidth,width:n.clientWidth\|\|o.clientWidth,bottom:n.clientHeight\|\|o.clientHeight,height:n.clientHeight\|\|o.clientHeight}}return this._expandRectByRootMargin(t)},a.prototype._expandRectByRootMargin=function(e){var t=this._
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 3d 75 28 65 2e 62 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 2c 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 3d 75 28 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 7c 7c 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 29 2c 74 68 69 73 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3d 21 21 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 3b 76 61 72 20 74 3d 74 68 69 73 2e 62 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 2c 72 3d 74 2e 77 69 64 74 68 2a 74 2e 68 65 69 67 68 74 2c 6e 3d 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 65 63 74 2c 6f 3d 6e 2e 77 69 64 74 Data Ascii: dingClientRect=u(e.boundingClientRect),this.intersectionRect=u(e.intersectionRect\|\|{top:0,bottom:0,left:0,right:0,width:0,height:0}),this.isIntersecting=!!e.intersectionRect;var t=this.boundingClientRect,r=t.width*t.height,n=this.intersectionRect,o=n.widt
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 3b 74 72 79 7b 74 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 74 3f 28 74 2e 77 69 64 74 68 26 26 74 2e 68 65 69 67 68 74 7c 7c 28 74 3d 7b 74 6f 70 3a 74 2e 74 6f 70 2c 72 69 67 68 74 3a 74 2e 72 69 67 68 74 2c 62 6f 74 74 6f 6d 3a 74 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2c 77 69 64 74 68 3a 74 2e 72 69 67 68 74 2d 74 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 74 2e 62 6f 74 74 6f 6d 2d 74 2e 74 6f 70 7d 29 2c 74 29 3a 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 21 65 7c 7c 22 78 22 69 6e 20 Data Ascii: ;try{t=e.getBoundingClientRect()}catch(e){}return t?(t.width&&t.height\|\|(t={top:t.top,right:t.right,bottom:t.bottom,left:t.left,width:t.right-t.left,height:t.bottom-t.top}),t):{top:0,bottom:0,left:0,right:0,width:0,height:0}}function u(e){return!e\|\|"x"in
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 76 61 72 20 6f 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 6f 29 3b 69 66 28 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 72 28 69 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 28 65 5b 72 5d 2c 72 29 7d 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 74 2e 72 65 73 6f 6c 76 65 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 5b 61 5d 3d 65 2c 30 3d 3d 2d 2d 6f 26 26 72 28 69 29 7d 29 2c 6e 29 7d 29 29 7d 29 29 7d 2c 74 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 Data Ascii: {var t=this;return new t((function(r,n){var o=e.length,i=new Array(o);if(0===o)return r(i);!function(e,t){for(var r=0;r<e.length;r++)t(e[r],r)}(e,(function(e,a){t.resolve(e).then((function(e){i[a]=e,0==--o&&r(i)}),n)}))}))},t.race=function(e){var t=this;r
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 6d 69 73 65 2c 6f 3d 65 2e 72 65 73 6f 6c 76 65 2c 69 3d 65 2e 72 65 6a 65 63 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 28 72 29 3b 62 28 6e 2c 6f 2c 69 2c 65 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 7d 74 2e 5f 6f 76 65 72 72 69 64 65 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 65 7d 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 3f 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 2c 65 3d 66 Data Ascii: mise,o=e.resolve,i=e.reject;return function(){try{var e=t(r);b(n,o,i,e,e)}catch(e){i(e)}}}t._overrideUnhandledExceptionHandler=function(e){r=e};var m=function(){var e;"undefined"!=typeof window&&window.postMessage?(window.addEventListener("message",n),e=f
2024-04-19 13:12:31 UTC	1378	IN	Data Raw: 38 34 38 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 2e 66 69 6c 74 65 72 28 6c 29 2e 6c 65 6e 67 74 68 3e 30 3a 21 21 65 2e 6d 6f 64 65 26 26 22 61 6d 70 22 3d 3d 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 7d 76 61 72 20 73 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 69 66 28 30 21 3d 3d 73 29 72 65 74 75 72 6e 20 32 3d 3d 3d 73 3b 76 61 72 20 74 3d 6c 28 28 30 2c 61 2e 63 56 29 28 29 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 2e 69 6e 64 65 78 4f 66 28 22 2e 61 6d 70 70 72 6f 6a 65 63 74 2e 6e 65 74 22 29 3e 2d 31 26 26 21 21 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 69 2e 74 70 2e 63 6f 6e 74 65 78 74 Data Ascii: 848);function l(e){return e instanceof Array?e.filter(l).length>0:!!e.mode&&"amp"===e.framework}var s=0;function c(){var e;if(0!==s)return 2===s;var t=l((0,a.cV)());return t\|\|(t=window.location.host.indexOf(".ampproject.net")>-1&&!!(null===(e=i.tp.context

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49744	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	653	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	507	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 4423 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Fri, 19 Apr 2024 13:10:03 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 60148e1b654deaf57ffb1900e4709a68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: qn_2u0nPBWC6spLe1EF6Z54OMCsbSPkBEAFI7Pqkk45NST6f4uoHvA== Age: 148
2024-04-19 13:12:31 UTC	4423	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49857	18.155.1.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	899	OUT	GET /b?c1=7&c2=31732370&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1713532348771&ns_c=UTF-8&c3=874156489745619&gdpr=0&gdpr_p1t=&gdpr_li=&gdpr_purps=&gdpr_pcc=&cs_cmp_nc=1&cs_cmp_id=6&cs_cmp_sv=1&cs_cmp_rt=845&c7=https%3A%2F%2Fwww.justjared.com%2F&c8=Just%20Jared%3A%20Celebrity%20News%20and%20Gossip%20%7C%20Entertainment&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	1085	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 19 Apr 2024 13:12:31 GMT Location: /b2?c1=7&c2=31732370&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1713532348771&ns_c=UTF-8&c3=874156489745619&gdpr=0&gdpr_p1t=&gdpr_li=&gdpr_purps=&gdpr_pcc=&cs_cmp_nc=1&cs_cmp_id=6&cs_cmp_sv=1&cs_cmp_rt=845&c7=https%3A%2F%2Fwww.justjared.com%2F&c8=Just%20Jared%3A%20Celebrity%20News%20and%20Gossip%20%7C%20Entertainment&c9= set-cookie: UID=1A8656fff7c75542b3fed171713532351; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=181656fff7ac2542b3feb641713532351; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=1A8656fff7c75542b3fed171713532351; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 1172fa209f0ddd24573a1bf406665dec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 X-Amz-Cf-Id: ws7kG1BJG_yzVZ2b7Qt2nI812p07x0bU_0HbKdnc6Jd21RoOEshUeQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49858	130.211.23.194	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	574	OUT	GET /country?o=5668060692217856 HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	332	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Fri, 19 Apr 2024 13:12:31 GMT Content-Length: 37 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:31 UTC	37	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 69 73 52 65 73 74 72 69 63 74 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"country":"US","isRestricted":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49859	130.211.23.194	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	722	OUT	GET /pv?tid=0eJaeNs0&w=5662170614333440&o=5668060692217856&cv=2.1.41&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.justjared.com%2F&sid=juMcPKUMdX&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:31 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Fri, 19 Apr 2024 13:12:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49862	172.67.68.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	568	OUT	GET /assets/images/11.svg HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	910	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: image/svg+xml Content-Length: 1017 Connection: close Cache-Control: public, max-age=2204800 last-modified: Thu, 01 Aug 2019 12:47:47 GMT etag: "42b27526748d51:0" access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52122 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hWVdI8nvIaMuUMKEnBMXO5i7UTl6uyMJOSXw7yW22CE7lIkvkeTXtW6qdAN%2FTqehDuoxz7HLNa5y6%2BlvwblqFlg3vkJXN08gzMdsUEXQ0xB0xs1ByLhphebKOdPpbv7CS%2Bw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25901d681392-ATL
2024-04-19 13:12:32 UTC	459	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 32 22 20 62 61 73 65 50 72 6f 66 69 6c 65 3d 22 74 69 6e 79 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0d 0a 09 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 2e 32 39 39 20 31 34 2e 38 38 36 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 31 30 31 30 31 22 20 64 3d 22 4d 31 31 2e 32 37 31 2c 33 2e 36 35 36 63 2d 30 2e 31 31 37 2d 30 2e 34 34 32 2d 30 2e 36 31 39 2d 30 2e 37 30 38 2d 31 2e 30 36 31 2d Data Ascii: <svg version="1.2" baseProfile="tiny" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 11.299 14.886" xml:space="preserve"><path fill="#010101" d="M11.271,3.656c-0.117-0.442-0.619-0.708-1.061-
2024-04-19 13:12:32 UTC	558	IN	Data Raw: 2e 38 35 38 2d 30 2e 32 30 37 2c 32 2e 33 32 39 63 2d 30 2e 32 39 35 2c 31 2e 33 35 36 2d 31 2e 39 31 36 2c 35 2e 30 37 2d 31 2e 39 31 36 2c 35 2e 30 37 0d 0a 09 63 2d 30 2e 32 30 37 2c 30 2e 34 34 32 2c 30 2c 30 2e 39 34 33 2c 30 2e 34 31 33 2c 31 2e 31 35 63 30 2e 31 31 38 2c 30 2e 30 35 39 2c 30 2e 32 33 36 2c 30 2e 30 38 38 2c 30 2e 33 35 34 2c 30 2e 30 38 38 63 30 2e 33 32 34 2c 30 2c 30 2e 36 34 38 2d 30 2e 31 37 38 2c 30 2e 37 36 36 2d 30 2e 35 30 31 4c 35 2e 37 2c 31 30 2e 38 34 38 6c 31 2e 36 35 31 2c 33 2e 35 36 37 0d 0a 09 63 30 2e 31 34 37 2c 30 2e 32 39 33 2c 30 2e 34 34 31 2c 30 2e 34 37 31 2c 30 2e 37 36 37 2c 30 2e 34 37 31 63 30 2e 31 31 38 2c 30 2c 30 2e 32 33 35 2d 30 2e 30 32 39 2c 30 2e 33 35 34 2d 30 2e 30 38 38 63 30 2e 34 34 2d 30 Data Ascii: .858-0.207,2.329c-0.295,1.356-1.916,5.07-1.916,5.07c-0.207,0.442,0,0.943,0.413,1.15c0.118,0.059,0.236,0.088,0.354,0.088c0.324,0,0.648-0.178,0.766-0.501L5.7,10.848l1.651,3.567c0.147,0.293,0.441,0.471,0.767,0.471c0.118,0,0.235-0.029,0.354-0.088c0.44-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49861	3.161.136.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	545	OUT	GET /rules-p-2bXhGE9g7fCno.js HTTP/1.1 Host: rules.quantcount.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 160 Connection: close Last-Modified: Thu, 13 Oct 2022 23:40:35 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin access-control-allow-origin: * access-control-allow-methods: GET Date: Fri, 19 Apr 2024 12:52:01 GMT Cache-Control: max-age=3600 ETag: "12eee0c4454508f93deca7600fbfe4e3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 22faf6fcae096ee97264521770b65762.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: OmYL24u7pQFZUtVYpbylJ3glTJU0HzrJ1JkZYlkOIpxR3_C-aU67uA== Age: 1231
2024-04-19 13:12:32 UTC	160	IN	Data Raw: 2f 2a 0a 20 51 75 61 6e 74 63 61 73 74 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 74 61 67 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 32 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 5f 5f 71 63 28 22 72 75 6c 65 73 22 2c 5b 61 5d 29 7d 29 28 22 70 2d 32 62 58 68 47 45 39 67 37 66 43 6e 6f 22 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b Data Ascii: /* Quantcast measurement tag Copyright (c) 2008-2022, Quantcast Corp.*/'use strict';(function(a,b,c){__qc("rules",[a])})("p-2bXhGE9g7fCno",window,document);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49863	13.33.4.96	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	575	OUT	GET /configs/78a541f2-9748-4ba5-9cda-85fd7a44b234 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	389	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 13:10:04 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 3d9025085ca74ec423404f8a18a7972c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 X-Amz-Cf-Id: cnYsYTOekiYM_DiPWWeVTkMENERYGc_ZDdEuhR2re31moywb2DNuig== Age: 148
2024-04-19 13:12:32 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 37 38 61 35 34 31 66 32 2d 39 37 34 38 2d 34 62 61 35 2d 39 63 64 61 2d 38 35 66 64 37 61 34 34 62 32 33 34 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "78a541f2-9748-4ba5-9cda-85fd7a44b234";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49870	34.120.253.250	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	532	OUT	GET /3479/i.js HTTP/1.1 Host: tag.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	914	IN	HTTP/1.1 200 OK server: istio-envoy date: Fri, 19 Apr 2024 13:12:31 GMT content-type: text/plain; charset=utf-8 Content-Length: 6394 timing-allow-origin: * x-region: us-central1 vary: Accept-Encoding access-control-allow-origin: * link: <https://assets.bounceexchange.com>; rel=dns-prefetch link: <https://events.bouncex.net>; rel=dns-prefetch link: <https://data.cdnbasket.net>; rel=dns-prefetch link: <https://page.cdnbasket.net>; rel=dns-prefetch link: <https://view.cdnbasket.net>; rel=dns-prefetch link: <https://ids.cdnwidget.com>; rel=dns-prefetch link: <https://pix.cdnwidget.com>; rel=dns-prefetch link: <https://api.bounceexchange.com>; rel=preconnect link: <https://pd.cdnwidget.com>; rel=preconnect etag: f196e06dfee5c7 x-envoy-upstream-service-time: 0 Via: 1.1 google Cache-Control: public,max-age=60 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 62 78 42 6f 6f 74 73 74 72 61 70 28 29 20 7b 0a 09 76 61 72 20 72 65 20 3d 20 2f 62 6f 74 7c 63 72 61 77 6c 7c 73 6c 75 72 70 7c 73 70 69 64 65 72 7c 6d 65 64 69 61 70 61 72 74 6e 65 72 73 7c 68 65 61 64 6c 65 73 73 63 68 72 6f 6d 65 7c 73 6e 61 70 2d 70 72 65 66 65 74 63 68 7c 72 65 6d 6f 74 61 73 6b 73 7c 77 6f 6f 72 61 6e 6b 7c 75 70 74 69 6d 65 5c 2e 63 6f 6d 7c 66 61 63 65 62 6f 6f 6b 65 78 74 65 72 6e 61 6c 68 69 74 7c 66 61 63 65 62 6f 6f 6b 63 61 74 61 6c 6f 67 2f 69 3b 0a 09 69 66 20 28 72 65 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 20 3d 3d 20 27 27 29 20 7b 0a 09 09 72 65 Data Ascii: (function() { function bxBootstrap() {var re = /bot\|crawl\|slurp\|spider\|mediapartners\|headlesschrome\|snap-prefetch\|remotasks\|woorank\|uptime\.com\|facebookexternalhit\|facebookcatalog/i;if (re.test(navigator.userAgent) \|\| navigator.userAgent == '') {re
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 22 2c 22 65 6e 63 6f 72 65 74 65 73 74 22 3a 22 23 70 61 67 65 22 2c 22 6d 61 73 74 68 65 61 64 5f 68 69 64 65 5f 6f 6e 5f 64 65 73 6b 74 6f 70 22 3a 22 23 74 6f 70 5f 53 22 7d 2c 22 76 61 72 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 75 6e 64 65 72 74 6f 6e 65 5f 70 72 65 73 65 6e 74 22 2c 22 70 6f 6c 6c 69 6e 67 22 3a 22 61 6c 6c 22 2c 22 70 65 72 73 69 73 74 22 3a 22 6e 6f 22 2c 22 70 61 67 65 5f 74 79 70 65 73 22 3a 5b 5d 2c 22 74 65 73 74 6d 6f 64 65 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 22 3a 22 66 61 6c 73 65 22 2c 22 63 6f 64 65 22 3a 22 6a 51 75 65 72 79 28 27 23 72 6f 73 5f 69 6e 74 65 72 73 74 69 74 69 61 6c 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 3b 22 2c 22 74 72 69 67 67 65 72 22 3a 22 70 61 67 65 6c 6f 61 64 22 7d 2c 7b 22 6e 61 6d 65 Data Ascii: ","encoretest":"#page","masthead_hide_on_desktop":"#top_S"},"vars":[{"name":"undertone_present","polling":"all","persist":"no","page_types":[],"testmode":false,"default":"false","code":"jQuery('#ros_interstitial').length > 0;","trigger":"pageload"},{"name
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 5c 6e 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 20 26 26 20 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 61 70 69 52 65 61 64 79 20 26 26 20 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 52 65 61 64 79 20 26 26 20 62 6f 75 6e 63 65 78 2e 67 62 69 32 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 68 65 63 6b 28 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 Data Ascii: {\n return null;\n } else if (window.googletag && window.googletag.apiReady && window.googletag.pubadsReady && bouncex.gbi2) {\n return check();\n } else if (typeof window.googletag === 'undefined') {\n retu
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 7b 22 65 6e 61 62 6c 65 64 22 3a 30 7d 2c 22 67 61 34 5f 70 72 6f 70 65 72 74 79 5f 69 64 22 3a 22 22 2c 22 67 61 34 5f 6d 65 61 73 75 72 65 6d 65 6e 74 5f 69 64 22 3a 22 22 7d 0a 3b 0a 0a 09 09 62 6f 75 6e 63 65 78 2e 74 61 67 20 3d 20 27 74 61 67 33 27 3b 0a 09 09 62 6f 75 6e 63 65 78 2e 24 20 3d 20 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3b 0a 09 09 62 6f 75 6e 63 65 78 2e 65 6e 76 20 3d 20 27 70 72 6f 64 75 63 74 69 6f 6e 27 3b 0a 09 09 62 6f 75 6e 63 65 78 2e 72 65 73 74 72 69 63 74 65 64 54 6c 64 73 20 3d 20 7b 22 63 61 73 6c 22 3a 7b 22 63 61 22 3a 31 7d 2c 22 67 64 70 72 22 3a 7b 22 61 64 22 3a 31 2c 22 61 6c 22 3a 31 2c 22 61 74 22 3a 31 2c 22 61 78 22 3a 31 2c 22 62 61 22 3a 31 2c 22 62 65 22 3a 31 2c 22 62 67 22 3a 31 2c 22 62 79 22 3a 31 2c 22 Data Ascii: {"enabled":0},"ga4_property_id":"","ga4_measurement_id":""};bouncex.tag = 'tag3';bouncex.$ = window.jQuery;bouncex.env = 'production';bouncex.restrictedTlds = {"casl":{"ca":1},"gdpr":{"ad":1,"al":1,"at":1,"ax":1,"ba":1,"be":1,"bg":1,"by":1,"
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 74 74 72 69 62 75 74 65 28 27 61 73 79 6e 63 27 2c 20 27 61 73 79 6e 63 27 29 3b 0a 09 09 72 75 6e 74 69 6d 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 6f 6e 6c 6f 61 64 27 2c 20 27 62 6f 75 6e 63 65 78 2e 69 6e 69 74 69 61 6c 69 7a 65 54 61 67 28 29 27 29 3b 0a 0a 09 09 62 6f 75 6e 63 65 78 2e 69 6e 69 74 69 61 6c 69 7a 65 54 61 67 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0a 09 09 09 73 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c 20 27 2f 2f 61 73 73 65 74 73 2e 62 6f 75 6e 63 65 65 78 63 68 61 6e 67 65 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 73 6d 61 72 74 2d 74 61 67 2f Data Ascii: ttribute('async', 'async');runtime.setAttribute('onload', 'bouncex.initializeTag()');bouncex.initializeTag = function() {var script = document.createElement('script');script.setAttribute('src', '//assets.bounceexchange.com/assets/smart-tag/
2024-04-19 13:12:32 UTC	119	IN	Data Raw: 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 6c 6f 61 64 69 6e 67 22 29 20 7b 0a 09 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 62 78 42 6f 6f 74 73 74 72 61 70 29 3b 0a 7d 20 65 6c 73 65 20 7b 0a 09 62 78 42 6f 6f 74 73 74 72 61 70 28 29 3b 0a 7d 7d 29 28 29 3b Data Ascii: eadyState === "loading") {document.addEventListener("DOMContentLoaded", bxBootstrap);} else {bxBootstrap();}})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49868	34.160.169.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	573	OUT	GET /v2jaxeuX_Hk3GKMTpqiBqy0Msxd_NxEovD1J9sWXnOcZpltQROR4DIwU HTTP/1.1 Host: baitbaseball.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	589	IN	HTTP/1.1 200 OK Cache-Control: private, must-revalidate, max-age=21600 Content-Type: text/javascript; charset=utf-8 Etag: "949f5f8cd7cbc096cfa904ff879357242560112b2a0f8f679443260804d3dc3c" Strict-Transport-Security: max-age=15724800; preload Timing-Allow-Origin: * Vary: Accept-Encoding, Accept-Language X-Buildname: hoothoot X-Buildnumber: 1205290244 X-Datacenter: gce-us-east1 X-Hostname: fen-hoothoot-us-east1-f00b Date: Fri, 19 Apr 2024 13:12:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:32 UTC	666	IN	Data Raw: 65 30 61 0d 0a 21 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 6e 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 72 2e 6f 28 6e 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c 72 Data Ascii: e0a!(function(n){var t={};function r(i){if(t[i])return t[i].exports;var e=t[i]={i:i,l:!1,exports:{}};return n[i].call(e.exports,e,e.exports,r),e.l=!0,e.exports}r.m=n,r.c=t,r.d=function(n,t,i){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:i})},r
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 64 28 69 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 5b 74 5d 7d 29 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 74 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 29 28 5b Data Ascii: d(i,e,(function(t){return n[t]}).bind(null,e));return i},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=0)})([
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 37 64 37 33 61 34 32 33 65 65 32 65 31 65 61 36 31 37 33 61 30 30 32 61 62 37 30 39 34 34 30 32 35 63 36 63 62 61 62 36 22 2c 4a 3a 22 70 6f 73 74 22 2c 58 3a 30 2c 4b 3a 22 30 22 2c 5a 3a 7b 27 31 27 3a 35 30 2c 27 32 27 3a 32 35 2c 27 38 27 3a 33 30 2c 27 35 31 32 27 3a 33 30 2c 27 31 30 32 34 27 3a 30 2c 27 34 30 39 36 27 3a 32 30 2c 27 38 31 39 32 27 3a 32 35 2c 27 33 32 37 36 38 27 3a 31 30 7d 2c 59 3a 7b 27 31 27 3a 36 2c 27 32 27 3a 34 2c 27 38 27 3a 39 2c 27 35 31 32 27 3a 30 2c 27 38 31 39 32 27 3a 34 7d 2c 6e 6e 3a 35 30 2c 74 6e 3a 31 30 2c 72 6e 3a 30 2c 65 6e 3a 30 2c 6f 6e 3a 30 2c 75 6e 3a 30 2c 61 6e 3a 74 72 75 65 2c 63 6e 3a 22 22 2c 73 6e 3a 22 22 2c 64 6e 3a 22 72 22 2c 68 6e 3a 22 74 72 22 2c 76 6e 3a 22 73 22 2c 6c 6e 3a 22 74 22 2c Data Ascii: 7d73a423ee2e1ea6173a002ab70944025c6cbab6",J:"post",X:0,K:"0",Z:{'1':50,'2':25,'8':30,'512':30,'1024':0,'4096':20,'8192':25,'32768':10},Y:{'1':6,'2':4,'8':9,'512':0,'8192':4},nn:50,tn:10,rn:0,en:0,on:0,un:0,an:true,cn:"",sn:"",dn:"r",hn:"tr",vn:"s",ln:"t",
2024-04-19 13:12:32 UTC	425	IN	Data Raw: 72 2e 65 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 77 26 26 77 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 7d 2c 72 2e 62 6c 6f 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 74 68 69 73 2e 65 6e 61 62 6c 65 64 28 6e 29 29 7b 76 61 72 20 72 3d 7e 7e 77 5b 6e 5d 3b 6e 26 26 74 68 69 73 2e 62 69 64 73 2e 70 75 73 68 28 6e 29 2c 74 68 69 73 2e 61 64 62 73 2b 3d 72 2c 74 26 26 28 74 68 69 73 2e 65 6c 62 3d 21 30 29 7d 7d 2c 72 2e 64 69 73 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7e 7e 6d 5b 6e 5d 3b 74 68 69 73 2e 64 69 73 73 2b 3d 74 2c 6e 26 26 74 68 69 73 2e 64 69 64 73 2e 70 75 73 68 28 6e 29 7d 2c 72 2e 62 6c 6f 63 6b 65 72 54 79 70 65 3d 66 75 6e 63 74 69 6f Data Ascii: r.enabled=function(n){return w&&w.hasOwnProperty(n)},r.blocked=function(n,t){if(this.enabled(n)){var r=~~w[n];n&&this.bids.push(n),this.adbs+=r,t&&(this.elb=!0)}},r.disabled=function(n){var t=~~m[n];this.diss+=t,n&&this.dids.push(n)},r.blockerType=functio
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 36 30 30 30 0d 0a 26 26 74 68 69 73 2e 64 69 73 73 3e 3d 63 2e 74 6e 7d 2c 72 2e 62 6c 6f 63 6b 65 72 46 6c 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 69 64 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 7c 6e 7d 29 2c 30 29 7c 7c 30 7d 2c 72 2e 64 69 73 61 62 6c 65 64 46 6c 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 69 64 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 7c 6e 7d 29 2c 30 29 7c 7c 30 7d 2c 72 2e 68 61 73 42 6c 6f 63 6b 65 72 46 6c 61 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 62 69 64 73 2e 6c 65 6e 67 74 68 Data Ascii: 6000&&this.diss>=c.tn},r.blockerFlags=function(){return this.bids.reduce((function(n,t){return t\|n}),0)\|\|0},r.disabledFlags=function(){return this.dids.reduce((function(n,t){return t\|n}),0)\|\|0},r.hasBlockerFlag=function(n){for(var t=0;t<this.bids.length
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 62 63 61 63 68 65 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 74 68 69 73 2e 69 4f 53 3d 2d 31 21 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 69 50 68 6f 6e 65 22 29 7c 7c 2d 31 21 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 22 69 50 61 64 22 29 29 7d 76 61 72 20 74 2c 72 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 72 2e 69 73 43 68 72 6f 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 72 6f 6d 65 7d 2c 72 2e 69 73 53 61 66 61 72 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 61 66 61 72 69 7d 2c 72 2e 69 73 46 69 72 65 66 6f 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: bcache.googleusercontent.com"===window.location.hostname,this.iOS=-1!==g.indexOf("iPhone")\|\|-1!==g.indexOf("iPad"))}var t,r=n.prototype;return r.isChrome=function(){return this.chrome},r.isSafari=function(){return this.safari},r.isFirefox=function(){retur
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 3c 75 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 72 3d 75 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 75 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 29 2e 74 72 69 6d 28 29 2c 69 3d 75 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 75 5b 65 5d 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 2b 31 29 2c 21 6e 7c 7c 72 3d 3d 3d 6e 29 74 72 79 7b 6f 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 72 2c 76 61 6c 75 65 3a 79 28 69 29 7d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 74 28 6f 29 7d 29 29 3b 69 66 28 50 26 26 21 69 2e 73 79 6e 63 29 7b 69 66 28 21 69 2e 64 6f 6d 61 69 6e 26 26 6e 75 6c 6c 21 3d 3d 69 2e 64 6f 6d 61 69 6e 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 65 26 26 28 69 2e 64 6f 6d 61 69 6e 3d 65 29 7d 72 65 Data Ascii: <u.length;e++)if(r=u[e].substring(0,u[e].indexOf("=")).trim(),i=u[e].substring(u[e].indexOf("=")+1),!n\|\|r===n)try{o.push({name:r,value:y(i)})}catch(n){}t(o)}));if(P&&!i.sync){if(!i.domain&&null!==i.domain){var e=window.location.hostname;e&&(i.domain=e)}re
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 7c 7c 22 22 29 5d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 65 6c 73 65 20 6f 2e 70 75 73 68 28 72 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 43 28 6e 2c 74 29 7b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 6e 28 74 5b 30 5d 2c 74 5b 31 5d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 6e 2c 74 2c 72 29 7b 76 61 72 20 69 3d 5f 28 28 6e 2e 73 65 61 72 63 68 7c 7c 22 22 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 72 29 2c 65 3d 5f 28 28 6e 2e 68 61 73 68 7c 7c 22 22 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 72 29 3b 72 65 74 75 72 6e 20 74 26 Data Ascii: ecodeURIComponent(r[1]\|\|"")])}catch(n){}else o.push(r);return o}function C(n,t){t.forEach((function(t){try{n(t[0],t[1])}catch(n){}}))}function S(n,t,r){var i=_((n.search\|\|"").toString().substring(1),r),e=_((n.hash\|\|"").toString().substring(1),r);return t&
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 57 3d 71 26 26 71 21 3d 3d 46 2c 56 3d 21 31 2c 7a 3d 7b 7d 2c 47 3d 21 31 2c 4a 3d 7b 6d 61 78 41 67 65 3a 4c 2c 64 6f 6d 61 69 6e 3a 46 7d 2c 58 3d 7b 6d 61 78 41 67 65 3a 4c 2c 64 6f 6d 61 69 6e 3a 71 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 6d 61 74 63 68 28 2f 5c 2e 2f 67 29 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 51 28 6e 2c 74 2c 72 2c 69 29 7b 76 61 72 20 65 3d 5b 4b 28 72 29 7c 7c 30 2c 30 7c 74 7c 7c 30 2c 6e 5d 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 24 28 52 2c 65 2c 7b 6d 61 78 41 67 65 3a 69 2c 64 6f 6d 61 69 6e 3a 72 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 6e 2c 74 2c 72 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 24 28 4e 2c 6e 75 6c 6c 2c 7b 64 6f 6d Data Ascii: W=q&&q!==F,V=!1,z={},G=!1,J={maxAge:L,domain:F},X={maxAge:L,domain:q};function K(n){return n&&(n.match(/\./g)\|\|[]).length}function Q(n,t,r,i){var e=[K(r)\|\|0,0\|t\|\|0,n].join(".");return $(R,e,{maxAge:i,domain:r})}function Z(n,t,r){if(!n)return $(N,null,{dom
2024-04-19 13:12:32 UTC	1255	IN	Data Raw: 56 3f 24 28 6a 2c 74 2c 4a 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 57 29 72 65 74 75 72 6e 20 24 28 6a 2c 74 2c 58 29 3b 74 68 72 6f 77 20 6e 7d 29 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 5b 4b 28 6e 29 7c 7c 30 2c 74 5d 2e 6a 6f 69 6e 28 22 2e 22 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 75 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 33 2a 28 6e 7c 7c 30 29 29 2f 31 65 33 29 7d 76 61 72 20 61 6e 3d 77 69 6e 64 6f 77 3b 66 75 6e 63 74 69 6f 6e 20 63 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 22 69 6e 20 6e 3f 6e Data Ascii: V?$(j,t,J).catch((function(n){if(W)return $(j,t,X);throw n})):Promise.resolve()}function on(n,t){return t?[K(n)\|\|0,t].join("."):""}function un(n){return Math.max(0,Math.round(1e3*(n\|\|0))/1e3)}var an=window;function cn(n){return n&&"getEntriesByName"in n?n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49867	104.18.22.145	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	540	OUT	GET /db356nau468gk/script.js HTTP/1.1 Host: cadmus.script.ac Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	377	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: application/javascript Content-Length: 137674 Connection: close Age: 0 Cache-Control: public,max-age=600,stale-while-revalidate=3600,stale-if-error=86400 ETag: W/"2d8eb034797cb6f7b9d91fb22076c7f7ba91bdb6" Last-Modified: Thu, 18 Apr 2024 21:37:43 GMT Server: cloudflare CF-RAY: 876d2590fd5f5085-ATL
2024-04-19 13:12:32 UTC	992	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 71 78 6a 59 79 78 4b 3d 27 2c 27 77 30 76 73 75 4c 39 6e 78 71 3d 3d 27 2c 27 44 67 76 34 44 63 39 51 79 78 7a 48 43 32 6e 59 41 78 62 30 27 2c 27 43 67 66 59 7a 77 35 30 27 2c 27 43 4d 6e 46 79 32 39 55 44 66 38 3d 27 2c 27 7a 4d 4c 55 7a 61 3d 3d 27 2c 27 71 76 6a 66 71 73 62 63 75 49 62 64 74 30 57 47 72 75 31 63 72 75 71 47 73 66 69 47 74 65 4c 6f 73 59 62 71 71 76 6a 62 74 73 62 74 74 31 76 73 71 30 75 47 76 66 6a 62 71 30 53 47 76 30 6a 73 69 66 6e 75 77 75 58 66 69 66 72 6a 76 65 58 66 27 2c 27 42 32 35 4c 43 4e 6a 56 43 47 3d 3d 27 2c 27 63 49 30 54 6c 71 4f 3d 27 2c 27 43 4d 76 53 42 32 66 4b 7a 77 71 3d 27 2c 27 44 68 6a 48 79 32 76 4b 27 2c 27 7a 78 7a 4c 42 4e 72 75 45 78 Data Ascii: (new function(){var c=['qxjYyxK=','w0vsuL9nxq==','Dgv4Dc9QyxzHC2nYAxb0','CgfYzw50','CMnFy29UDf8=','zMLUza==','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','B25LCNjVCG==','cI0TlqO=','CMvSB2fKzwq=','DhjHy2vK','zxzLBNruEx
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 35 33 41 77 71 39 27 2c 27 41 4d 66 32 79 78 6e 4a 43 4d 4c 57 44 64 4f 3d 27 2c 27 41 77 7a 59 79 77 31 4c 6c 67 66 31 7a 67 4c 56 6c 68 7a 50 7a 67 76 56 27 2c 27 43 32 48 50 7a 4e 71 3d 27 2c 27 44 67 66 49 42 32 39 53 79 71 3d 3d 27 2c 27 42 4e 72 32 27 2c 27 77 66 62 6e 6c 4b 30 3d 27 2c 27 79 32 7a 4e 6c 77 76 32 79 77 57 3d 27 2c 27 6c 4d 66 5a 76 67 39 57 27 2c 27 7a 4e 6a 56 42 71 3d 3d 27 2c 27 79 4d 72 46 44 61 3d 3d 27 2c 27 43 4e 76 55 76 67 66 59 7a 32 76 30 41 77 35 4e 71 76 62 6f 27 2c 27 79 33 6a 4c 79 78 72 4c 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 7a 4d 4c 59 43 33 72 66 42 67 76 54 7a 77 35 30 71 32 48 50 42 67 71 3d 27 2c 27 6c 73 38 56 6c 71 3d 3d 27 2c 27 41 77 35 5a 7a 78 6a 30 71 77 72 51 79 77 6e 4c 42 4e 72 69 76 65 31 6d Data Ascii: 53Awq9','AMf2yxnJCMLWDdO=','AwzYyw1Llgf1zgLVlhzPzgvV','C2HPzNq=','DgfIB29Syq==','BNr2','wfbnlK0=','y2zNlwv2ywW=','lMfZvg9W','zNjVBq==','yMrFDa==','CNvUvgfYz2v0Aw5Nqvbo','y3jLyxrLrwXLBwvUDa==','zMLYC3rfBgvTzw50q2HPBgq=','ls8Vlq==','Aw5Zzxj0qwrQywnLBNrive1m
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 44 67 4c 32 7a 71 3d 3d 27 2c 27 7a 67 76 4d 79 78 76 53 44 63 31 5a 43 4d 6d 3d 27 2c 27 41 77 35 64 43 4d 76 48 44 67 4c 32 7a 71 3d 3d 27 2c 27 44 32 4c 55 7a 67 39 33 6c 47 3d 3d 27 2c 27 72 78 6a 59 42 33 69 3d 27 2c 27 44 32 58 4e 27 2c 27 43 32 6e 59 41 78 62 30 71 32 39 4b 7a 71 3d 3d 27 2c 27 74 4d 39 4b 7a 71 3d 3d 27 2c 27 71 30 39 6a 27 2c 27 76 32 4c 55 7a 67 39 33 6c 4d 6e 53 41 77 6e 52 27 2c 27 7a 78 44 53 44 61 3d 3d 27 2c 27 79 32 39 55 44 67 76 55 44 64 30 49 27 2c 27 44 77 35 33 43 4d 66 57 27 2c 27 6a 4d 35 48 42 77 75 39 27 2c 27 78 31 39 57 43 4d 39 30 42 31 39 46 27 2c 27 7a 4d 76 30 79 32 47 3d 27 2c 27 7a 4d 39 59 42 75 72 48 44 67 65 3d 27 2c 27 7a 78 6a 59 42 33 69 3d 27 2c 27 72 67 39 4a 44 77 31 4c 42 4e 71 3d 27 2c 27 43 32 Data Ascii: DgL2zq==','zgvMyxvSDc1ZCMm=','Aw5dCMvHDgL2zq==','D2LUzg93lG==','rxjYB3i=','D2XN','C2nYAxb0q29Kzq==','tM9Kzq==','q09j','v2LUzg93lMnSAwnR','zxDSDa==','y29UDgvUDd0I','Dw53CMfW','jM5HBwu9','x19WCM90B19F','zMv0y2G=','zM9YBurHDge=','zxjYB3i=','rg9JDw1LBNq=','C2
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 44 63 62 6f 79 78 7a 50 7a 32 66 30 41 77 39 55 78 71 3d 3d 27 2c 27 7a 67 4c 5a 79 77 6a 53 7a 77 71 3d 27 2c 27 46 73 4b 4f 27 2c 27 7a 32 76 30 71 32 39 54 43 68 76 30 7a 77 72 74 44 68 4c 53 7a 71 3d 3d 27 2c 27 77 30 76 46 74 4b 39 46 73 66 30 3d 27 2c 27 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 6c 4d 4c 55 41 4d 76 4a 44 61 3d 3d 27 2c 27 43 4d 76 30 44 78 6a 55 69 68 44 50 42 4d 72 56 44 59 34 3d 27 2c 27 43 67 66 59 43 32 75 3d 27 2c 27 43 32 58 50 79 32 75 3d 27 2c 27 43 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 74 76 6e 6a 72 71 3d 3d 27 2c 27 43 32 76 30 75 4d 76 58 44 77 76 5a 44 65 48 4c 79 77 72 4c 43 47 3d 3d 27 2c 27 42 4d 66 32 41 77 44 48 44 67 39 59 27 2c 27 78 73 7a 48 43 68 62 6a 7a 64 31 71 77 66 62 6b Data Ascii: DcboyxzPz2f0Aw9Uxq==','zgLZywjSzwq=','FsKO','z2v0q29TChv0zwrtDhLSzq==','w0vFtK9Fsf0=','sfrnterVy3vTzw50lMLUAMvJDa==','CMv0DxjUihDPBMrVDY4=','CgfYC2u=','C2XPy2u=','C2v0uhjVDg90ExbLt2y=','tvnjrq==','C2v0uMvXDwvZDeHLywrLCG==','BMf2AwDHDg9Y','xszHChbjzd1qwfbk
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 32 58 56 43 32 75 3d 27 2c 27 79 78 62 57 6c 77 6a 48 42 4d 35 4c 43 47 3d 3d 27 2c 27 7a 67 4c 59 27 2c 27 7a 78 6a 59 42 33 6a 74 44 68 6a 50 42 4d 43 3d 27 2c 27 43 32 76 30 73 77 35 30 7a 78 6a 32 79 77 57 3d 27 2c 27 6c 49 34 55 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 4f 79 32 39 55 44 67 76 55 44 64 30 49 77 31 34 49 78 73 53 49 6b 71 3d 3d 27 2c 27 43 78 76 4c 43 4e 4c 74 7a 77 58 4c 79 33 72 56 43 47 3d 3d 27 2c 27 79 32 39 55 43 32 39 53 7a 71 3d 3d 27 2c 27 43 33 6c 72 47 71 3d 3d 27 2c 27 7a 78 48 30 27 2c 27 6c 4d 48 59 7a 77 79 3d 27 2c 27 44 78 6a 53 69 64 4f 47 27 2c 27 42 77 76 5a 43 32 66 4e 7a 75 48 48 42 4d 72 53 7a 78 6a 5a 27 2c 27 69 67 4c 5a 69 67 35 56 44 63 62 4c 45 68 72 4c 42 4e 6e 50 79 4d 58 4c 27 2c 27 70 67 39 49 42 4a 35 Data Ascii: 2XVC2u=','yxbWlwjHBM5LCG==','zgLY','zxjYB3jtDhjPBMC=','C2v0sw50zxj2ywW=','lI4U','psHCzcSPxhmOy29UDgvUDd0Iw14IxsSIkq==','CxvLCNLtzwXLy3rVCG==','y29UC29Szq==','C3lrGq==','zxH0','lMHYzwy=','DxjSidOG','BwvZC2fNzuHHBMrSzxjZ','igLZig5VDcbLEhrLBNnPyMXL','pg9IBJ5
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 33 43 54 43 32 6e 59 41 78 62 30 43 59 62 48 42 67 58 56 44 59 31 30 42 33 61 54 42 4d 66 32 41 77 44 48 44 67 4c 56 42 49 31 49 45 73 31 31 43 32 76 59 6c 77 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 27 2c 27 73 66 72 6e 74 61 3d 3d 27 2c 27 6c 4d 39 55 27 2c 27 75 31 7a 68 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 7a 67 76 4d 79 78 76 53 44 66 7a 50 7a 78 43 3d 27 2c 27 79 32 4c 56 78 32 6a 4b 27 2c 27 43 68 76 5a 41 61 3d 3d 27 2c 27 43 67 6a 51 43 59 35 57 44 78 71 3d 27 2c 27 79 33 6a 4c 79 78 72 50 44 4d 76 6a 7a 61 3d 3d 27 2c 27 71 4b 4c 65 75 47 3d 3d 27 2c 27 43 78 76 4c 27 2c 27 79 77 35 4a 7a 78 6e 30 42 33 6a 70 43 4d 4c 4e 41 77 35 5a 27 2c 27 43 33 72 48 43 4e 72 75 41 77 31 4c 27 2c 27 43 67 66 59 7a 77 Data Ascii: 3CTC2nYAxb0CYbHBgXVDY10B3aTBMf2AwDHDgLVBI1IEs11C2vYlwfJDgL2yxrPB24=','y3jLyxrL','sfrnta==','lM9U','u1zhrwXLBwvUDa==','zgvMyxvSDfzPzxC=','y2LVx2jK','ChvZAa==','CgjQCY5WDxq=','y3jLyxrPDMvjza==','qKLeuG==','CxvL','yw5Jzxn0B3jpCMLNAw5Z','C3rHCNruAw1L','CgfYzw
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 27 2c 27 44 4d 66 53 44 77 75 3d 27 2c 27 79 78 62 50 75 32 76 5a 43 32 4c 56 42 4c 76 31 41 77 71 3d 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 3d 27 2c 27 44 4d 66 53 44 77 76 5a 27 2c 27 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 27 2c 27 79 32 48 48 43 4b 6e 56 7a 67 76 62 44 61 3d 3d 27 2c 27 71 31 72 6a 27 2c 27 7a 67 76 4c 43 67 76 5a 44 61 3d 3d 27 2c 27 79 33 76 5a 44 67 39 54 7a 78 6a 6a 7a 61 3d 3d 27 2c 27 43 32 6e 59 41 78 62 30 27 2c 27 42 33 44 55 7a 78 6a 66 42 67 76 54 7a 77 35 30 27 2c 27 42 77 66 30 79 32 47 3d 27 2c 27 7a 4d 39 4a 44 78 6d 3d 27 2c 27 79 32 58 48 43 33 6e 6d 41 78 6e 30 27 2c 27 79 33 44 5a 27 2c 27 43 68 6a 56 44 67 39 30 45 78 62 4c 27 2c 27 79 77 58 53 42 33 43 54 44 67 39 57 6c 77 35 48 44 4d 4c 4e 79 78 72 50 Data Ascii: ','DMfSDwu=','yxbPu2vZC2LVBLv1Awq=','psHCzcSPxhm=','DMfSDwvZ','q29UDgvUDc1uExbL','y2HHCKnVzgvbDa==','q1rj','zgvLCgvZDa==','y3vZDg9Tzxjjza==','C2nYAxb0','B3DUzxjfBgvTzw50','Bwf0y2G=','zM9JDxm=','y2XHC3nmAxn0','y3DZ','ChjVDg90ExbL','ywXSB3CTDg9Wlw5HDMLNyxrP
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 56 42 4d 6e 4c 6c 71 3d 3d 27 2c 27 42 33 76 30 7a 78 6a 69 76 65 31 6d 27 2c 27 42 4d 39 4b 7a 75 35 48 42 77 75 3d 27 2c 27 79 33 76 5a 44 67 39 54 78 32 7a 50 7a 77 58 4b 43 57 3d 3d 27 2c 27 43 67 58 48 45 71 3d 3d 27 2c 27 43 33 6a 4a 70 73 6a 51 79 78 7a 48 43 32 6e 59 41 78 62 30 6f 4d 7a 48 42 68 6e 4c 69 49 62 56 42 4d 58 56 79 77 71 39 69 47 3d 3d 27 2c 27 7a 78 7a 30 6c 77 66 4b 43 33 72 52 27 2c 27 6a 4d 44 30 6f 57 3d 3d 27 2c 27 7a 67 4c 5a 43 67 58 48 45 71 3d 3d 27 2c 27 43 67 66 30 41 67 35 48 42 77 75 3d 27 2c 27 79 78 62 50 72 78 7a 48 42 66 44 59 79 78 61 3d 27 2c 27 73 66 72 6e 74 65 4c 67 43 4d 66 54 7a 75 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 45 68 62 54 27 2c 27 63 4d 44 53 42 32 6a 48 42 63 62 4a 42 32 72 4c 71 67 66 49 42 33 76 Data Ascii: VBMnLlq==','B3v0zxjive1m','BM9Kzu5HBwu=','y3vZDg9Tx2zPzwXKCW==','CgXHEq==','C3jJpsjQyxzHC2nYAxb0oMzHBhnLiIbVBMXVywq9iG==','zxz0lwfKC3rR','jMD0oW==','zgLZCgXHEq==','Cgf0Ag5HBwu=','yxbPrxzHBfDYyxa=','sfrnteLgCMfTzuvSzw1LBNq=','EhbT','cMDSB2jHBcbJB2rLqgfIB3v
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 55 42 32 35 4a 7a 73 30 3d 27 2c 27 69 4c 30 47 6a 49 79 47 44 32 4c 55 7a 67 39 33 77 59 69 3d 27 2c 27 63 4b 62 48 79 4d 39 31 44 64 50 49 42 67 66 55 41 57 3d 3d 27 2c 27 7a 4d 58 56 42 33 69 3d 27 2c 27 42 33 76 30 79 4e 6a 48 41 77 34 3d 27 2c 27 43 32 48 56 44 77 58 4b 6c 77 6a 53 42 32 6e 52 27 2c 27 79 32 4c 56 72 67 76 49 44 77 43 3d 27 2c 27 79 32 7a 4e 6c 77 47 35 41 32 53 3d 27 2c 27 43 32 76 48 43 4d 6e 4f 27 2c 27 72 76 39 64 71 47 3d 3d 27 2c 27 41 67 4c 4b 7a 67 76 55 27 2c 27 43 32 76 4c 7a 66 72 48 7a 57 3d 3d 27 2c 27 71 4d 4c 4b 71 77 72 48 43 68 72 4c 43 47 3d 3d 27 2c 27 41 4d 39 50 42 47 3d 3d 27 2c 27 73 77 35 50 44 63 34 3d 27 2c 27 71 75 72 74 76 65 53 3d 27 2c 27 43 32 39 32 43 4d 35 46 79 77 72 46 44 77 35 50 44 61 3d 3d 27 2c Data Ascii: UB25Jzs0=','iL0GjIyGD2LUzg93wYi=','cKbHyM91DdPIBgfUAW==','zMXVB3i=','B3v0yNjHAw4=','C2HVDwXKlwjSB2nR','y2LVrgvIDwC=','y2zNlwG5A2S=','C2vHCMnO','rv9dqG==','AgLKzgvU','C2vLzfrHzW==','qMLKqwrHChrLCG==','AM9PBG==','sw5PDc4=','qurtveS=','C292CM5FywrFDw5PDa==',
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 44 67 39 74 44 68 6a 50 42 4d 43 3d 27 2c 27 43 4e 76 55 27 2c 27 44 32 4c 55 7a 67 39 33 27 2c 27 7a 78 48 4c 79 57 3d 3d 27 2c 27 74 4b 7a 6f 27 2c 27 43 32 50 5a 27 2c 27 43 32 76 30 73 78 72 4c 42 71 3d 3d 27 2c 27 43 32 66 55 7a 67 6a 56 45 61 3d 3d 27 2c 27 42 32 35 59 7a 77 66 4b 45 78 6e 30 79 78 72 4c 79 32 48 48 42 4d 44 4c 27 2c 27 6a 67 50 5a 79 32 39 54 43 66 39 4f 41 77 72 4b 7a 77 35 46 27 2c 27 73 66 72 6e 74 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 79 4d 76 4d 42 33 6a 4c 71 4d 4c 4b 7a 67 76 59 73 68 72 30 43 61 3d 3d 27 2c 27 77 30 76 73 75 4c 39 65 78 30 4c 65 77 66 30 3d 27 2c 27 79 78 62 50 75 32 6e 59 41 78 62 30 75 33 6a 4a 27 2c 27 79 78 62 50 72 4d 76 30 79 32 48 74 7a 77 58 4c 79 33 72 56 43 47 3d 3d 27 2c 27 77 30 76 46 71 31 Data Ascii: Dg9tDhjPBMC=','CNvU','D2LUzg93','zxHLyW==','tKzo','C2PZ','C2v0sxrLBq==','C2fUzgjVEa==','B25YzwfKExn0yxrLy2HHBMDL','jgPZy29TCf9OAwrKzw5F','sfrntevSzw1LBNq=','yMvMB3jLqMLKzgvYshr0Ca==','w0vsuL9ex0Lewf0=','yxbPu2nYAxb0u3jJ','yxbPrMv0y2HtzwXLy3rVCG==','w0vFq1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49869	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	561	OUT	GET /as1.js?uri=https%3A%2F%2Fwww.justjared.com HTTP/1.1 Host: silo40.p7cloud.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	377	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 165556 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 13:12:32 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3e445414cb8134bf4b609fdcfe022fcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: 1yohV1dcV4-A0NIchfQJ-CeVSRl5HLMcC4Tz7cr8-d4fQmRt9RC8kw==
2024-04-19 13:12:32 UTC	16007	IN	Data Raw: 5f 61 31 63 66 67 3d 7b 63 61 74 5f 70 65 72 63 3a 38 30 2c 69 6e 63 6c 75 64 65 5f 63 6f 68 6f 72 74 5f 65 76 61 6c 75 61 74 65 3a 21 30 2c 69 6e 63 6c 75 64 65 5f 6f 72 74 62 5f 6d 6f 64 69 66 63 61 74 69 6f 6e 3a 21 30 2c 69 6e 63 6c 75 64 65 5f 62 65 68 61 76 69 6f 72 3a 21 30 2c 69 6e 63 6c 75 64 65 5f 63 6f 6d 70 6f 73 69 74 65 3a 21 30 2c 69 6e 63 6c 75 64 65 5f 6d 6f 64 65 6c 65 64 3a 21 30 2c 69 6e 63 6c 75 64 65 5f 74 61 70 61 64 3a 21 31 2c 65 6e 61 62 6c 65 5f 67 61 6d 5f 6c 69 73 74 65 6e 65 72 73 3a 21 31 2c 65 6e 61 62 6c 65 5f 70 70 73 3a 21 30 2c 69 6e 63 6c 75 64 65 5f 6d 64 6f 6d 61 69 6e 3a 21 31 2c 73 69 6c 6f 6e 75 6d 3a 34 30 7d 2c 61 73 70 61 6e 3d 7b 53 49 4c 4f 3a 60 68 74 74 70 73 3a 2f 2f 73 69 6c 6f 24 7b 5f 61 31 63 66 67 2e Data Ascii: _a1cfg={cat_perc:80,include_cohort_evaluate:!0,include_ortb_modifcation:!0,include_behavior:!0,include_composite:!0,include_modeled:!0,include_tapad:!1,enable_gam_listeners:!1,enable_pps:!0,include_mdomain:!1,silonum:40},aspan={SILO:`https://silo${_a1cfg.
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 73 75 62 73 74 72 28 30 2c 31 30 29 2e 72 65 70 6c 61 63 65 41 6c 6c 28 22 2d 22 2c 22 22 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 5f 69 61 72 63 6f 62 6a 26 26 31 3d 3d 5f 69 61 72 63 6f 62 6a 2e 74 70 65 6e 61 62 6c 65 64 3f 28 77 69 6e 64 6f 77 2e 61 72 63 6f 62 6a 32 3d 5f 69 61 72 63 6f 62 6a 2c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 61 72 63 6f 62 6a 32 2e 61 72 63 69 64 26 26 28 77 69 6e 64 6f 77 2e 61 72 63 6f 62 6a 32 2e 61 72 63 69 64 3d 61 73 70 61 6e 2e 75 75 69 64 76 34 28 29 2c 77 69 6e 64 6f 77 2e 61 72 63 6f 62 6a 32 2e 63 62 64 3d 72 29 29 3a 28 63 3d 61 73 70 61 6e 2e 5f 72 41 28 29 29 3f 28 77 69 6e 64 6f 77 2e 61 72 63 6f 62 6a 32 3d 63 2c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 61 72 63 6f 62 Data Ascii: substr(0,10).replaceAll("-","");"undefined"!=typeof _iarcobj&&1==_iarcobj.tpenabled?(window.arcobj2=_iarcobj,void 0===window.arcobj2.arcid&&(window.arcobj2.arcid=aspan.uuidv4(),window.arcobj2.cbd=r)):(c=aspan._rA())?(window.arcobj2=c,void 0===window.arcob
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 61 74 3a 5b 32 39 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 4d 4c 61 53 6f 65 71 53 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 34 32 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 4d 54 44 54 73 4a 6a 4a 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a Data Ascii: at:[29]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",rc:"or"}},cid:"MLaSoeqS",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[42]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",rc:"or"}},cid:"MTDTsJjJ",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 58 4b 50 76 7a 64 4b 6f 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 32 33 30 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 44 70 53 5a 63 78 57 66 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 32 33 31 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c Data Ascii: ,rc:"or"}},cid:"XKPvzdKo",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[230]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",rc:"or"}},cid:"DpSZcxWf",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[231]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 67 6a 6a 55 62 61 78 44 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 34 32 34 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 61 44 32 78 67 7a 50 67 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 34 32 35 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 Data Ascii: rc:"or"}},cid:"gjjUbaxD",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[424]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",rc:"or"}},cid:"aD2xgzPg",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[425]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",r
2024-04-19 13:12:32 UTC	14831	IN	Data Raw: 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 62 44 4d 7a 54 42 71 6d 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 36 35 32 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 6a 6e 48 62 50 79 6a 65 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 36 34 32 5d 7d 2c 6d 64 66 3a 7b 74 3a 22 70 61 67 65 56 69 65 77 73 22 2c 63 6e 74 3a 32 2c 6c 62 3a 33 30 7d 7d 5d 2c 74 74 3a 22 62 65 68 61 76 69 6f 72 61 6c 22 2c 72 63 Data Ascii: c:"or"}},cid:"bDMzTBqm",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[652]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",rc:"or"}},cid:"jnHbPyje",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[642]},mdf:{t:"pageViews",cnt:2,lb:30}}],tt:"behavioral",rc
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 46 6d 52 6e 69 32 59 33 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 31 30 39 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 55 34 4e 6e 4d 5a 79 44 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 31 31 30 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 74 35 74 7a 45 77 50 75 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b Data Ascii: }],tt:"contextual",rc:"or"}},cid:"FmRni2Y3",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[109]}}],tt:"contextual",rc:"or"}},cid:"U4NnMZyD",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[110]}}],tt:"contextual",rc:"or"}},cid:"t5tzEwPu",ttl:30},{r:{sc:{rl:[{
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 32 38 31 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 64 59 71 57 64 55 39 65 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 32 38 32 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 37 72 73 4d 50 61 67 64 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 32 38 33 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 Data Ascii: ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[281]}}],tt:"contextual",rc:"or"}},cid:"dYqWdU9e",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[282]}}],tt:"contextual",rc:"or"}},cid:"7rsMPagd",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[283]}}],tt:"context
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 3a 5b 34 35 33 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 4d 63 63 6d 68 70 64 68 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 34 35 34 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 43 72 77 37 71 38 46 44 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 34 35 35 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 74 33 47 66 65 63 64 59 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 Data Ascii: :[453]}}],tt:"contextual",rc:"or"}},cid:"Mccmhpdh",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[454]}}],tt:"contextual",rc:"or"}},cid:"Crw7q8FD",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[455]}}],tt:"contextual",rc:"or"}},cid:"t3GfecdY",ttl:30},{r:{sc
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 69 72 55 64 72 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 36 32 36 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 6d 70 59 4c 58 42 55 74 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 36 32 37 5d 7d 7d 5d 2c 74 74 3a 22 63 6f 6e 74 65 78 74 75 61 6c 22 2c 72 63 3a 22 6f 72 22 7d 7d 2c 63 69 64 3a 22 44 45 35 52 32 43 59 56 22 2c 74 74 6c 3a 33 30 7d 2c 7b 72 3a 7b 73 63 3a 7b 72 6c 3a 5b 7b 63 72 74 3a 7b 74 3a 22 63 61 74 65 67 6f 72 69 65 73 22 2c 63 61 74 3a 5b 36 32 38 5d 7d 7d 5d 2c 74 74 3a 22 Data Ascii: irUdr",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[626]}}],tt:"contextual",rc:"or"}},cid:"mpYLXBUt",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[627]}}],tt:"contextual",rc:"or"}},cid:"DE5R2CYV",ttl:30},{r:{sc:{rl:[{crt:{t:"categories",cat:[628]}}],tt:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49871	3.162.125.127	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:31 UTC	520	OUT	GET /ats.js HTTP/1.1 Host: ats.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	568	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 112204 Connection: close Date: Fri, 19 Apr 2024 13:12:33 GMT Last-Modified: Wed, 13 Mar 2024 08:09:48 GMT ETag: "b248cc9d0fdeb36bdeb7efabad1132ee" x-amz-server-side-encryption: AES256 x-amz-version-id: F5G4x7igSyEInzmeTLVI9fM7V7EmySpG Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f638767bb567304644b370360b61ed30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: fJ3D6bilophovfy5SGmkavjHBb6w1DXkXLl0yXXscpDY-iBpDmy9bg==
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 Data Ascii: window.ats=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 26 36 33 29 2b 64 2e 63 68 61 72 41 74 28 6f 3c 3c 32 26 36 33 29 2b 22 3d 22 29 3a 31 3d 3d 69 26 26 28 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 2c 73 2b 3d 64 2e 63 68 61 72 41 74 28 6f 3e 3e 32 29 2b 64 2e 63 68 61 72 41 74 28 6f 3c 3c 34 26 36 33 29 2b 22 3d 3d 22 29 2c 73 7d 2c 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 65 3d 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 6c 2c 22 22 29 29 2e 6c 65 6e 67 74 68 3b 74 25 34 3d 3d 30 26 26 28 74 3d 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 3d 3d 3f 24 2f 2c 22 22 29 29 2e 6c 65 6e 67 74 68 29 2c 28 74 25 34 3d 3d 31 7c 7c 2f 5b 5e 2b 61 2d 7a 41 2d 5a 30 2d 39 2f 5d 2f 2e 74 65 73 74 28 65 29 29 26 26 75 28 22 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 Data Ascii: &63)+d.charAt(o<<2&63)+"="):1==i&&(o=e.charCodeAt(a),s+=d.charAt(o>>2)+d.charAt(o<<4&63)+"=="),s},decode:function(e){var t=(e=String(e).replace(l,"")).length;t%4==0&&(t=(e=e.replace(/==?$/,"")).length),(t%4==1\|\|/[^+a-zA-Z0-9/]/.test(e))&&u("Invalid charac
2024-04-19 13:12:32 UTC	1573	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 2e 70 75 73 68 28 5b 6e 2c 74 5d 29 7d 29 29 2c 6c 28 65 29 7d 2c 72 26 26 28 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 29 3b 76 61 72 20 76 3d 5b 22 43 4f 4e 4e 45 43 54 22 2c 22 44 45 4c 45 54 45 22 2c 22 47 45 54 22 2c 22 48 45 41 44 22 2c 22 4f 50 54 49 4f 4e 53 22 2c 22 50 41 54 43 48 22 2c 22 50 4f 53 54 22 2c 22 50 55 54 22 2c 22 54 52 41 43 45 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 6e 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 79 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 50 6c 65 61 73 Data Ascii: turn this.forEach((function(t,n){e.push([n,t])})),l(e)},r&&(f.prototype[Symbol.iterator]=f.prototype.entries);var v=["CONNECT","DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT","TRACE"];function y(e,n){if(!(this instanceof y))throw new TypeError('Pleas
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 3d 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 3b 74 2e 61 70 70 65 6e 64 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 29 7d 7d 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 22 6e 65 77 22 20 6f 70 65 72 61 74 6f 72 2c 20 74 68 69 73 20 44 4f 4d 20 6f 62 6a 65 63 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 63 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 27 29 3b 69 66 28 74 7c 7c 28 74 3d 7b 7d 29 2c 74 68 69 73 2e Data Ascii: =").replace(/\+/g," ");t.append(decodeURIComponent(r),decodeURIComponent(o))}})),t}function S(e,t){if(!(this instanceof S))throw new TypeError('Please use the "new" operator, this DOM object constructor cannot be called as a function.');if(t\|\|(t={}),this.
2024-04-19 13:12:32 UTC	2689	IN	Data Raw: 7c 6f 76 69 62 72 6f 77 73 65 72 7c 62 6f 6c 74 7c 69 72 6f 6e 7c 76 69 76 61 6c 64 69 7c 69 72 69 64 69 75 6d 7c 70 68 61 6e 74 6f 6d 6a 73 7c 62 6f 77 73 65 72 7c 71 75 61 72 6b 7c 71 75 70 7a 69 6c 6c 61 7c 66 61 6c 6b 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 2d 5d 2b 29 2f 69 5d 2c 5b 61 2c 64 5d 2c 5b 2f 28 6b 6f 6e 71 75 65 72 6f 72 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 61 2c 22 4b 6f 6e 71 75 65 72 6f 72 22 5d 2c 64 5d 2c 5b 2f 28 74 72 69 64 65 6e 74 29 2e 2b 72 76 5b 3a 5c 73 5d 28 5b 5c 77 5c 2e 5d 2b 29 2e 2b 6c 69 6b 65 5c 73 67 65 63 6b 6f 2f 69 5d 2c 5b 5b 61 2c 22 49 45 22 5d 2c 64 5d 2c 5b 2f 28 65 64 67 65 7c 65 64 67 69 6f 73 7c 65 64 67 61 7c 65 64 67 29 5c 2f 28 28 5c 64 2b 29 3f 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 61 2c Data Ascii: \|ovibrowser\|bolt\|iron\|vivaldi\|iridium\|phantomjs\|bowser\|quark\|qupzilla\|falkon)\/([\w\.-]+)/i],[a,d],[/(konqueror)\/([\w\.]+)/i],[[a,"Konqueror"],d],[/(trident).+rv[:\s]([\w\.]+).+like\sgecko/i],[[a,"IE"],d],[/(edge\|edgios\|edga\|edg)\/((\d+)?[\w\.]+)/i],[[a,
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 2b 29 2f 69 2c 2f 28 67 6f 62 72 6f 77 73 65 72 29 5c 2f 3f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 69 63 65 5c 73 3f 62 72 6f 77 73 65 72 29 5c 2f 76 3f 28 5b 5c 77 5c 2e 5f 5d 2b 29 2f 69 2c 2f 28 6d 6f 73 61 69 63 29 5b 5c 2f 5c 73 5d 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 61 2c 64 5d 5d 2c 63 70 75 3a 5b 5b 2f 28 3f 3a 28 61 6d 64 7c 78 28 3f 3a 28 3f 3a 38 36 7c 36 34 29 5b 5f 2d 5d 29 3f 7c 77 6f 77 7c 77 69 6e 29 36 34 29 5b 3b 5c 29 5d 2f 69 5d 2c 5b 5b 22 61 72 63 68 69 74 65 63 74 75 72 65 22 2c 22 61 6d 64 36 34 22 5d 5d 2c 5b 2f 28 69 61 33 32 28 3f 3d 3b 29 29 2f 69 5d 2c 5b 5b 22 61 72 63 68 69 74 65 63 74 75 72 65 22 2c 62 2e 6c 6f 77 65 72 69 7a 65 5d 5d 2c 5b 2f 28 28 3f 3a 69 5b 33 34 36 5d 7c 78 29 38 36 29 5b 3b 5c 29 5d 2f 69 5d Data Ascii: +)/i,/(gobrowser)\/?([\w\.]*)/i,/(ice\s?browser)\/v?([\w\._]+)/i,/(mosaic)[\/\s]([\w\.]+)/i],[a,d]],cpu:[[/(?:(amd\|x(?:(?:86\|64)[_-])?\|wow\|win)64)[;\)]/i],[["architecture","amd64"]],[/(ia32(?=;))/i],[["architecture",b.lowerize]],[/((?:i[346]\|x)86)[;\)]/i]
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 72 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f Data Ascii: bject.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,co
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 20 72 3d 22 30 30 30 30 30 30 30 30 22 2c 6f 3d 28 72 2b 6e 2e 67 65 74 55 69 6e 74 33 32 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 72 2e 6c 65 6e 67 74 68 29 3b 74 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 74 2e 6a 6f 69 6e 28 22 22 29 7d 63 6f 6e 73 74 20 6b 3d 2f 28 5e 5b 61 2d 66 30 2d 39 5d 7b 33 32 7d 24 29 7c 28 5e 5b 61 2d 66 30 2d 39 5d 7b 34 30 7d 24 29 7c 28 5e 5b 61 2d 66 30 2d 39 5d 7b 36 34 7d 24 29 2f 2c 42 3d 5b 22 63 66 63 64 32 30 38 34 39 35 64 35 36 35 65 66 36 36 65 37 64 66 66 39 66 39 38 37 36 34 64 61 22 2c 22 32 66 34 33 62 34 32 66 64 38 33 33 64 31 65 37 37 34 32 30 61 38 64 61 65 37 34 31 39 30 30 30 22 2c 22 37 32 31 35 65 65 39 63 37 64 39 64 63 32 32 39 64 32 39 32 31 61 34 30 65 38 39 Data Ascii: r="00000000",o=(r+n.getUint32(e).toString(16)).slice(-r.length);t.push(o)}return t.join("")}const k=/(^[a-f0-9]{32}$)\|(^[a-f0-9]{40}$)\|(^[a-f0-9]{64}$)/,B=["cfcd208495d565ef66e7dff9f98764da","2f43b42fd833d1e77420a8dae7419000","7215ee9c7d9dc229d2921a40e89
2024-04-19 13:12:32 UTC	9638	IN	Data Raw: 66 28 21 31 3d 3d 3d 47 65 29 72 65 74 75 72 6e 20 73 2e 64 65 62 75 67 28 22 43 6f 6e 73 65 6e 74 20 77 61 73 20 6e 6f 74 20 67 69 76 65 6e 2e 20 50 69 64 20 77 6f 6e 27 74 20 62 65 20 64 65 74 65 63 74 65 64 28 4f 6e 42 6c 75 72 29 2e 22 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 2c 76 6f 69 64 20 54 65 28 65 29 3b 74 3d 6f 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 2c 6b 65 28 74 2c 65 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 7d 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 2c 74 29 7b 22 61 6c 6c 22 3d 3d 3d 63 2e 64 65 74 65 63 74 69 6f 6e 53 75 62 6a 65 63 74 3f 28 50 65 28 65 29 7c 7c 4f 65 28 65 29 7c 7c 42 65 28 65 29 29 26 26 54 65 28 74 29 3a 22 65 6d 61 69 6c 22 Data Ascii: f(!1===Ge)return s.debug("Consent was not given. Pid won't be detected(OnBlur)."),"function"==typeof n&&n(),void Te(e);t=o.value.trim(),ke(t,e),"function"==typeof n&&n()})}}}}function ke(e,t){"all"===c.detectionSubject?(Pe(e)\|\|Oe(e)\|\|Be(e))&&Te(t):"email"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49872	3.215.243.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	1794	OUT	GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A1%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fthank-you-aimee-song-lyrics.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A613%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22%27thanK%20you%20aIMee%27%20Lyrics%3A%20Is%20Taylor%20Swift%27s%20Song%20About%20Kim%20Kardashian%20Feud%3F%20Listen%20Now!%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350573&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:32 UTC	430	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 1829 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:32 GMT; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true ETag: "0624d41dde37371ad3ead79dbb7e40357" Timing-Allow-Origin: *
2024-04-19 13:12:32 UTC	1829	IN	Data Raw: 7b 22 61 64 73 22 3a 5b 5d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 75 5f 62 64 37 33 61 39 38 35 2d 33 65 66 37 2d 34 34 31 36 2d 61 36 37 39 2d 33 61 39 33 30 39 31 38 31 36 31 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 2c 22 74 22 3a 22 69 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e Data Ascii: {"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID","t":"i"},{"u":"https://sync.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49873	3.215.243.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	1799	OUT	GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A2%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fkourtney-kardashian-shuts-down-fan-comment.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A1636%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22Kourtney%20Kardashian%20Shuts%20Down%20Fan%20Who%20Assumed%20She%20Wouldn%27t%20Like%20Kim%27s%20Birthday%20Post%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350575&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:32 UTC	430	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 1829 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:32 GMT; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true ETag: "0892365b5280b82fa93923b9aa3c72441" Timing-Allow-Origin: *
2024-04-19 13:12:32 UTC	1829	IN	Data Raw: 7b 22 61 64 73 22 3a 5b 5d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 75 5f 62 64 37 33 61 39 38 35 2d 33 65 66 37 2d 34 34 31 36 2d 61 36 37 39 2d 33 61 39 33 30 39 31 38 31 36 31 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 2c 22 74 22 3a 22 69 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 73 73 62 73 79 Data Ascii: {"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID","t":"i"},{"u":"https://ssbsy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49883	18.155.1.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	1025	OUT	GET /b2?c1=7&c2=31732370&cs_it=b9&cv=4.0.0%2B2301240627&ns__t=1713532348771&ns_c=UTF-8&c3=874156489745619&gdpr=0&gdpr_p1t=&gdpr_li=&gdpr_purps=&gdpr_pcc=&cs_cmp_nc=1&cs_cmp_id=6&cs_cmp_sv=1&cs_cmp_rt=845&c7=https%3A%2F%2Fwww.justjared.com%2F&c8=Just%20Jared%3A%20Celebrity%20News%20and%20Gossip%20%7C%20Entertainment&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1A8656fff7c75542b3fed171713532351; PID=181656fff7ac2542b3feb641713532351; XID=1A8656fff7c75542b3fed171713532351
2024-04-19 13:12:32 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Fri, 19 Apr 2024 13:12:32 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 fba964c0fe0a574ad166a8c459c9410a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 X-Amz-Cf-Id: fAoqpfhDJ1M3lhzWYlGCaPh0DKdi-IuczGW1Y4NPiMT5-WUVHdjX9g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49885	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	521	OUT	GET /wrapper/v2/meta-data?hasCsp=true&accountId=1247&env=prod&metadata=%7B%22gdpr%22%3A%7B%7D%2C%22ccpa%22%3A%7B%7D%7D&propertyId=7443&ch=null&scriptVersion=4.21.0&scriptType=unified HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	739	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 301 Connection: close Date: Fri, 19 Apr 2024 13:12:29 GMT X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, SP_SCRIPT_VERSION Access-Control-Allow-Methods: GET, PUT, POST, DELETE Cache-Control: max-age=3600, s-maxage=3600 Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fb375a653722ce5e68a7a911d67c0f10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: bA0hYuN3GzTnFE788zGxdg-6rA9NwrrmOkeibjWh7DCOjc-R6GiwcA== Age: 3
2024-04-19 13:12:32 UTC	301	IN	Data Raw: 7b 22 63 63 70 61 22 3a 7b 22 72 65 73 70 65 63 74 47 50 43 22 3a 74 72 75 65 2c 22 73 61 6d 70 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 6c 69 65 73 22 3a 74 72 75 65 2c 22 73 61 6d 70 6c 65 52 61 74 65 22 3a 31 7d 2c 22 67 64 70 72 22 3a 7b 22 61 64 64 69 74 69 6f 6e 73 43 68 61 6e 67 65 44 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 32 38 54 31 35 3a 31 31 3a 33 39 2e 37 38 30 5a 22 2c 22 67 65 74 4d 65 73 73 61 67 65 41 6c 77 61 79 73 22 3a 66 61 6c 73 65 2c 22 6c 65 67 61 6c 42 61 73 69 73 43 68 61 6e 67 65 44 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 32 38 54 31 35 3a 31 31 3a 33 39 2e 37 38 30 5a 22 2c 22 73 61 6d 70 6c 65 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 31 31 31 2c 22 5f 69 64 22 3a 22 35 66 32 39 62 61 61 38 62 38 65 30 35 63 37 Data Ascii: {"ccpa":{"respectGPC":true,"sample":false,"applies":true,"sampleRate":1},"gdpr":{"additionsChangeDate":"2023-12-28T15:11:39.780Z","getMessageAlways":false,"legalBasisChangeDate":"2023-12-28T15:11:39.780Z","sample":true,"version":111,"_id":"5f29baa8b8e05c7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49879	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	659	OUT	GET /webstatic/images/player_sticker_bg.d9d306ff.png HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s3.castbox.fm/webstatic/css/playerpage.24722ef5.chunk.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	460	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1366 Connection: close Date: Mon, 01 Apr 2024 03:41:04 GMT Last-Modified: Tue, 12 Mar 2019 07:58:43 GMT ETag: "d9d306ff9fc9607e0ddcd4d206372784" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 0e227d05dec6e4f9fddab21a200ee232.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: VC_eSpqVdueLlul6sjs_ECXID15HSjJcp9hvpsy2Kty-8tnOA0jMTA== Age: 1589489
2024-04-19 13:12:32 UTC	1366	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 11 00 00 00 28 08 03 00 00 00 ee 48 3e 6d 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 11 1b 22 33 44 55 66 77 88 99 aa bb cc dd ee 50 0a 97 ca 00 00 04 c2 49 44 41 54 68 de ed 5a cb 96 e3 28 0c bd 19 20 06 c6 80 fe ff 6b 7b 61 c0 e2 69 9c e4 a4 6a ce 34 0b aa 6c 09 4b 5c 29 20 24 40 bf b5 21 77 3f 20 b7 d3 9e df 10 fe fc 2f 21 82 c7 fe f2 37 f7 17 85 17 e3 1e 48 dd 27 25 2e b0 d7 22 b7 f8 07 78 d9 3c 1b b6 09 71 6b 84 6f 5d 5d 00 a2 6d 55 09 7c c6 0d 2a e2 e1 14 d8 a3 3e 13 65 1e 53 71 0f 00 63 23 70 da e1 01 d9 0f 1e 0d 22 00 1e Data Ascii: PNGIHDR(H>m3PLTEGtRNS"3DUfwPIDAThZ( k{aij4lK\) $@!w? /!7H'%."x<qko]]mU\|*>eSqc#p"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49878	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	610	OUT	GET /app/castbox/static/images/episodeDefault.png HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	460	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4646 Connection: close Date: Sun, 31 Mar 2024 20:54:25 GMT Last-Modified: Tue, 15 May 2018 09:45:39 GMT ETag: "df9d8c116ac9c2af941e74f26514db88" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cb8f9eeabb5079cbcdbabdbd476ce1a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: UDiz0Livz3c7_lfZ0BRmFqSEp1sTzqpVnGkqj89HI_BVzDlSFYL-xg== Age: 1613888
2024-04-19 13:12:32 UTC	4646	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 00 00 00 00 9b 0d c7 00 00 00 11 ed 49 44 41 54 78 da ed dd fb 7f 14 e5 bd c0 71 ff be 21 e1 76 90 62 4b cb 51 4a 2d 5a 2f a5 3d b6 87 8a 48 ad 2d 55 39 88 78 b4 30 d9 84 dc 6f 24 ae b9 60 48 48 42 20 09 21 b0 e4 ba 9b 2f de f0 52 40 b9 1f 11 11 48 32 87 4d 36 90 95 dd cd 5e 9e 79 e6 f6 f9 fc 36 2f 89 af d9 bc de af d9 c9 33 cf f3 cc 63 42 64 43 8f f1 2b 20 60 11 b0 08 58 44 c0 22 60 11 b0 88 80 45 c0 22 60 11 01 8b 80 45 c0 22 02 16 01 8b 80 45 04 2c 02 16 01 8b 08 58 04 2c 02 16 11 b0 08 58 04 2c 22 60 11 b0 08 58 44 c0 22 60 11 b0 88 80 45 c0 22 60 11 01 8b 80 45 c0 22 02 16 01 8b 80 45 04 2c 02 16 01 8b 08 58 04 2c 02 16 11 b0 08 58 04 2c 22 60 11 b0 08 58 44 c0 22 60 11 b0 88 Data Ascii: PNGIHDRXXIDATxq!vbKQJ-Z/=H-U9x0o$`HHB !/R@H2M6^y6/3cBdC+ `XD"`E"`E"E,X,X,"`XD"`E"`E"E,X,X,"`XD"`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49886	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	445	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	402	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 4423 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Fri, 19 Apr 2024 13:12:31 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 432a0d86c59c6d67c0627ac5af669548.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: TmPhHvXANRzGcB9cN8Z2AbwHoj-eTpRRIgY7mh91hYjH2iM1xIH8Wg==
2024-04-19 13:12:32 UTC	4423	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49881	13.32.230.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	1274	OUT	GET /wrapper/v2/messages?hasCsp=true&env=prod&body=%7B%22accountId%22%3A1247%2C%22campaignEnv%22%3A%22prod%22%2C%22campaigns%22%3A%7B%22ccpa%22%3A%7B%22alwaysDisplayDNS%22%3Afalse%2C%22hasLocalData%22%3Afalse%2C%22targetingParams%22%3A%7B%7D%7D%2C%22custom%22%3A%7B%22targetingParams%22%3A%7B%7D%7D%2C%22gdpr%22%3A%7B%22consentStatus%22%3A%7B%7D%2C%22targetingParams%22%3A%7B%7D%7D%7D%2C%22clientMMSOrigin%22%3A%22https%3A%2F%2Fcdn.privacy-mgmt.com%22%2C%22hasCSP%22%3Atrue%2C%22includeData%22%3A%7B%22localState%22%3A%7B%22type%22%3A%22string%22%7D%2C%22actions%22%3A%7B%22type%22%3A%22RecordString%22%7D%2C%22cookies%22%3A%7B%22type%22%3A%22RecordString%22%7D%7D%2C%22propertyHref%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D&localState=null&metadata=%7B%22ccpa%22%3A%7B%22applies%22%3Atrue%7D%2C%22gdpr%22%3A%7B%22applies%22%3Afalse%7D%7D&nonKeyedLocalState=null&ch=4414543004414543003154&scriptVersion=4.21.0&scriptType=unified HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	738	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 20144 Connection: close Date: Fri, 19 Apr 2024 13:12:30 GMT X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, SP_SCRIPT_VERSION Access-Control-Allow-Methods: GET, PUT, POST, DELETE Cache-Control: max-age=0, s-maxage=1200 Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b595ec3d1fc5071e24341ed67173de68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: iZ4RB1ORTBts0IHCfL6NjEvMqAr2d657kAmjIvxiYvpRdFMVrjocxA== Age: 2
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 7b 22 70 72 6f 70 65 72 74 79 49 64 22 3a 37 34 34 33 2c 22 70 72 6f 70 65 72 74 79 50 72 69 6f 72 69 74 79 44 61 74 61 22 3a 7b 22 73 74 61 67 65 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 3a 31 2c 22 73 69 74 65 5f 69 64 22 3a 37 34 34 33 2c 22 70 75 62 6c 69 63 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 3a 5b 31 2c 35 5d 2c 22 6d 75 6c 74 69 5f 63 61 6d 70 61 69 67 6e 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 74 61 67 65 5f 63 61 6d 70 61 69 67 6e 5f 74 79 70 65 5f 70 72 69 6f 72 69 74 79 22 3a 5b 5d 2c 22 70 75 62 6c 69 63 5f 6d 65 73 73 61 67 65 5f 6c 69 6d 69 74 22 3a 32 7d 2c 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 47 44 50 52 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 6d 65 73 73 61 Data Ascii: {"propertyId":7443,"propertyPriorityData":{"stage_message_limit":1,"site_id":7443,"public_campaign_type_priority":[1,5],"multi_campaign_enabled":true,"stage_campaign_type_priority":[],"public_message_limit":2},"campaigns":[{"type":"GDPR","message":{"messa
2024-04-19 13:12:32 UTC	3760	IN	Data Raw: 22 62 6f 72 64 65 72 54 6f 70 4c 65 66 74 52 61 64 69 75 73 5c 22 3a 30 2c 5c 22 62 6f 72 64 65 72 54 6f 70 52 69 67 68 74 52 61 64 69 75 73 5c 22 3a 30 2c 5c 22 62 6f 72 64 65 72 42 6f 74 74 6f 6d 4c 65 66 74 52 61 64 69 75 73 5c 22 3a 30 2c 5c 22 62 6f 72 64 65 72 42 6f 74 74 6f 6d 52 69 67 68 74 52 61 64 69 75 73 5c 22 3a 30 2c 5c 22 62 6f 72 64 65 72 53 74 79 6c 65 5c 22 3a 5c 22 73 6f 6c 69 64 5c 22 7d 2c 5c 22 77 69 64 74 68 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 75 74 6f 5c 22 2c 5c 22 76 61 6c 75 65 5c 22 3a 31 30 30 7d 2c 5c 22 70 61 64 64 69 6e 67 5c 22 3a 7b 5c 22 70 61 64 64 69 6e 67 4c 65 66 74 5c 22 3a 30 2c 5c 22 70 61 64 64 69 6e 67 52 69 67 68 74 5c 22 3a 30 2c 5c 22 70 61 64 64 69 6e 67 54 6f 70 5c 22 3a 30 2c 5c 22 70 61 64 64 Data Ascii: "borderTopLeftRadius\":0,\"borderTopRightRadius\":0,\"borderBottomLeftRadius\":0,\"borderBottomRightRadius\":0,\"borderStyle\":\"solid\"},\"width\":{\"type\":\"auto\",\"value\":100},\"padding\":{\"paddingLeft\":0,\"paddingRight\":0,\"paddingTop\":0,\"padd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49877	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	603	OUT	GET /webstatic/images/des_btn.2466a7a5.svg HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1728 Connection: close Date: Mon, 08 Apr 2024 01:33:43 GMT Last-Modified: Tue, 21 May 2019 06:03:17 GMT ETag: "2466a7a5a60d0af7d084a67cfecce341" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c89f66d6380a5bea82008998db0651e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 6zvg8OjR9OgEmhhuc28yCPpDWHZXqYQPwYV0BX05eSaJtrzrjcEIWg== Age: 992330
2024-04-19 13:12:32 UTC	1728	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 69 6d 61 67 65 20 78 3d 22 2d 38 22 20 79 3d 22 2d 34 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 47 41 41 41 41 42 67 43 41 59 41 41 41 44 69 6d 48 63 34 41 41 41 41 42 47 64 42 54 55 45 41 41 4c 47 50 43 2f 78 68 42 51 41 41 42 42 31 4a Data Ascii: <svg width="8" height="16" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="-8" y="-4" width="24" height="24" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGAAAABgCAYAAADimHc4AAAABGdBTUEAALGPC/xhBQAABB1J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49897	104.26.15.45	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	358	OUT	GET /style/btncolor.css HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	916	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2204800 last-modified: Mon, 11 Feb 2019 11:17:50 GMT etag: W/"4c2a96cfbc1d41:0" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52067 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v5jnC2PQXxPyEuZ4SLwsSMnk1M8PzRX7R%2FjC93pxiEtakKIreStwR4xp0%2FrmzEtH3aI18E%2F5M88fyr3IFqLFOS0lVCNzZAEb%2BGNkQlIb0agwv8rRdp18GkanXdLTcXqH3a0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d259338b84545-ATL
2024-04-19 13:12:32 UTC	113	IN	Data Raw: 36 62 0d 0a 2f 2a 20 4e 61 67 69 63 68 2e 63 6f 6d 20 63 6f 6c 6f 72 20 2a 2f 0d 0a 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 20 7b 0d 0a 09 2d 2d 69 6e 64 6d 61 69 6e 63 6f 6c 6f 72 3a 20 20 20 20 20 20 23 30 36 37 64 38 64 3b 0d 0a 09 2d 2d 69 6e 64 73 65 63 6f 6e 64 63 6f 6c 6f 72 3a 20 20 20 20 57 68 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a Data Ascii: 6b/* Nagich.com color */#INDmenu-btn {--indmaincolor: #067d8d;--indsecondcolor: White;}
2024-04-19 13:12:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49895	104.26.3.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	371	OUT	GET /px.gif?ch=1&e=0.5486801981214138 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	1139	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPp85LajDHz2OYpwZP_H1ScmujtWt-mQvzrFiAJoZLnoy3Vaynte8570mX4qLWprXCTMlnC3mh6Ijg Expires: Sat, 20 Apr 2024 13:12:32 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * CF-Cache-Status: HIT Age: 1007003 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C4hCb45oGDI9I8vfDsAEG8Og6IM%2Fx6FWT40m9dc5Yi4jh21qZVyol0p7fCEaPR9p8wRvQcGLMCNLNDMmXxQkPpZ6ZqBr2WIziSBQKXZJGaDCvZHOru4SyHmwFUZeSIxpjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25933d756762-ATL
2024-04-19 13:12:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49894	104.26.3.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	350	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	1143	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPp85LajDHz2OYpwZP_H1ScmujtWt-mQvzrFiAJoZLnoy3Vaynte8570mX4qLWprXCTMlnC3mh6Ijg Expires: Sat, 20 Apr 2024 13:12:32 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * CF-Cache-Status: HIT Age: 967 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bnmO%2BZdNs%2FPii6QdPVRGNq3pRMmEgyWYJri%2FdW8VmyfTY7EnsSxNTBgT0sZmLTtY4FhrL3U4cr9wOoyO4bKYKo1bjVRoQamL8mCPZ5Z9LvIOYrzZq%2BnDW%2FZUjKfIeE4OPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25933a72070f-ATL
2024-04-19 13:12:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49892	35.190.91.160	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	375	OUT	GET /px.gif?ch=1&rn=8.172352690297082 HTTP/1.1 Host: p.skimresources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	340	IN	HTTP/1.1 200 OK Content-Length: 43 Content-Type: image/gif P3p: policyref="http://skimlinks.com/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Server: Skimlinks Pixel 1.0 Date: Fri, 19 Apr 2024 13:12:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49893	35.190.91.160	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	375	OUT	GET /px.gif?ch=2&rn=8.172352690297082 HTTP/1.1 Host: p.skimresources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	340	IN	HTTP/1.1 200 OK Content-Length: 43 Content-Type: image/gif P3p: policyref="http://skimlinks.com/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Server: Skimlinks Pixel 1.0 Date: Fri, 19 Apr 2024 13:12:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49896	172.217.215.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	501	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	742	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:12:32 GMT Expires: Sat, 20 Apr 2024 13:12:32 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:32 UTC	513	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-04-19 13:12:32 UTC	565	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49889	18.67.76.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	633	OUT	GET /polyfills.b0798.js HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	553	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 5109 Connection: close Last-Modified: Thu, 18 Apr 2024 14:55:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 12:53:59 GMT Cache-Control: max-age=3600 ETag: "89661b8fd918815bcb224bba79cabab1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 074df32306fddeb7d54ca41312e6888e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: Cznk04_n78SI1ELZMLLvq3-cnZ5SNgKoMYk8orN0rKgCds8sgl65YA== Age: 1114
2024-04-19 13:12:32 UTC	5109	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 74 2e 72 3d 66 75 6e Data Ascii: !function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49891	18.67.76.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	645	OUT	GET /Notice.c6498.css HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 34767 Connection: close Date: Fri, 19 Apr 2024 13:12:33 GMT Last-Modified: Thu, 18 Apr 2024 14:55:44 GMT ETag: "449822fce3259c38744ce3adb53a8d44" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2b0c54ffe9876882253b010d44184bdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: WIhFULMAvn_Zy-v8TyN4Bzeo07sQHCw1KiRXoan-bPfX-8lJvTI1gA==
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 62 6f 64 79 2c 68 74 6d 6c 7b 66 6f 6e 74 3a 31 34 70 78 2f 31 2e 32 31 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 7d 68 31 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 62 75 74 74 6f 6e 7b 6f 75 Data Ascii: body,html{font:14px/1.21 Helvetica Neue,arial,sans-serif;font-weight:400;margin:0;padding:0;height:100%;min-height:100%;text-size-adjust:none;-webkit-text-size-adjust:none;-moz-text-size-adjust:none;-ms-text-size-adjust:none}h1{text-align:center}button{ou
2024-04-19 13:12:32 UTC	580	IN	Data Raw: 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 76 65 6e 64 6f 72 2d 63 6f 6f 6b 69 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 76 65 6e 64 6f 72 2d 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 64 69 76 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 39 70 78 7d 2e 66 69 6c 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a Data Ascii: box;display:-ms-flexbox;display:flex}.vendor-cookie-header{padding-bottom:20px}.vendor-header-container>div{margin-top:19px}.filter-container{position:relative;padding:0;margin:0;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:
2024-04-19 13:12:32 UTC	9481	IN	Data Raw: 74 6f 70 3a 33 70 78 7d 2e 66 69 6c 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 34 70 78 3b 68 65 69 67 68 74 3a 31 34 70 78 3b 6c 65 66 74 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 2e 34 3b 74 6f 70 3a 31 37 70 78 7d 2e 76 65 6e 64 6f 72 2d 66 69 6c 74 65 72 3a 66 6f 63 75 73 2c 2e 76 65 6e 64 6f 72 2d 66 69 6c 74 65 72 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 39 65 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 74 6f 67 67 6c 65 2d 76 65 6e 64 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 Data Ascii: top:3px}.filter-container img{position:absolute;width:14px;height:14px;left:10px;opacity:.4;top:17px}.vendor-filter:focus,.vendor-filter:hover{border:0;border-bottom:1px solid #e5e9ee;outline:0;box-shadow:none}.toggle-vendor{width:100%;background-color:#f
2024-04-19 13:12:32 UTC	8322	IN	Data Raw: 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 34 37 30 66 61 7d 2e 70 6d 2d 63 63 70 61 20 2e 70 6d 2d 74 61 62 73 3e 2e 70 6d 2d 74 61 62 2e 61 63 74 69 76 65 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 38 70 78 20 73 6f 6c 69 64 20 23 66 66 66 7d 2e 70 6d 2d 63 63 70 61 20 2e 70 6d 2d 74 61 62 73 3e 2e 70 6d 2d 74 61 62 2e 61 63 74 69 76 65 3a 61 66 74 65 72 2c 2e 70 6d 2d 63 63 70 61 20 2e 70 6d 2d 74 61 62 73 3e 2e 70 6d 2d 74 61 62 2e 61 63 74 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 Data Ascii: hover{color:#1470fa}.pm-ccpa .pm-tabs>.pm-tab.active:after{bottom:-1px;border-bottom:8px solid #fff}.pm-ccpa .pm-tabs>.pm-tab.active:after,.pm-ccpa .pm-tabs>.pm-tab.active:before{content:"";position:absolute;left:50%;-webkit-transform:translateX(-50%);-ms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49890	18.67.76.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	630	OUT	GET /Notice.6d786.js HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	555	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 299284 Connection: close Date: Fri, 19 Apr 2024 12:36:02 GMT Last-Modified: Thu, 18 Apr 2024 14:55:44 GMT ETag: "92a86e3173753b82808817a601818eed" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 573f3bf892e6baf323888f7038237db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: efekQHEKS_EYvhS8aPoxqC_cmAw32rZeuQHbvSux9eNe7vg-oLfzug== Age: 2191
2024-04-19 13:12:32 UTC	15829	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 6e 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 74 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 74 2e 72 3d 66 75 6e Data Ascii: !function(e){function t(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=fun
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 75 2c 70 29 7b 76 61 72 20 64 2c 67 2c 76 2c 6d 2c 62 2c 79 2c 4f 2c 43 2c 77 2c 6b 2c 78 3d 74 2e 74 79 70 65 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 28 64 3d 53 2e 5f 5f 62 29 26 26 64 28 74 29 3b 74 72 79 7b 65 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 78 29 7b 69 66 28 43 3d 74 2e 70 72 6f 70 73 2c 77 3d 28 64 3d 78 2e 63 6f 6e 74 65 78 74 54 79 70 65 29 26 26 72 5b 64 2e 5f 5f 63 5d 2c 6b 3d 64 3f 77 3f 77 2e 70 72 6f 70 73 2e 76 61 6c 75 65 3a 64 2e 5f 5f 3a 72 2c 6e 2e 5f 5f 63 3f 4f 3d 28 67 3d 74 2e 5f 5f 63 3d 6e 2e 5f 5f 63 29 2e 5f 5f 3d 67 2e 5f 5f 45 3a 28 22 70 72 6f 74 6f 74 79 70 65 22 69 6e 20 78 26 26 78 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: u,p){var d,g,v,m,b,y,O,C,w,k,x=t.type;if(void 0!==t.constructor)return null;(d=S.__b)&&d(t);try{e:if("function"==typeof x){if(C=t.props,w=(d=x.contextType)&&r[d.__c],k=d?w?w.props.value:d.__:r,n.__c?O=(g=t.__c=n.__c).__=g.__E:("prototype"in x&&x.prototype
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 41 63 63 6f 72 64 69 6f 6e 4f 70 65 6e 3a 73 2c 69 73 53 70 65 63 69 61 6c 50 75 72 70 6f 73 65 3a 21 30 7d 29 7d 29 29 2c 74 2e 6c 65 6e 67 74 68 3e 30 26 26 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6c 2e 68 29 28 79 2c 7b 6b 65 79 3a 65 2e 5f 69 64 2c 70 75 72 70 6f 73 65 3a 65 2c 73 65 6c 65 63 74 65 64 3a 22 64 69 73 63 6c 6f 73 75 72 65 22 2c 73 65 74 74 69 6e 67 73 3a 72 2c 66 6f 72 63 65 3a 61 2c 75 70 64 61 74 65 4d 65 3a 69 2c 70 61 72 65 6e 74 41 63 63 6f 72 64 69 6f 6e 4f 70 65 6e 3a 73 7d 29 7d 29 29 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 Data Ascii: AccordionOpen:s,isSpecialPurpose:!0})})),t.length>0&&t.map((function(e){return Object(l.h)(y,{key:e._id,purpose:e,selected:"disclosure",settings:r,force:a,updateMe:i,parentAccordionOpen:s})})))},j=function(e){function t(){return e.apply(this,arguments)\|\|t
2024-04-19 13:12:32 UTC	15968	IN	Data Raw: 6c 2c 63 68 69 6c 64 3a 22 70 75 72 70 6f 73 65 73 22 2c 76 65 6e 64 6f 72 73 3a 22 63 6f 6e 73 65 6e 74 22 3d 3d 3d 72 3f 6e 2e 72 65 71 75 69 72 69 6e 67 43 6f 6e 73 65 6e 74 56 65 6e 64 6f 72 73 3a 6e 2e 6c 65 67 49 6e 74 56 65 6e 64 6f 72 73 2c 76 61 6c 75 65 3a 6e 2c 6c 65 67 49 6e 74 3a 22 6c 69 22 3d 3d 3d 72 2c 63 68 65 63 6b 65 64 3a 22 6c 69 22 3d 3d 3d 72 3f 6e 2e 6c 65 67 49 6e 74 3a 6e 2e 61 63 74 69 76 65 2c 75 73 65 50 75 72 4d 6f 64 65 6c 3a 76 7d 29 29 2c 4f 62 6a 65 63 74 28 6f 2e 68 29 28 22 64 69 76 22 2c 7b 72 65 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 6e 74 3d 74 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 61 69 6e 22 7d 2c 4f 62 6a 65 63 74 28 6f 2e 68 29 28 22 70 22 2c 7b 63 6c 61 73 73 4e Data Ascii: l,child:"purposes",vendors:"consent"===r?n.requiringConsentVendors:n.legIntVendors,value:n,legInt:"li"===r,checked:"li"===r?n.legInt:n.active,usePurModel:v})),Object(o.h)("div",{ref:function(t){return e.content=t},className:"main"},Object(o.h)("p",{classN
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 22 2c 74 79 70 65 3a 22 43 6f 6c 6f 72 50 69 63 6b 65 72 22 7d 2c 6f 66 66 42 75 74 74 6f 6e 54 65 78 74 3a 7b 74 69 74 6c 65 3a 22 4f 66 66 20 42 75 74 74 6f 6e 20 54 65 78 74 21 22 2c 74 79 70 65 3a 22 49 6e 70 75 74 4c 61 6e 67 75 61 67 65 22 7d 2c 72 65 71 75 69 72 65 64 43 6f 6e 73 65 6e 74 54 65 78 74 3a 7b 74 69 74 6c 65 3a 22 52 65 71 75 69 72 65 64 20 43 6f 6e 73 65 6e 74 20 54 61 67 20 54 65 78 74 22 2c 74 79 70 65 3a 22 49 6e 70 75 74 4c 61 6e 67 75 61 67 65 22 7d 7d 2c 22 70 75 72 70 6f 73 65 20 63 6f 6e 74 65 6e 74 22 3a 61 28 7b 7d 2c 73 2e 62 5b 22 70 75 72 70 6f 73 65 20 63 6f 6e 74 65 6e 74 22 5d 2c 7b 72 65 71 75 69 72 65 64 43 6f 6e 73 65 6e 74 54 65 78 74 3a 7b 74 69 74 6c 65 3a 22 52 65 71 75 69 72 65 64 20 43 6f 6e 73 65 6e 74 22 2c Data Ascii: ",type:"ColorPicker"},offButtonText:{title:"Off Button Text!",type:"InputLanguage"},requiredConsentText:{title:"Required Consent Tag Text",type:"InputLanguage"}},"purpose content":a({},s.b["purpose content"],{requiredConsentText:{title:"Required Consent",
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 6e 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 74 79 70 65 2c 6f 3d 74 2e 63 6f 6c 6f 72 2c 72 3d 74 2e 6f 66 66 43 6f 6c 6f 72 2c 61 3d 74 2e 74 65 78 74 2c 69 3d 74 2e 6f 66 66 54 65 78 74 2c 73 3d 74 2e 63 6f 6c 6f 72 41 63 74 69 76 65 2c 63 3d 74 2e 6f 66 66 41 63 74 69 76 65 43 6f 6c 6f 72 2c 6c 3d 74 2e 63 68 65 63 6b 65 64 2c 75 3d 74 2e 6c 6f 63 6b 65 64 2c 64 3d 21 74 68 69 73 2e 70 72 6f 70 73 2e 75 73 65 50 75 72 4d 6f 64 65 6c 7c 7c 74 68 69 73 2e 73 74 61 74 65 2e 74 6f 67 67 6c 65 44 69 73 70 6c 61 79 26 26 21 74 68 69 73 2e 70 72 6f 70 73 2e 75 73 65 50 75 72 4d 6f 64 65 6c Data Ascii: n.__proto__=o,t.prototype.render=function(){var e=this,t=this.props,n=t.type,o=t.color,r=t.offColor,a=t.text,i=t.offText,s=t.colorActive,c=t.offActiveColor,l=t.checked,u=t.locked,d=!this.props.usePurModel\|\|this.state.toggleDisplay&&!this.props.usePurModel
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 70 65 6e 64 43 68 69 6c 64 28 74 2e 6c 29 2c 74 2e 76 3d 21 30 2c 74 2e 69 3d 6e 2c 4f 62 6a 65 63 74 28 56 2e 72 65 6e 64 65 72 29 28 6f 2c 6e 2c 74 2e 6c 29 2c 74 2e 5f 5f 6b 3d 74 68 69 73 2e 6c 2e 5f 5f 6b 29 3a 74 2e 76 26 26 28 74 2e 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 2e 6c 29 2c 4f 62 6a 65 63 74 28 56 2e 5f 75 6e 6d 6f 75 6e 74 29 28 74 2e 73 29 29 2c 74 2e 73 3d 6f 2c 74 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 6e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 2e 6c 29 2c 4f 62 6a 65 63 74 28 56 2e 5f 75 6e 6d 6f 75 6e 74 29 28 74 2e 73 29 7d 2c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e Data Ascii: pendChild(t.l),t.v=!0,t.i=n,Object(V.render)(o,n,t.l),t.__k=this.l.__k):t.v&&(t.l.parentNode&&t.i.removeChild(t.l),Object(V._unmount)(t.s)),t.s=o,t.componentWillUnmount=function(){t.l.parentNode&&t.i.removeChild(t.l),Object(V._unmount)(t.s)},null}function
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 22 2c 22 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 22 2c 22 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 22 2c 22 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 22 2c 22 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 22 2c 22 63 78 22 2c 22 63 79 22 2c 22 64 22 2c 22 64 78 22 2c 22 64 79 22 2c 22 64 69 66 66 75 73 65 63 6f 6e 73 74 61 6e 74 22 2c 22 64 69 72 65 63 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 22 2c 22 64 69 76 69 73 6f 72 22 2c 22 64 75 72 22 2c 22 65 64 67 65 6d 6f 64 65 22 2c 22 65 6c 65 76 61 74 69 6f 6e 22 2c 22 65 6e 64 22 2c 22 66 69 6c 6c 22 2c 22 66 69 6c 6c 2d 6f 70 61 63 69 74 79 22 2c 22 66 69 6c 6c 2d 72 75 6c 65 22 2c 22 66 69 6c 74 65 72 22 2c 22 66 69 6c 74 65 72 75 6e 69 74 73 22 2c 22 Data Ascii: ","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 74 6f 6d 56 65 6e 64 6f 72 4c 61 62 65 6c 31 4c 65 74 74 65 72 2c 53 3d 74 2e 63 75 73 74 6f 6d 56 65 6e 64 6f 72 4c 61 62 65 6c 32 4c 65 74 74 65 72 2c 4e 3d 74 2e 63 75 73 74 6f 6d 56 65 6e 64 6f 72 4c 61 62 65 6c 33 4c 65 74 74 65 72 2c 4c 3d 74 2e 75 73 65 50 75 72 4d 6f 64 65 6c 2c 41 3d 74 2e 69 64 66 61 53 74 61 74 75 73 2c 49 3d 74 2e 69 6e 64 65 78 2c 42 3d 74 2e 6b 65 79 2c 44 3d 74 2e 73 65 74 74 69 6e 67 73 2c 45 3d 74 2e 73 74 61 63 6b 2c 46 3d 74 2e 74 6f 67 67 6c 65 53 74 61 63 6b 2c 4d 3d 74 68 69 73 2e 73 74 61 74 65 2e 6f 70 65 6e 2c 52 3d 74 68 69 73 2e 70 72 6f 70 73 2e 73 65 74 74 69 6e 67 73 7c 7c 7b 7d 2c 56 3d 72 28 7b 7d 2c 52 2e 61 63 63 6f 72 64 69 6f 6e 73 53 70 61 63 69 6e 67 2c 7b 7d 2c 52 2e 61 63 63 6f 72 64 69 6f 6e 73 46 Data Ascii: tomVendorLabel1Letter,S=t.customVendorLabel2Letter,N=t.customVendorLabel3Letter,L=t.usePurModel,A=t.idfaStatus,I=t.index,B=t.key,D=t.settings,E=t.stack,F=t.toggleStack,M=this.state.open,R=this.props.settings\|\|{},V=r({},R.accordionsSpacing,{},R.accordionsF
2024-04-19 13:12:32 UTC	16384	IN	Data Raw: 43 6f 6c 6f 72 3a 22 23 30 30 30 30 30 30 22 2c 62 6f 72 64 65 72 54 6f 70 4c 65 66 74 52 61 64 69 75 73 3a 30 2c 62 6f 72 64 65 72 54 6f 70 52 69 67 68 74 52 61 64 69 75 73 3a 30 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 4c 65 66 74 52 61 64 69 75 73 3a 30 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 52 69 67 68 74 52 61 64 69 75 73 3a 30 2c 62 6f 72 64 65 72 53 74 79 6c 65 3a 22 73 6f 6c 69 64 22 7d 7d 29 2c 6f 28 74 68 69 73 2c 65 29 7d 2c 76 3d 28 28 64 3d 7b 68 65 69 67 68 74 3a 7b 6d 69 6e 48 65 69 67 68 74 3a 7b 74 69 74 6c 65 3a 22 4d 69 6e 20 53 63 72 6f 6c 6c 20 48 65 69 67 68 74 22 2c 74 79 70 65 3a 22 53 69 7a 65 22 7d 2c 6d 61 78 48 65 69 67 68 74 3a 7b 74 69 74 6c 65 3a 22 4d 61 78 20 53 63 72 6f 6c 6c 20 48 65 69 67 68 74 22 2c 74 79 70 65 3a 22 53 Data Ascii: Color:"#000000",borderTopLeftRadius:0,borderTopRightRadius:0,borderBottomLeftRadius:0,borderBottomRightRadius:0,borderStyle:"solid"}}),o(this,e)},v=((d={height:{minHeight:{title:"Min Scroll Height",type:"Size"},maxHeight:{title:"Max Scroll Height",type:"S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49898	104.26.15.45	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	361	OUT	GET /assets/locale/en.json HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	909	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: application/json Content-Length: 810 Connection: close Cache-Control: public, max-age=2204800 last-modified: Tue, 15 Jun 2021 15:40:09 GMT accept-ranges: bytes etag: "f45920b9fc61d71:0" access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y7ZbY1wPmDoJ4%2FFcsKGTe4Ud5bWJcklgBfDltGJjzLefb2SQA3M%2FzH3Fk2JfV61zPCI1DZW0n6wGPd%2BgpyNoWg6Kn2Yz%2Bk%2Fc5DYZGTHD4F8jVcRtvD3BoAQCxVsFZzktWBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25934e31b0a0-ATL
2024-04-19 13:12:32 UTC	460	IN	Data Raw: 7b 0d 0a 09 22 63 6c 6f 73 65 42 74 6e 22 20 3a 20 22 43 6c 6f 73 65 3c 3c 20 44 69 61 6c 6f 67 3e 3e 22 2c 0d 0a 09 22 61 31 31 79 42 74 6e 22 20 3a 20 7b 20 0d 0a 09 09 22 74 78 74 22 20 3a 20 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 0d 0a 09 09 22 74 69 70 22 20 3a 20 22 4f 70 65 6e 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 73 20 6d 65 6e 75 22 2c 0d 0a 09 09 22 64 72 61 67 22 20 3a 20 22 45 78 70 6c 6f 72 65 20 79 6f 75 72 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 73 22 0d 0a 09 7d 2c 0d 0a 09 22 62 6c 69 6e 64 4e 6f 74 69 66 22 20 3a 20 7b 20 0d 0a 09 09 22 6e 6f 74 65 22 20 3a 20 22 50 6c 65 61 73 65 20 6e 6f 74 65 3a 20 54 68 69 73 20 77 65 62 73 69 74 65 20 69 6e 63 6c 75 64 65 73 20 61 6e 20 61 63 Data Ascii: {"closeBtn" : "Close<< Dialog>>","a11yBtn" : { "txt" : "Accessibility","tip" : "Open accessibility options menu","drag" : "Explore your accessibility options"},"blindNotif" : { "note" : "Please note: This website includes an ac
2024-04-19 13:12:32 UTC	350	IN	Data Raw: 09 09 22 61 31 31 79 4d 65 6e 75 22 20 3a 20 22 50 72 65 73 73 20 65 6e 74 65 72 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 6d 65 6e 75 22 2c 0d 0a 09 09 22 61 31 31 79 4d 65 6e 75 4d 6f 62 69 6c 65 22 20 3a 20 22 50 72 65 73 73 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 6d 65 6e 75 22 2c 0d 0a 09 09 22 62 6c 69 6e 64 22 20 3a 20 7b 20 0d 0a 09 09 09 22 74 78 74 22 20 3a 22 50 72 65 73 73 20 65 6e 74 65 72 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 66 6f 72 20 62 6c 69 6e 64 20 70 65 6f 70 6c 65 22 2c 0d 0a 09 09 09 22 6d 6f 62 69 6c 65 54 78 74 22 20 3a 20 22 50 72 65 73 73 20 66 6f 72 20 41 63 63 65 73 73 69 62 69 6c 69 74 79 20 66 6f 72 20 62 6c 69 6e 64 20 70 65 6f 70 6c 65 22 2c 0d 0a 09 09 09 22 73 75 70 22 Data Ascii: "a11yMenu" : "Press enter for Accessibility menu","a11yMenuMobile" : "Press for Accessibility menu","blind" : { "txt" :"Press enter for Accessibility for blind people","mobileTxt" : "Press for Accessibility for blind people","sup"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49880	54.236.155.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	563	OUT	OPTIONS /v1/recordVendorsLoaded HTTP/1.1 Host: prod.us-east-1.cxm-bcn.publisher-services.amazon.dev Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	376	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: content-type Access-Control-Max-Age: 1800 Allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49902	35.201.67.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	354	OUT	GET /api/v2/page HTTP/1.1 Host: t.skimresources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	630	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Content-Type: application/javascript Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token Access-Control-Allow-Credentials: true X-Skim-Error: error Content-Length: 22 Date: Fri, 19 Apr 2024 13:12:32 GMT Server: Python/3.11 aiohttp/3.8.6 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:32 UTC	22	IN	Data Raw: 2f 2f 20 4a 61 76 61 73 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 Data Ascii: // Javascript Document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49903	172.253.124.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	867	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-86316-1&cid=315527398.1713532348&jid=1870324937&gjid=783648625&_gid=1988001262.1713532350&_u=YADAAUAAAAAAACAAI~&z=2002562156 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	595	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.justjared.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 13:12:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:32 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49901	34.232.204.139	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	839	OUT	GET /zones/jstjared/services?dp=https%3A%2F%2Fwww.justjared.com%2F&pu=https%3A%2F%2Fwww.justjared.com%2F&ogu=https%3A%2F%2Fwww.justjared.com&rf=&r=3.88.29&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=10240&bf=f42f33720e241642e593da0d840ca6c8d6073588&ce=true&fs=false&dpr=1&sch=1024&scw=1280&lt=1713532349547&to=-120&vpii=false&vph=907&vpw=1280 HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:32 UTC	405	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 869 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:32 GMT; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true ETag: "092fef17c842da0d221a28d385e1ceb51" Timing-Allow-Origin: *
2024-04-19 13:12:32 UTC	869	IN	Data Raw: 7b 22 61 74 22 3a 7b 22 6d 77 22 3a 32 35 30 2c 22 63 65 22 3a 5b 22 2e 63 6e 78 70 6c 2d 76 70 61 69 64 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 22 23 68 6f 74 5f 73 74 6f 72 69 65 73 5f 73 6c 69 64 65 72 22 2c 22 2e 6c 69 6b 65 2d 74 68 69 73 22 2c 22 23 73 69 64 65 31 22 2c 22 2e 63 73 73 2d 37 71 6f 37 75 35 22 2c 22 2e 63 6f 6e 6e 61 74 69 78 22 2c 22 23 73 69 64 65 62 61 72 22 2c 22 2e 7a 65 72 67 6d 6f 64 22 2c 22 23 72 63 2d 77 69 64 67 65 74 2d 34 63 65 64 31 33 22 2c 22 2e 74 68 75 6d 62 6e 61 69 6c 22 5d 2c 22 72 65 66 22 3a 7b 22 6d 61 78 22 3a 35 2c 22 69 6e 74 22 3a 33 30 7d 2c 22 6d 68 22 3a 32 30 30 2c 22 70 73 22 3a 74 72 75 65 2c 22 74 72 22 3a 30 2e 34 2c 22 6f 66 22 3a 66 61 6c 73 65 2c 22 69 6e 49 6d 61 67 65 50 72 65 66 65 74 63 68 22 3a Data Ascii: {"at":{"mw":250,"ce":[".cnxpl-vpaid-container","#hot_stories_slider",".like-this","#side1",".css-7qo7u5",".connatix","#sidebar",".zergmod","#rc-widget-4ced13",".thumbnail"],"ref":{"max":5,"int":30},"mh":200,"ps":true,"tr":0.4,"of":false,"inImagePrefetch":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49899	104.26.15.45	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	355	OUT	GET /style/style.css HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	921	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2204800 last-modified: Wed, 22 Mar 2023 11:12:03 GMT etag: W/"80833021af5cd91:0" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 52035 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tohS0G%2F9BMCGcvZKHT%2BGiItQqhROZyLzrBSY%2BTSEmm%2FQe%2BGLVjhvZdx5CDxFVFuNgMQj1hAQv7r1Hums4mU%2Bibqb43A2brOR4Xhc9hU2QgjtRIG20BdJNKzWWcnHL5SXBuM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25934e86ad83-ATL
2024-04-19 13:12:32 UTC	448	IN	Data Raw: 34 38 36 30 0d 0a 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2c 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 20 73 76 67 20 2a 2c 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 73 74 72 6f 6b 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 70 6f 70 75 70 2c 2e 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 66 6f 63 75 73 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 2c 2e 49 4e Data Ascii: 4860#INDmenu-btn,#INDquickAccess button{position:fixed;height:auto;width:auto;cursor:pointer}#INDmenu-btn svg *,#INDmenu-btn-moveArrow :first-child{stroke:none!important}#INDpopup,.INDhasDragTooltip #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,.IN
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 2d 6c 6f 61 64 69 6e 67 29 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 6e 6f 74 28 2e 49 4e 44 62 74 6e 2d 6c 6f 61 64 69 6e 67 29 3a 68 6f 76 65 72 3a 61 66 74 65 72 2c 2e 49 4e 44 68 61 73 44 72 61 67 54 6f 6f 6c 74 69 70 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 6e 6f 74 28 2e 49 4e 44 62 74 6e 2d 6c 6f 61 64 69 6e 67 29 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 5b 64 61 74 61 2d 69 6e 64 68 61 73 64 72 61 67 74 6f 6f 6c 74 69 70 5d 20 23 49 4e 44 57 72 61 70 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 3a 66 6f 63 75 73 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 2c 5b 64 61 74 61 2d 69 Data Ascii: -loading):focus:before,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:after,.INDhasDragTooltip #INDWrap #INDmenu-btn:not(.INDbtn-loading):hover:before,[data-indhasdragtooltip] #INDWrap #INDmenu-btn:focus #INDmenu-btn-moveArrow,[data-i
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 49 4e 44 62 6c 69 6e 64 4e 6f 74 69 66 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 49 4e 44 6c 6f 61 64 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 3a 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 69 6e 64 6d 61 69 6e 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 49 4e 44 6c 6f 61 64 65 72 7d 23 49 4e 44 6d 65 6e 75 20 2e 49 4e 44 Data Ascii: INDblindNotif{position:fixed!important}.INDloader:after{content:" ";display:block;width:25px;height:25px;margin:1px;border-radius:50%;border:5px solid var(--indmaincolor);border-color:#fff transparent;animation:1.2s linear infinite INDloader}#INDmenu .IND
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 52 69 67 68 74 20 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 2c 5b 64 61 74 61 2d 69 6e 64 70 6f 73 69 74 69 6f 6e 72 69 67 68 74 5d 20 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 7b 72 69 67 68 74 3a 31 38 30 70 78 7d 23 49 4e 44 71 75 69 63 6b 41 63 63 65 73 73 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 74 6f 70 3a 30 7d 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2c 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 20 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 6c 65 66 2c 4f 70 65 6e 20 53 61 6e 73 20 48 65 62 72 65 77 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 Data Ascii: ositionRight #INDquickAccess button,[data-indpositionright] #INDquickAccess button{right:180px}#INDquickAccess button:focus{top:0}:not(#INDdummy).INDtooltip,:not(#INDdummy).INDtooltip *{line-height:24px;font-family:Alef,Open Sans Hebrew,Arial,sans-serif;f
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 6e 3a 61 62 73 6f 6c 75 74 65 7d 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2e 49 4e 44 74 69 70 4c 65 66 74 3a 61 66 74 65 72 2c 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2e 49 4e 44 74 69 70 52 69 67 68 74 3a 61 66 74 65 72 7b 74 6f 70 3a 31 37 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 38 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 38 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 2e 49 4e 44 74 6f 6f 6c 74 69 70 2e 49 4e 44 74 69 70 42 6f 74 74 6f 6d 3a 61 66 74 65 72 2c 3a 6e 6f 74 28 23 49 4e 44 64 75 6d 6d 79 29 Data Ascii: n:absolute}:not(#INDdummy).INDtooltip.INDtipLeft:after,:not(#INDdummy).INDtooltip.INDtipRight:after{top:17px;margin-top:-8px;border-top:8px solid transparent;border-bottom:8px solid transparent}:not(#INDdummy).INDtooltip.INDtipBottom:after,:not(#INDdummy)
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 7d 23 49 4e 44 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6f 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f Data Ascii: x;overflow:hidden;clip:rect(1px,1px,1px,1px)}#INDmenu{position:fixed;top:0;margin:0;padding:0;width:180px;height:180px;z-index:100000;visibility:visible;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;-o-user-select:none;user-select:no
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 49 4e 44 64 72 61 67 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2d 6d 6f 76 65 41 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 65 72 72 6f 72 20 68 32 2c 23 49 4e 44 6c 6f 61 64 65 72 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 32 34 70 78 20 30 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 69 74 69 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 69 74 69 61 6c 7d 23 49 4e 44 65 72 72 6f 72 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 34 34 34 7d 3a 6e 6f 74 28 23 49 4e 44 64 Data Ascii: INDdrag] #INDmenu-btn-moveArrow{display:block!important}#INDerror h2,#INDloader img{margin:24px 0;width:auto;line-height:initial;letter-spacing:initial}#INDerror *{font-family:Arial,Helvetica,sans-serif;font-weight:500;font-size:25px;color:#444}:not(#INDd
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 73 3b 2d 2d 69 6e 64 73 63 61 6c 65 3a 31 3b 2d 2d 69 6e 64 73 63 61 6c 65 2d 63 6f 6e 74 72 61 3a 63 61 6c 63 28 31 20 2d 20 76 61 72 28 2d 2d 69 6e 64 73 63 61 6c 65 29 29 3b 2d 2d 69 6e 64 73 63 61 6c 65 2d 6d 61 72 67 69 6e 3a 63 61 6c 63 28 20 76 61 72 28 2d 2d 69 6e 64 73 63 61 6c 65 2d 63 6f 6e 74 72 61 29 20 2a 20 31 30 20 2a 20 2d 34 70 78 20 29 3b 7a 2d 69 6e 64 65 78 3a 69 6e 68 65 72 69 74 7d 2e 49 4e 44 4d 6f 62 69 6c 65 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2c 5b 64 61 74 61 2d 69 6e 64 6d 6f 62 69 6c 65 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 7b 74 6f 70 3a 75 6e 73 65 74 3b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 49 4e 44 70 6f 73 69 74 69 6f 6e 52 69 67 68 74 20 23 49 4e 44 6d 65 Data Ascii: sition:transform .6s;--indscale:1;--indscale-contra:calc(1 - var(--indscale));--indscale-margin:calc( var(--indscale-contra) * 10 * -4px );z-index:inherit}.INDMobile #INDmenu-btn,[data-indmobile] #INDmenu-btn{top:unset;bottom:24px}.INDpositionRight #INDme
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 61 72 72 6f 77 2d 62 74 6e 3e 73 70 61 6e 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 61 72 72 6f 77 2d 62 74 6e 3e 73 70 61 6e 3a 61 66 74 65 72 7b 72 69 67 68 74 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 61 72 72 6f 77 2d 72 69 67 68 74 2d 62 74 6e 3e 73 70 61 6e 3a 61 66 74 65 72 2c 23 49 4e 44 6d Data Ascii: ortant;border-bottom-left-radius:2px;border-top:none!important;border-right:none!important}#INDmenu-btn.INDarrow-btn>span:before{left:15px!important}#INDmenu-btn.INDarrow-btn>span:after{right:15px!important}#INDmenu-btn.INDarrow-right-btn>span:after,#INDm
2024-04-19 13:12:32 UTC	1369	IN	Data Raw: 5b 64 61 74 61 2d 69 6e 64 70 6f 73 69 74 69 6f 6e 6c 65 66 74 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 73 65 6d 69 63 69 72 63 6c 65 2d 62 74 6e 2e 49 4e 44 6f 75 74 6c 69 6e 65 2d 62 74 6e 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 49 4e 44 70 6f 73 69 74 69 6f 6e 52 69 67 68 74 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 73 65 6d 69 63 69 72 63 6c 65 2d 62 74 6e 2e 49 4e 44 6f 75 74 6c 69 6e 65 2d 62 74 6e 2c 5b 64 61 74 61 2d 69 6e 64 70 6f 73 69 74 69 6f 6e 72 69 67 68 74 5d 20 23 49 4e 44 6d 65 6e 75 2d 62 74 6e 2e 49 4e 44 73 65 6d 69 63 69 72 63 6c 65 2d 62 74 6e 2e 49 4e 44 6f 75 74 6c 69 6e 65 2d 62 74 6e 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 49 4e Data Ascii: [data-indpositionleft] #INDmenu-btn.INDsemicircle-btn.INDoutline-btn{border-left:0!important}.INDpositionRight #INDmenu-btn.INDsemicircle-btn.INDoutline-btn,[data-indpositionright] #INDmenu-btn.INDsemicircle-btn.INDoutline-btn{border-right:0!important}.IN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49900	76.223.94.144	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	356	OUT	GET /embed/updateSession HTTP/1.1 Host: api2.sided.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:32 UTC	903	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 75 Connection: close Set-Cookie: AWSALBTG=Mvc2KCQ7x3d/TguITr019jDWYHF5dCngRQPLIPQzAfBjqF4LBSVgUIRMRXQi0dqSbvXBe4lAJsun/0xcmhbp9QDpL8jsPVQTq753iumclVM5qhZFbqb4xLva4nQU3DGRgK+KatQYe3L9L7e/RD8dPhDobp3MLQ0dYq76aaA/ZkZY; Expires=Fri, 26 Apr 2024 13:12:32 GMT; Path=/ Set-Cookie: AWSALBTGCORS=Mvc2KCQ7x3d/TguITr019jDWYHF5dCngRQPLIPQzAfBjqF4LBSVgUIRMRXQi0dqSbvXBe4lAJsun/0xcmhbp9QDpL8jsPVQTq753iumclVM5qhZFbqb4xLva4nQU3DGRgK+KatQYe3L9L7e/RD8dPhDobp3MLQ0dYq76aaA/ZkZY; Expires=Fri, 26 Apr 2024 13:12:32 GMT; Path=/; SameSite=None; Secure X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, authorization,x-access-token,apikey Access-Control-Allow-Methods: GET,PUT,POST,DELETE,PATCH,OPTIONS ETag: W/"4b-nSeICKrpkE+GGlmuyzC4q2GhRMQ"
2024-04-19 13:12:32 UTC	75	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 5b 7b 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 66 6f 75 6e 64 2c 20 4e 6f 74 20 46 6f 75 6e 64 22 7d 5d 2c 22 64 61 74 61 22 3a 6e 75 6c 6c 7d Data Ascii: {"status":"error","message":[{"error":"Not found, Not Found"}],"data":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49887	54.65.26.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	638	OUT	OPTIONS /data/episodes/overview?cids=3921236&web=1&m=20240419&n=667accfeb78aeb12da97930e8573ee61&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web Origin: https://castbox.fm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:33 UTC	609	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Allow: HEAD, OPTIONS, GET X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://castbox.fm Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49888	54.65.26.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:32 UTC	636	OUT	OPTIONS /data/channel/v3?cid=3921236&raw=1&web=1&m=20240419&n=92c75641391bc21cf7585973d7d93510&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web Origin: https://castbox.fm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:33 UTC	609	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Allow: HEAD, OPTIONS, GET X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://castbox.fm Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49907	151.101.193.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	721	OUT	GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	745	IN	HTTP/1.1 200 OK Connection: close Content-Length: 664 x-amz-id-2: b/JNQA3wp2H2DAmbg+JjYeROFUEy4X7AH8+539mlJEPjYtWELuA8OwPCcAXveXGDK6K662p0dr4= x-amz-request-id: 4SGD5ZMEVE7RPMWX x-amz-replication-status: COMPLETED Last-Modified: Tue, 13 Feb 2024 13:15:59 GMT ETag: "8b140f0f0f6e1a0f986cc7d6dfd74d65" x-amz-server-side-encryption: AES256 x-amz-version-id: 4MpQ_aQntJKuJTBB3LGK3B7cfa8k5k0b Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Age: 69452 Date: Fri, 19 Apr 2024 13:12:34 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130031-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1713532354.099435,VS0,VE1 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 91 Access-Control-Allow-Origin: *
2024-04-19 13:12:34 UTC	664	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 61 62 6f 6f 6c 61 20 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 61 73 79 6e 63 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Taboola Topics Frame</title> <script> (async()=>{ var s=document.referrer; if("browsingTopics"in document&&document.featurePolicy.allowsFeatu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49904	54.236.155.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	660	OUT	POST /v1/recordVendorsLoaded HTTP/1.1 Host: prod.us-east-1.cxm-bcn.publisher-services.amazon.dev Connection: keep-alive Content-Length: 857 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	857	OUT	Data Raw: 5b 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 37 38 61 35 34 31 66 32 2d 39 37 34 38 2d 34 62 61 35 2d 39 63 64 61 2d 38 35 66 64 37 61 34 34 62 32 33 34 22 2c 22 70 72 6f 70 65 72 74 79 49 64 22 3a 22 31 32 36 30 22 2c 22 76 65 6e 64 6f 72 49 64 22 3a 22 6c 69 76 65 52 61 6d 70 22 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 36 30 30 22 7d 2c 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 37 38 61 35 34 31 66 32 2d 39 37 34 38 2d 34 62 61 35 2d 39 63 64 61 2d 38 35 66 64 37 61 34 34 62 32 33 34 22 2c 22 70 72 6f 70 65 72 74 79 49 64 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 49 64 22 3a 22 70 75 62 63 6f 6d 6d 6f 6e 22 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 36 30 30 22 7d 2c 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 37 38 61 35 34 31 66 32 2d 39 37 Data Ascii: [{"publisherId":"78a541f2-9748-4ba5-9cda-85fd7a44b234","propertyId":"1260","vendorId":"liveRamp","sourceId":"600"},{"publisherId":"78a541f2-9748-4ba5-9cda-85fd7a44b234","propertyId":null,"vendorId":"pubcommon","sourceId":"600"},{"publisherId":"78a541f2-97
2024-04-19 13:12:34 UTC	213	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:34 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49908	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	2297	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=0&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_Mid_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F2%22%7D%2C%7B%22sd%22%3A%22home_Top_Right_300x250_InnerRail%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F1%22%7D%2C%7B%22sd%22%3A%22home_Bot_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22160x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F3%22%7D%2C%7B%22sd%22%3A%22home_Top_728x90%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Ftop%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 779 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 3c790b7740916e9710f9e5f1b3e1dd0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: rPvqjpPw7TiFgn8ABtkDqSalQra0onNIxtvGw1W0nXyauJTzzHvOrQ==
2024-04-19 13:12:34 UTC	779	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 4c 69 6d 66 54 70 4b 70 77 54 33 43 37 77 6a 49 34 45 65 4f 73 67 41 41 41 47 4f 39 6e 7a 41 6c 51 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 43 57 67 34 5a 5a 22 2c 22 73 69 7a 65 22 3a 22 37 32 38 78 39 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a 65 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JLimfTpKpwT3C7wjI4EeOsgAAAGO9nzAlQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCWg4ZZ","size":"728x90","meta":["slotID","mediaType","size

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49909	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	1700	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=1&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22highImpactDFP%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fhigh_impact%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 293 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:34 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 4ea27cdf8ff7ba5bd5923d3dc2371c3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: SD6epn5zOiyCFHV3M6Feu24GMf57zFdG894wCRrrrkKp0tsOyg7pWA==
2024-04-19 13:12:34 UTC	293	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 5f 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 69 6e 64 65 78 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 6e 2d 4f 67 75 72 79 5f 73 6e 62 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 73 6d 72 74 5f 6e 2d 54 61 70 70 78 5f 63 6e 76 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 72 62 64 5f 70 70 74 5f 6e 2d 62 61 69 64 75 5f 6e 2d 56 69 64 61 7a 6f 6f 5f 6e 2d 6e 61 74 69 76 6f 5f 61 6e 2d 64 62 35 5f 73 6f 76 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49910	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	1708	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=2&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_InContent1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fincontent%2Fhome%2F1%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 293 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:33 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 cb5fa36b8c5e872295654406e78a7a98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: WLrctKt0-yu07fXCb7sWR_m310saTb5FgwRj17YDBaRa-veYJ3c63w==
2024-04-19 13:12:34 UTC	293	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 5f 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 69 6e 64 65 78 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 6e 2d 4f 67 75 72 79 5f 73 6e 62 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 73 6d 72 74 5f 6e 2d 54 61 70 70 78 5f 63 6e 76 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 72 62 64 5f 70 70 74 5f 6e 2d 62 61 69 64 75 5f 6e 2d 56 69 64 61 7a 6f 6f 5f 6e 2d 6e 61 74 69 76 6f 5f 61 6e 2d 64 62 35 5f 73 6f 76 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49917	31.13.65.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	1306	OUT	GET /signals/config/572262379840831?v=2.9.154&r=stable&domain=www.justjared.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-19 13:12:34 UTC	1524	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-19 13:12:34 UTC	11	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 Data Ascii: /*** Copyr
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 Data Ascii: ight (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f Data Ascii: turn;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbo
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: rototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a)
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d Data Ascii: .shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e}
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 Data Ascii: {};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o="
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 Data Ascii: var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 Data Ascii: h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;f
2024-04-19 13:12:34 UTC	1500	IN	Data Raw: 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e Data Ascii: sModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49916	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	605	OUT	GET /webstatic/images/logo_gray.0b75f9d4.png HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	459	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1461 Connection: close Date: Mon, 08 Apr 2024 01:33:43 GMT Last-Modified: Tue, 12 Mar 2019 07:58:43 GMT ETag: "0b75f9d407f7447c0edf988dff95c3a4" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cb8f9eeabb5079cbcdbabdbd476ce1a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: Ccx8ZkrGyWdj4-Ei6NUM3Ww9J2Z5fpTqUvfOtZAyLHhmhNi78S8RcQ== Age: 992332
2024-04-19 13:12:34 UTC	1461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 32 08 03 00 00 00 10 86 c9 d8 00 00 02 1c 50 4c 54 45 00 00 00 ff ff ff 80 80 80 55 55 55 80 80 80 66 66 66 55 55 55 49 49 49 60 60 60 55 55 55 46 46 46 4e 4e 4e 49 49 49 44 44 44 50 50 50 4b 4b 4b 43 43 43 4d 4d 4d 49 49 49 43 43 43 4a 4a 4a 47 47 47 45 45 45 49 49 49 46 46 46 44 44 44 42 42 42 48 48 48 46 46 46 44 44 44 47 47 47 45 45 45 43 43 43 41 41 41 46 46 46 44 44 44 43 43 43 41 41 41 44 44 44 43 43 43 41 41 41 45 45 45 42 42 42 41 41 41 45 45 45 43 43 43 42 42 42 41 41 41 44 44 44 43 43 43 42 42 42 41 41 41 44 44 44 43 43 43 41 41 41 44 44 44 42 42 42 42 42 42 41 41 41 43 43 43 41 41 41 43 43 43 42 42 42 42 42 42 41 41 41 41 41 41 43 43 43 40 40 40 43 43 43 41 41 41 43 43 43 42 Data Ascii: PNGIHDR,2PLTEUUUfffUUUIII```UUUFFFNNNIIIDDDPPPKKKCCCMMMIIICCCJJJGGGEEEIIIFFFDDDBBBHHHFFFDDDGGGEEECCCAAAFFFDDDCCCAAADDDCCCAAAEEEBBBAAAEEECCCBBBAAADDDCCCBBBAAADDDCCCAAADDDBBBBBBAAACCCAAACCCBBBBBBAAAAAACCC@@@CCCAAACCCB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49918	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	2386	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=373946354429396&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cinsticator%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=320x50%7C300x250%7C1x1&fluid=height&ifi=1&didk=2376894448&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1713532353032&lmt=1713532038&adxs=301&adys=2469&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x50&msz=300x50&fws=0&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dconnatix_video%26pos%3Dconnatix_video%26refresh_count%3D0&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=826837274&frm=20&eoidce=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1016	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Google-LineItem-Id: 6375283128 Google-Creative-Id: 138448668888 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:34 UTC	239	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 69 6e 73 74 69 63 61 74 6f 72 2f 68 6f 6d 65 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 5b 22 49 44 3d 61 30 38 35 31 61 36 35 37 62 63 34 36 35 33 62 3a 54 3d 31 37 31 33 35 33 32 33 35 34 3a 52 54 3d 31 37 31 33 35 33 32 33 35 34 3a 53 3d 41 4c 4e 49 5f 4d 5a 69 4f 66 64 49 46 73 57 69 76 35 57 38 78 61 38 30 56 6b 62 32 65 72 65 77 56 67 22 2c 31 37 34 37 32 32 38 33 35 34 2c 22 2f 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 Data Ascii: 8000{"/21854935662/justjared/desktop/insticator/home":["html",1,null,null,1,250,300,0,0,null,null,null,1,[["ID=a0851a657bc4653b:T=1713532354:RT=1713532354:S=ALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg",1747228354,"/","justjared.com",1],["UID=0000
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 30 64 65 31 30 32 39 65 34 36 32 37 3a 54 3d 31 37 31 33 35 33 32 33 35 34 3a 52 54 3d 31 37 31 33 35 33 32 33 35 34 3a 53 3d 41 4c 4e 49 5f 4d 59 49 36 6d 73 4f 74 66 45 61 41 65 4a 4b 35 68 51 53 57 30 7a 5f 36 4c 73 46 77 77 22 2c 31 37 34 37 32 32 38 33 35 34 2c 22 2f 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 32 5d 5d 2c 5b 31 33 38 34 34 38 36 36 38 38 38 38 5d 2c 5b 36 33 37 35 32 38 33 31 32 38 5d 2c 5b 34 38 38 38 32 33 35 34 36 34 5d 2c 5b 32 38 35 38 32 38 32 38 33 35 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6b 76 65 44 37 45 4b 45 48 38 75 64 46 4c Data Ascii: 0de1029e4627:T=1713532354:RT=1713532354:S=ALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww",1747228354,"/","justjared.com",2]],[138448668888],[6375283128],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGskveD7EKEH8udFL
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 75 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 76 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 76 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a Data Ascii: var u=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=u,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var v;const da=u.navigator;v=da?da.userAgentData\|\|null:
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 71 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 Data Ascii: ypeof a){var b=typeof a;throw Error(`Expected boolean but got ${"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a};let oa;function pa(a,b){return qa(b)}function qa(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "b
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 47 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 28 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 20 69 6e 20 61 26 26 64 65 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 4c 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 4f 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 61 29 3b 6f 61 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d Data Ascii: ]=void 0);g!==b&&(a[G]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&(a=a[a.length-1],c in a&&delete a[c])}function N(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();return L(a,b,c)};var O=class{constructor(){a:{var a=void 0;null==a&&(a=oa);oa=void 0;if(null=
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 76 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 77 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 3b 63 6f 6e 73 74 20 7a 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 3b 76 61 72 20 51 3d 28 61 2c 62 29 3d 3e 22 26 61 64 75 72 6c 3d 22 3d 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 Data Ascii: his.defaultValue=b;this.valueType="boolean"}};var va=new P("45368259"),wa=new P("45357156",!0),xa=new P("45350890"),ya=new P("45414892");const za=RegExp("ad\\\\.doubleclick\\\\.net/ddm/trackimp");var Q=(a,b)=>"&adurl="==a.substring(a.length-7)?a.substring
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 73 6c 69 63 65 28 30 2c 64 29 2c 65 2c 61 2e 73 6c 69 63 65 28 63 29 5d 2c 63 3d 61 5b 31 5d 2c 61 5b 31 5d 3d 62 3f 63 3f 63 2b 22 26 22 2b 62 3a 62 3a 63 2c 62 3d 61 5b 30 5d 2b 28 61 5b 31 5d 3f 22 3f 22 2b 61 5b 31 5d 3a 22 22 29 2b 61 5b 32 5d 29 3a 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 Data Ascii: slice(0,d),e,a.slice(c)],c=a[1],a[1]=b?c?c+"&"+b:b:c,b=a[0]+(a[1]?"?"+a[1]:"")+a[2]):b=a;return b};function Ha(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{r
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c 75 30 30 30 35 5c 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 53 61 3b 63 6c 61 73 73 20 56 61 7b Data Ascii: ("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.charCodeAt(c)^"\\u0003\\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\u0005\\u0003".charCodeAt(c%10));this.g=JSON.parse(a)}catch(b){}}},Sa;class Va{
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 29 7b 61 26 26 55 26 26 56 28 29 26 26 28 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 64 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 61 7c 7c 75 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 Data Ascii: ndexOf("1337")}return a});function cb(a){a&&U&&V()&&(U.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class db{constructor(){var a=window;this.i=[];this.j=a\|\|u;let b=null;a&&(a.google_js_reporting_que
2024-04-19 13:12:34 UTC	1255	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3a 62 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 6a 2e 6c 65 6e 67 74 68 2d 31 7d 20 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 2c 62 29 7b 6c 65 74 20 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 67 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 29 3b 62 3d 6e 75 6c 6c 3b 6c 65 74 20 65 3d 22 22 3b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 61 2e 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 63 6f 6e 73 74 20 67 3d 61 2e 67 5b 66 5d 2c 70 3d 61 2e 69 5b 67 5d 3b 66 6f 72 28 6c 65 74 20 6b 3d 30 3b Data Ascii: c.length:b;return 3997-b-a.j.length-1} function hb(a,b){let c="https://pagead2.googlesyndication.com"+b,d=gb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g});b=null;let e="";for(let f=0;f<a.g.length;f++){const g=a.g[f],p=a.i[g];for(let k=0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49923	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	960	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	938	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= Date: Fri, 19 Apr 2024 13:12:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 436 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:34 UTC	317	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 67 75 6d 67 75 6d 5f 64 62 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 64 56 39 69 5a 44 63 7a 59 54 6b 34 4e 53 30 7a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0z
2024-04-19 13:12:34 UTC	119	IN	Data Raw: 6e 74 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 25 32 46 75 73 65 72 73 79 6e 63 25 33 46 62 25 33 44 67 64 76 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 74 63 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: nt=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49925	34.95.69.49	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	501	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Fri, 19 Apr 2024 13:12:34 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49922	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	743	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:34 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:34 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49926	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	737	OUT	GET /if.html?gdpr=false&gdprConsent=false&tpd=false&md=false HTTP/1.1 Host: silo40.p7cloud.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	508	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3981 Connection: close Date: Fri, 19 Apr 2024 13:12:35 GMT Last-Modified: Thu, 11 Apr 2024 09:49:19 GMT ETag: "0d8275f5134c453e9cf1b025d8c44355" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 837baeb3003427e58f2f96283f64c760.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: J3wbiWycrQJGsLpsHm1cL31P9f4M2jSGeo015BSWVUvnZa0GUyLS-Q==
2024-04-19 13:12:35 UTC	3981	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 73 69 6c 6f 3d 7b 61 72 63 6f 62 6a 3a 7b 7d 2c 67 64 70 72 3a 21 31 2c 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3a 21 31 2c 64 65 62 75 67 3a 21 31 2c 64 6c 6f 67 3a 74 3d 3e 7b 73 69 6c 6f 2e 64 65 62 75 67 26 26 63 Data Ascii: <!DOCTYPE html> <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> </head> <body> <script> silo={arcobj:{},gdpr:!1,gdpr_consent:!1,debug:!1,dlog:t=>{silo.debug&&c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49914	54.65.26.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	806	OUT	GET /data/channel/v3?cid=3921236&raw=1&web=1&m=20240419&n=92c75641391bc21cf7585973d7d93510&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Access-Token-Secret: sec-ch-ua-mobile: ?0 X-Suid: X-Web: true User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Uid: X-CastBox-UA: localTime=2024-04-19-15-12-30;timeZone=Europe/Zurich;deviceType=web;lang=;countryCode=;uid= X-Access-Token: sec-ch-ua-platform: "Windows" Accept: / Origin: https://castbox.fm Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	615	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json Content-Length: 1781 Connection: close Server: nginx Cache-Control: public, max-age=10800 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://castbox.fm Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test
2024-04-19 13:12:35 UTC	1781	IN	Data Raw: 7b 22 6d 73 67 22 3a 20 22 4f 4b 22 2c 20 22 63 6f 64 65 22 3a 20 30 2c 20 22 64 61 74 61 22 3a 20 7b 22 6e 65 77 5f 63 69 64 22 3a 20 36 30 33 36 30 35 35 2c 20 22 6f 62 73 6f 6c 65 74 65 22 3a 20 22 33 38 37 61 64 31 30 61 65 34 30 31 37 66 31 62 63 33 32 38 63 39 66 33 35 39 66 65 66 33 32 36 33 33 66 63 66 66 65 37 22 2c 20 22 65 70 69 73 6f 64 65 5f 63 6f 75 6e 74 22 3a 20 37 38 2c 20 22 78 5f 70 6c 61 79 5f 62 61 73 65 22 3a 20 30 2c 20 22 73 74 61 74 5f 63 6f 76 65 72 5f 65 78 74 5f 63 6f 6c 6f 72 22 3a 20 74 72 75 65 2c 20 22 6b 65 79 77 6f 72 64 73 22 3a 20 5b 22 4d 75 73 69 63 20 49 6e 74 65 72 76 69 65 77 73 22 2c 20 22 4d 75 73 69 63 22 5d 2c 20 22 63 6f 76 65 72 5f 65 78 74 5f 63 6f 6c 6f 72 22 3a 20 22 2d 31 35 31 37 36 32 37 38 22 2c 20 22 Data Ascii: {"msg": "OK", "code": 0, "data": {"new_cid": 6036055, "obsolete": "387ad10ae4017f1bc328c9f359fef32633fcffe7", "episode_count": 78, "x_play_base": 0, "stat_cover_ext_color": true, "keywords": ["Music Interviews", "Music"], "cover_ext_color": "-15176278", "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49915	54.65.26.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	808	OUT	GET /data/episodes/overview?cids=3921236&web=1&m=20240419&n=667accfeb78aeb12da97930e8573ee61&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Access-Token-Secret: sec-ch-ua-mobile: ?0 X-Suid: X-Web: true User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Uid: X-CastBox-UA: localTime=2024-04-19-15-12-30;timeZone=Europe/Zurich;deviceType=web;lang=;countryCode=;uid= X-Access-Token: sec-ch-ua-platform: "Windows" Accept: / Origin: https://castbox.fm Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json Content-Length: 4836 Connection: close Server: nginx Cache-Control: public, max-age=10 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://castbox.fm Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test
2024-04-19 13:12:35 UTC	4836	IN	Data Raw: 7b 22 6d 73 67 22 3a 20 22 4f 4b 22 2c 20 22 63 6f 64 65 22 3a 20 30 2c 20 22 64 61 74 61 22 3a 20 5b 7b 22 6c 61 74 65 73 74 5f 65 69 64 22 3a 20 35 36 37 30 31 38 32 33 31 2c 20 22 73 6f 72 74 5f 62 79 22 3a 20 22 64 65 66 61 75 6c 74 22 2c 20 22 73 6f 72 74 5f 6f 72 64 65 72 22 3a 20 30 2c 20 22 65 70 69 73 6f 64 65 5f 6c 69 73 74 22 3a 20 5b 7b 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 20 22 32 30 32 33 2d 30 31 2d 33 31 54 30 31 3a 35 30 3a 30 33 5a 22 2c 20 22 65 69 64 22 3a 20 35 36 37 30 31 38 32 33 31 7d 2c 20 7b 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 20 22 32 30 32 33 2d 30 31 2d 31 37 54 30 31 3a 31 36 3a 33 35 5a 22 2c 20 22 65 69 64 22 3a 20 35 36 34 30 33 32 35 30 38 7d 2c 20 7b 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 20 22 32 Data Ascii: {"msg": "OK", "code": 0, "data": [{"latest_eid": 567018231, "sort_by": "default", "sort_order": 0, "episode_list": [{"release_date": "2023-01-31T01:50:03Z", "eid": 567018231}, {"release_date": "2023-01-17T01:16:35Z", "eid": 564032508}, {"release_date": "2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49927	3.222.148.106	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	709	OUT	POST /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 4162 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	4162	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4a 75 73 74 4a 61 72 65 64 5f 52 4f 53 5f 44 5f 54 6f 70 52 69 67 68 74 52 61 69 6c 5f 33 30 30 78 32 35 30 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 31 36 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2e 2a 26 68 6f 6d 65 5f 4d 69 64 5f 52 69 67 68 74 5f 33 30 30 78 46 6c 65 78 5f 49 6e 6e 65 72 52 61 69 6c 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 Data Ascii: {"imp":[{"id":0,"tagid":"JustJared_ROS_D_TopRightRail_300x250","banner":{"format":[{"w":300,"h":600},{"w":300,"h":250},{"w":160,"h":600}]},"fpd":{"context":{"data":{"aupname":".*&home_Mid_Right_300xFlex_InnerRail","adserver":{"name":"gam","adslot":"/21854
2024-04-19 13:12:35 UTC	741	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:35 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None content-length: 19 connection: close
2024-04-19 13:12:35 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49930	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	639	OUT	POST /prebid/multi/6513dc26eb0d65962a567a65 HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1144 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1144	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 35 33 33 30 32 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 22 31 22 2c 22 62 69 64 49 64 22 3a 22 37 39 32 39 64 35 62 64 31 34 65 62 38 65 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 68 6f 6d 65 5f 4d 69 64 5f 52 69 67 68 74 5f 33 30 30 78 46 6c 65 78 5f 49 6e 6e 65 72 52 61 69 6c 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 36 30 30 22 2c 22 33 30 30 78 32 35 30 22 2c 22 31 36 30 78 36 30 30 22 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532353302,"bidFloor":"1","bidId":"7929d5bd14eb8e","referrer":null,"adUnitCode":"home_Mid_Right_300xFlex_InnerRail","publisherId":"65lk7c192882r0011813fn9","sizes":["300x600","300x250","160x600"
2024-04-19 13:12:35 UTC	1258	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=6d37951d-a696-6dac-f4bd-3a7c4ce24d1e; Domain=.kueezrtb.com; Path=/; Expires=Sun, 19 May 2024 13:12:35 GMT; Secure; SameSite=None set-cookie: vdzj1_be32264c=eiB15B2VKx4DFeaeu6qNORAmKgpAKiMXEkdPbVN4cQU3fUpWdHcEAlNBBEZ6dgpgLUEEcHFHTUdDBUYqcgNifEFXd3BXU1RCVRAtIwpmKk8WaGRTUwNAAUkvegozKB0GcnVQA1NMV0F9dAd0Z1oCd3EEV1VFBUAvIQRieU8AcH5TB11MBkBsbhBgeE9VcndWWVZGBkZ5dwpkeEsFIX9TAFNXGlN4cQU3fUhXInIGVQNHV0AsdQQ1fE1WcnBHTUdDBUYvdwpnc0lVJ3BRU1JBAkl4JAEzLUsWaGRTUlIUAxQtJgFle08DcX5XUlZEU0krJAZ0Z1oCd3EEV1QTAkAvIQRieU8AcH5TB10QVBNsbhBgeE0CJnRXUARFAxQocFRuf0lVc3FcWV1XGlN4cQIwf0oGIHRSVwEXVBd5egZjKBoNfCRHPElXVR47LEZ0cUgYZiEBERdXDAozbhAlLgtHLSkLQ19XAUErdQNjeRkZdXZVAEhGBkl%2Fb1AyKksZIHEEVgdAD0F%2FdAs0aVQWJykLDwAWQhghLHsyaUIWcnNdUVFDVRN2cwpvLUBVJ3YAUlJCVxB9YE8%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:35 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:35 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49929	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	639	OUT	POST /prebid/multi/6513dc26eb0d65962a567a65 HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1103 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1103	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 35 33 33 30 33 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 22 31 22 2c 22 62 69 64 49 64 22 3a 22 38 63 37 36 37 33 66 62 63 30 34 32 63 62 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 68 6f 6d 65 5f 54 6f 70 5f 52 69 67 68 74 5f 33 30 30 78 32 35 30 5f 49 6e 6e 65 72 52 61 69 6c 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 30 22 5d 2c 22 75 6e 69 71 75 65 44 65 61 6c 49 64 22 3a 22 5f 31 34 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532353303,"bidFloor":"1","bidId":"8c7673fbc042cb","referrer":null,"adUnitCode":"home_Top_Right_300x250_InnerRail","publisherId":"65lk7c192882r0011813fn9","sizes":["300x250"],"uniqueDealId":"_14
2024-04-19 13:12:35 UTC	1217	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=2d80d361-74c6-d4a1-f21a-3b8208ab010b; Domain=.kueezrtb.com; Path=/; Expires=Sun, 19 May 2024 13:12:35 GMT; Secure; SameSite=None set-cookie: vdzj1_a0c8efe3=tsj12P1XJniGR8Eq5KxMoKxwdKTdKNlMPCxNueVkIcWBadUBUMwdseFldc2oOI0gFZAZ6ZkxfdGVZc0IBNAU7fghbJmNackdWZwdpLlZLa3AOdxcAZwk5clYMJDcKc0IAMgdhK15acWcaaVMDYwY5fF9af2ELdUYCZQlqeV1YImsOJEcXfBNueVkIcWJbI0VWZFdqK18LcGRbckRXZgd6ZkxfdGVZcEkEaAA5KVhddWUMcUkDNgI9LF1La3AOdkZUZVQ7Ll1ad2UPcEkHYwJpL1YMIWYaaVMDYwY5fwsPdmZbcRcHMQA6fVgKcGcMI0cXfBNueVtfJWAKdBAFZVQ%2BeAhRc2NZckYMaAl6ZkxfdGJecUMHNANvfAoLJTQPfUUAM1NhcgxLGn4aJh5APkV6cF5FZTVcNQMXakolZkwaIiFLLB5bcgt6L1pfcmBedkMYNgBofUNYdGcIaEABNAJ1egtRJDYBdUVRMQY7aEJLJD1WKxRWJFg3JCcNZWgac0QEY1U7eFgMJWJcc0QMZgM5f1heJmQNZww%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:35 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:35 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49931	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	639	OUT	POST /prebid/multi/6513dc26eb0d65962a567a65 HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1144 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1144	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 35 33 33 30 33 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 22 31 22 2c 22 62 69 64 49 64 22 3a 22 39 64 63 35 65 30 62 31 33 34 38 38 62 36 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 68 6f 6d 65 5f 42 6f 74 5f 52 69 67 68 74 5f 33 30 30 78 46 6c 65 78 5f 49 6e 6e 65 72 52 61 69 6c 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 31 36 30 78 36 30 30 22 2c 22 33 30 30 78 32 35 30 22 2c 22 33 30 30 78 36 30 30 22 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532353303,"bidFloor":"1","bidId":"9dc5e0b13488b6","referrer":null,"adUnitCode":"home_Bot_Right_300xFlex_InnerRail","publisherId":"65lk7c192882r0011813fn9","sizes":["160x600","300x250","300x600"
2024-04-19 13:12:35 UTC	1264	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=9750ff59-0042-839d-ec6b-20d4789fdd47; Domain=.kueezrtb.com; Path=/; Expires=Sun, 19 May 2024 13:12:35 GMT; Secure; SameSite=None set-cookie: vdzj1_be32264c=Wao15B8eChMpoPz3idC4ORoVIho5HgoiCRFTP2ECcQ8EdVovQF4xGQVdVnQAdgBTJVF9RFhyVhFfV3RQcglRdFEuQ1liSAJeByJXIwBVIl9vXE1mSFVcU3tVegAAIA1%2FRlxlGAVQBXMHdA1Hb0p7Q1gxTANZV3JVIQ5RcV95RFdmHAtQVHIWbhpTcF8sRl5jQgBaVHQDdwBXcFt8FVZmGwVLSGECcQ8EdVguFlszTlVbBXJWdQ4GdF0vRllyVhFfV3RVdwBUe1ksE1lkSARdUHsCJAsAJVtvXE1mSQQIUSZXJgtWc196RVdiSQBYAXtRJAxHb0p7Q1gxTAIPUHJVIQ5RcV95RFdmHAsMBiEWbhpTcF17El1iS1JZUSZScF5dd1ksR1hpQgtLSGECcQgDd1p%2FFF1nTFcLBiUDegxQIAp0SA1yJx9LByxBLExHeVhhUgg0CkFLXjhJbhoWJhs%2BGQA%2BWAlLUSIFdw0Ac1lgQg1hHB4LViUBbwEAe1pgFl1hQ1INXCUFIAhVYURvEwA%2BFFYKECpbLHEBYVJvRlpoSgdfByEMcwBcJVAsE181SQReBSIHYEU%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:35 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:35 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49928	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	639	OUT	POST /prebid/multi/6513dc26eb0d65962a567a65 HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1082	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 35 33 33 30 34 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 22 31 22 2c 22 62 69 64 49 64 22 3a 22 31 30 34 36 64 39 36 61 62 62 63 30 61 37 37 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 68 6f 6d 65 5f 54 6f 70 5f 37 32 38 78 39 30 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 37 32 38 78 39 30 22 5d 2c 22 75 6e 69 71 75 65 44 65 61 6c 49 64 22 3a 22 5f 31 34 31 33 36 32 39 30 34 34 5f 31 37 31 33 35 33 32 33 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532353304,"bidFloor":"1","bidId":"1046d96abbc0a77","referrer":null,"adUnitCode":"home_Top_728x90","publisherId":"65lk7c192882r0011813fn9","sizes":["728x90"],"uniqueDealId":"_1413629044_17135323
2024-04-19 13:12:35 UTC	1253	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=5f2f51a7-e226-bbae-76c9-2d8714f31edc; Domain=.kueezrtb.com; Path=/; Expires=Sun, 19 May 2024 13:12:35 GMT; Secure; SameSite=None set-cookie: vdzj1_a0c8efe3=6YC12ZeWXJXpg4MNFIUcnOTgsHgJGPmx8AUdha305RQEBeX8nOVNjan1sRF8CK3Z0alN1dGhuQ1BQfX9ybVw0a3xqQlYDLi8lO11nOX16XEUCfyhzbV02YHI9EwIGe31zOFNuOXprRlIWYWxwaVI2bnpoQ1ZVLnhyaFJjbHJuFl8NfX9kdkdha305RlYHdX11alJgbXJqQ1QFKHdwO1N1dGhuQ1BVe34lPFE0bCxqEVZWenglbVA1bnx6XEUCfnknb11mYHs5E1EAf3lybl1hPnk9FlQWYWxwaVI2bS87FFQHfXlxb11la3lpFV9RK3pkdkdha305RlZSeX8nOVNjan1sRF8CK3YjOAd1dGhuQ1ICL3x0awRnbS8%2BQgEMeX8nbVJuYHJ6XEUCfn4gbldlPHhvRgNWLyhxYlFiOyhhSAUWEGJkOQoiNj56SlcYbykiKhd1YjElXEVHKD01Mwo5enB6FQZXLn4nY1d6anhoQkoAKXhzdwdiOXt1RFICfitya1dvaH06UksWLiEoNAA0LCM3Hi5Qb3RkbFBmay47QlFRL34ibFBubng5RVEDLHhzeBg%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:35 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:35 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49933	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	513	OUT	OPTIONS /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	726	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Length: 0 Connection: close vary: Origin, Access-Control-Request-Headers access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE access-control-allow-headers: content-type access-control-max-age: 3600 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=m.QiAb1mD.Wh2WR4QKX_xCkuYw7T9SFHAs5aRUB_qwQ-1713532355-1.0.1.1-rmLkyZtCgMgyvB7sg1HZcOTNGZi9WHXWFfJZwIgthDoEP7FdWawvW2.PKfCXNxMxpPde5Y88ODEZx65BJhGeJg; path=/; expires=Fri, 19-Apr-24 13:42:35 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876d25a2fbcd6736-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49934	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	602	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 1785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1785	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 36 31 37 33 2d 37 38 32 31 2d 30 31 22 2c 22 63 6d 70 22 3a 74 72 75 65 2c 22 74 69 6d 65 6f 75 74 22 3a 32 30 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 37 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 35 33 32 38 35 2c 22 74 74 66 62 22 3a 38 34 30 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 32 35 63 33 39 62 37 39 30 38 31 61 32 38 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 3a 22 39 32 66 32 32 34 35 65 2d 61 39 39 34 2d 34 34 61 64 2d 38 61 Data Ascii: {"url":"https://www.justjared.com/","publisherToken":"6173-7821-01","cmp":true,"timeout":2000,"version":"8.37.0","connectionType":"fixed","auctionStart":1713532353285,"ttfb":840,"bidRequests":[{"id":"225c39b79081a28","transactionId":"92f2245e-a994-44ad-8a
2024-04-19 13:12:35 UTC	1065	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 96 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=8ee92083-c137-4675-8eed-05dc4c502afe; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Sat, 19 Apr 2025 13:12:35 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Sun, 19 May 2024 13:12:35 GMT; HttpOnly; Secure; SameSite=None Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:35 UTC	96	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 53 79 6e 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 73 65 65 64 74 61 67 2e 63 6f 6d 2f 63 73 2e 68 74 6d 6c 3f 70 74 3d 36 31 37 33 2d 37 38 32 31 2d 30 31 26 70 63 3d 55 53 26 63 6d 70 3d 74 72 75 65 26 75 73 3d 31 59 4e 4e 22 7d Data Ascii: {"bids":[],"cookieSync":"https://cs.seedtag.com/cs.html?pt=6173-7821-01&pc=US&cmp=true&us=1YNN"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49932	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 3150 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	3150	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 33 35 33 32 33 35 33 33 32 33 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 32 30 38 63 66 63 38 61 33 30 61 34 66 36 22 2c 22 74 61 67 69 64 22 3a 22 32 37 37 38 32 31 37 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2e 2a 26 68 6f 6d 65 5f 4d 69 64 5f 52 69 67 68 74 5f 33 30 30 78 46 6c 65 78 5f 49 6e 6e 65 72 52 61 69 6c 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 72 61 69 6c 2f 68 6f 6d 65 2f Data Ascii: {"id":"1713532353323","at":1,"cur":["USD"],"imp":[{"id":"1208cfc8a30a4f6","tagid":"2778217","secure":1,"ext":{"data":{"aupname":".*&home_Mid_Right_300xFlex_InnerRail","adserver":{"name":"gam","adslot":"/21854935662,22573693114/justjared/desktop/rail/home/
2024-04-19 13:12:35 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 19 Apr 2024 13:12:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49936	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	656	OUT	POST /cdb?profileId=207&av=36&wv=8.37.0&cb=41739420091&lsavail=1 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 3171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	3171	OUT	Data Raw: 7b 22 69 64 22 3a 22 62 30 34 63 30 66 64 61 2d 38 39 35 62 2d 34 34 39 31 2d 61 30 66 63 2d 63 32 32 36 33 61 30 61 38 65 38 32 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 31 30 34 32 33 7d 2c 22 72 65 67 73 22 3a 7b 22 63 6f 70 70 61 22 3a 30 2c 22 65 78 74 22 3a 7b 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 7d 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 33 36 66 35 64 37 35 63 66 35 38 39 35 61 37 22 2c 22 69 6d 70 69 64 22 3a 22 68 6f 6d 65 5f 4d 69 64 5f 52 69 67 68 74 5f 33 30 30 78 46 6c 65 78 5f 49 6e 6e 65 72 52 61 69 6c 22 2c 22 74 72 61 6e 73 Data Ascii: {"id":"b04c0fda-895b-4491-a0fc-c2263a0a8e82","publisher":{"url":"https://www.justjared.com/","networkid":10423},"regs":{"coppa":0,"ext":{"gdpr":0,"us_privacy":"1YNN"}},"slots":[{"slotid":"36f5d75cf5895a7","impid":"home_Mid_Right_300xFlex_InnerRail","trans
2024-04-19 13:12:35 UTC	309	IN	HTTP/1.1 204 No Content date: Fri, 19 Apr 2024 13:12:34 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49937	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	599	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 4040 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	4040	OUT	Data Raw: 7b 22 61 22 3a 22 65 66 64 62 62 37 37 63 2d 34 32 34 61 2d 34 31 35 65 2d 62 30 37 65 2d 37 38 30 31 37 37 62 30 63 66 31 61 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 33 37 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 66 61 6c 73 65 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a 7b 22 67 70 70 53 74 Data Ascii: {"a":"efdbb77c-424a-415e-b07e-780177b0cf1a","B":0,"b":"www.justjared.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.37.0","vg":"pbjs","i":"anVzdGphcmVkLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":false,"gc":"","gpp":{"gppSt
2024-04-19 13:12:35 UTC	891	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, private, must-revalidate content-length: 858 content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:34 GMT server: envoy vary: origin, Accept-Encoding set-cookie: __amc=1_1713532355_1713532355; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:35 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; path=/; domain=a-mo.net; expires=Sat, 19 Apr 2025 13:12:35 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:35 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 90 connection: close
2024-04-19 13:12:35 UTC	858	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 5f 65 3d 43 73 41 42 53 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 56 49 4c 59 57 46 7a 4c 57 51 34 4e 54 51 31 5a 47 4e 61 43 48 42 69 59 54 45 75 4d 79 34 30 61 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 66 6f 42 42 6a 67 75 4d 7a 63 75 4d 4f 67 43 41 59 67 44 77 39 75 4a 73 51 61 6f 41 30 66 71 41 79 52 6c 5a 6d 52 69 59 6a 63 33 59 79 30 30 4d 6a 52 68 4c 54 51 78 4e 57 55 74 59 6a 41 33 5a 53 30 33 4f 44 41 78 4e 7a 64 69 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1YNN&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzcuMOgCAYgDw9uJsQaoA0fqAyRlZmRiYjc3Yy00MjRhLTQxNWUtYjA3ZS03ODAxNzdiM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49938	3.211.198.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:34 UTC	603	OUT	POST /1737/pb HTTP/1.1 Host: ad.360yield.com Connection: keep-alive Content-Length: 1408 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:34 UTC	1408	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2e 2a 26 68 69 67 68 49 6d 70 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 68 69 67 68 5f 69 6d 70 61 63 74 2f 68 6f 6d 65 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 68 69 67 68 5f 69 6d 70 61 63 74 2f 68 6f 6d 65 22 7d 2c 22 74 69 64 22 3a 22 61 33 62 39 65 34 34 61 2d 37 36 37 64 2d 34 37 34 62 2d 61 30 33 61 2d 61 32 30 64 63 33 Data Ascii: {"imp":[{"ext":{"data":{"aupname":".*&highImp","adserver":{"name":"gam","adslot":"/21854935662,22573693114/justjared/desktop/high_impact/home"},"pbadslot":"/21854935662,22573693114/justjared/desktop/high_impact/home"},"tid":"a3b9e44a-767d-474b-a03a-a20dc3
2024-04-19 13:12:35 UTC	558	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: text/plain Connection: close access-control-allow-origin: https://www.justjared.com set-cookie: tuuid=2cd32817-436f-4a0b-8d96-e539ff9a7ea5; Expires=Thu, 18 Jul 2024 13:12:35 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1713532355; Expires=Thu, 18 Jul 2024 13:12:35 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49939	54.175.119.162	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	630	OUT	POST /v/2.0/t/xhr?i=1713532353390 HTTP/1.1 Host: pre.ads.justpremium.com Connection: keep-alive Content-Length: 523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	523	OUT	Data Raw: 7b 22 7a 6f 6e 65 22 3a 5b 38 33 34 38 31 5d 2c 22 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 73 77 22 3a 31 32 38 30 2c 22 73 68 22 3a 31 30 32 34 2c 22 77 77 22 3a 31 32 38 30 2c 22 77 68 22 3a 39 30 37 2c 22 63 22 3a 7b 22 38 33 34 38 31 22 3a 31 7d 2c 22 69 64 22 3a 22 38 33 34 38 31 22 2c 22 73 69 7a 65 73 22 3a 7b 22 38 33 34 38 31 22 3a 5b 5b 31 2c 31 5d 5d 7d 2c 22 67 67 45 78 74 22 3a 6e 75 6c 6c 2c 22 70 75 62 63 69 64 22 3a 22 32 37 65 34 39 31 64 65 2d 30 35 65 61 2d 34 66 35 38 2d 38 34 30 36 2d 65 37 38 61 64 38 65 32 63 39 62 32 22 2c 22 75 69 64 73 22 3a 7b 22 70 75 62 63 69 64 22 3a 22 32 37 65 34 39 31 64 65 2d 30 35 65 61 2d 34 66 35 38 2d 38 34 30 36 2d 65 37 38 Data Ascii: {"zone":[83481],"referer":"https://www.justjared.com/","sw":1280,"sh":1024,"ww":1280,"wh":907,"c":{"83481":1},"id":"83481","sizes":{"83481":[[1,1]]},"ggExt":null,"pubcid":"27e491de-05ea-4f58-8406-e78ad8e2c9b2","uids":{"pubcid":"27e491de-05ea-4f58-8406-e78
2024-04-19 13:12:35 UTC	1837	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: public, no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Content-Encoding: gzip Set-Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; max-age=2592000; expires=Sun May 19 2024 13:12:35 GMT+0000 (Coordinated Universal Time); path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; max-age=86400; expires=Sat Apr 20 2024 13:12:35 GMT+0000 (Coordinated Universal Time); path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_313785=0_0_0; expires=; path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_313787=1_8_0; expires=Fri Apr 19 2024 21:12:35 GMT+0000 (Coordinated Universal Time); path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_313788=1_8_0; expires=Fri Apr 19 2024 21:12:35 GMT+0000 (Coordinated Universal Time); path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_313789=1_8_0; expires=Fri Apr 19 2024 21:12:35 GMT+0000 (Coordinated Universal Time); path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_313795=0_0_0; expires=; path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_453288=0_0_0; expires=; path=/; domain=.justpremium.com; SameSite=None; Secure; Set-Cookie: 83481_454035=1_8_0; expires=Fri Apr 19 2024 21:12:35 GMT+0000 (Coordinated Universal Time); path=/; domain=.justpremium.com; SameSite=None; Secure;
2024-04-19 13:12:35 UTC	69	IN	Data Raw: 33 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ab 56 4a ca 4c 51 b2 aa ae d5 51 2a 48 2c 2e 06 b2 94 2c 8c 4d 2c 0c 95 ac 4a 8a 4a 53 81 a2 29 a9 89 39 c5 50 05 15 40 46 74 6c 2d 00 22 11 14 08 34 00 00 00 0d 0a Data Ascii: 3fVJLQQ*H,.,M,JJS)9P@Ftl-"4
2024-04-19 13:12:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49941	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	1011	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-19 13:12:35 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:35 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49942	151.101.1.229	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	625	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20240419 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1597 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.2030 X-JSD-Version-Type: version ETag: W/"63d-H7r/MAGglW35prF2YAKdt7VA/BQ" Accept-Ranges: bytes Date: Fri, 19 Apr 2024 13:12:35 GMT Age: 33101 X-Served-By: cache-fra-eddf8230103-FRA, cache-pdk-kfty2130069-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 36 3a 30 30 3a 33 35 2e 33 39 38 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 35 34 2e 33 34 30 32 39 34 30 33 35 30 32 32 2c 22 42 47 4e 22 3a 31 2e 38 33 31 34 34 34 38 39 31 38 34 33 38 30 35 35 2c 22 43 5a 4b 22 3a 32 33 2e 36 34 38 32 38 31 36 37 34 33 31 34 30 37 34 2c 22 44 4b 4b 22 3a 36 2e 39 38 37 31 37 31 30 38 33 34 33 34 37 37 38 2c 22 47 42 50 22 3a 30 2e 38 30 31 38 33 35 33 37 37 38 34 34 33 36 37 34 2c 22 48 55 46 22 3a 33 36 38 2e 38 38 32 38 35 34 31 39 39 38 33 31 34 Data Ascii: {"dataAsOf":"2024-04-18T00:00:00.000Z","generatedAt":"2024-04-18T16:00:35.398Z","conversions":{"USD":{"USD":1,"JPY":154.340294035022,"BGN":1.8314448918438055,"CZK":23.648281674314074,"DKK":6.987171083434778,"GBP":0.8018353778443674,"HUF":368.8828541998314
2024-04-19 13:12:35 UTC	219	IN	Data Raw: 52 57 22 3a 31 37 31 33 2e 37 30 33 34 36 31 34 38 34 35 36 31 2c 22 4d 58 4e 22 3a 32 31 2e 31 33 30 39 33 38 34 37 38 30 36 37 39 32 2c 22 4d 59 52 22 3a 35 2e 39 36 35 36 38 38 37 39 33 33 38 35 33 34 31 2c 22 4e 5a 44 22 3a 32 2e 31 30 33 36 33 34 33 32 35 32 32 30 37 32 32 2c 22 50 48 50 22 3a 37 31 2e 33 38 36 36 39 35 39 34 30 35 38 30 31 38 2c 22 53 47 44 22 3a 31 2e 36 39 35 37 30 37 30 31 31 37 32 35 31 33 36 35 2c 22 54 48 42 22 3a 34 35 2e 38 33 38 39 37 37 39 30 34 34 32 33 37 38 2c 22 5a 41 52 22 3a 32 33 2e 37 36 31 30 33 36 31 30 39 36 38 33 37 34 37 2c 22 45 55 52 22 3a 31 2e 31 36 37 38 34 32 32 39 34 35 37 36 35 34 30 33 7d 7d 7d Data Ascii: RW":1713.703461484561,"MXN":21.13093847806792,"MYR":5.965688793385341,"NZD":2.103634325220722,"PHP":71.38669594058018,"SGD":1.6957070117251365,"THB":45.83897790442378,"ZAR":23.761036109683747,"EUR":1.1678422945765403}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49944	34.95.69.49	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	598	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 484 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	484	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 35 33 32 33 35 33 31 35 30 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 35 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 63 38 33 38 33 34 64 62 2d 32 61 35 66 2d 30 36 63 66 2d 62 36 35 34 2d 38 32 65 65 63 33 63 37 63 31 31 37 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 37 2e 31 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 6a 73 74 7a 6f 66 66 73 65 74 Data Ascii: {"action_name":"Events","f":"pageview","jstimestamp":1713532353150,"elapsed_time":25,"action_group_id":"c83834db-2a5f-06cf-b654-82eec3c7c117","version":"4.27.1","topLocation":"https://www.justjared.com/","referrer":"https://www.justjared.com/","jstzoffset
2024-04-19 13:12:35 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49946	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	535	OUT	GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Fri, 19 Apr 2024 13:12:34 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 255860 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:35 UTC	57	IN	Data Raw: 32 45 0d 0a 54 52 43 2e 67 65 74 52 54 55 53 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ETRC.getRTUS({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49948	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	1294	OUT	GET /pcs/view?xai=AKAOjssztw9ZVvoGFptdeR10bYUzk_EccIfJes2mzOa77nY41VSf6N5tcEQSfNSdZ8U8ATbj_jl2BbBoNI5yfoZer0UzsP-VvPU4cKCY4m9iWJdrEuJrhsrV0DmwxYNIO9hgmwnToqdhI9UA2DNgmzew09zbi8We-hygmHAg8klPoEl2pOp3fqfWiU66sZqmeFeBsLt8v9B72iL0wuKOuuWMPGjjgbyuNIWenU-WpZWXTj1yWrZRP_NpbEJ_zS8Cp1iz2JUGZ-hDxDL7USrO60o99Qtp5a0DfSFSXGGZWsFUEcgkziOzKrvnJON2ey3axDLjPksxOG1faiXJ3G-KeK9dIqkwOaUZpPnXOEX_WhcvpICOKPvIp0l-MOnrztSWJnQt5BQ&sai=AMfl-YTR1o9fNzxNqQ2pqIJ-RT_ePTgquLGb3m1Qt0dQ9YB4VSu6mBkuuAorKR6OyOPpbe7NH7UkEpkLSiwVnUfvFXX62VcY2DwMLAckvXoQyPCbOSg6x9YCQxmtYPPqXR3u5v84129cstANQdT2Ef0oCp00&sig=Cg0ArKJSzJzoKOOjfT4fEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-19 13:12:35 UTC	1153	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:35 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkfUXfAgk2cPDbZ-TMgAXq7ZTnZS4UYZ9b4Y7yq9u9lKpjBInvolzoX3VAfHAg; expires=Sun, 19-Apr-2026 13:12:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49949	151.101.193.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	543	OUT	GET /libtrc/impl.20240418-18-RELEASE.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	773	IN	HTTP/1.1 200 OK Connection: close Content-Length: 914898 x-amz-id-2: wsVnPDSLKLs3nHaSfyfM7UDUA4Vs2+EK4sjkEakkylV+j25Di3JfXcCQi+2jdyYHorOHz/2e7Do= x-amz-request-id: EADKWNNJAP006Q19 x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 11:35:34 GMT ETag: "5c1cf7a9408fb79e414fc2a617f05b05" x-amz-server-side-encryption: AES256 x-amz-version-id: q.QMz34F1P9JSxPCVUWVfUDE8j.kRflQ Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 13:12:35 GMT Via: 1.1 varnish Age: 88 X-Served-By: cache-pdk-kfty2130031-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713532355.435277,VS0,VE3 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 48 Access-Control-Allow-Origin: *
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 34 31 38 2d 31 38 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 52 43 3d 65 2e 54 52 43 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 7c 7c 7b 7d 7d 28 77 69 6e 64 6f 77 29 2c 66 75 6e Data Ascii: /! 20240418-18-RELEASE /!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),fun
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 2e 73 74 6f 70 45 76 65 6e 74 28 69 29 2c 63 7c 7c 68 28 29 3b 63 6f 6e 73 74 20 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 62 6c 45 6e 61 62 6c 65 73 53 63 72 6f 6c 6c 69 6e 67 22 29 3b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 28 6f 2e 68 72 65 66 2c 6e 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6c 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 6b 65 79 75 70 22 2c 6d 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 63 6c 69 63 6b 22 2c 67 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 72 63 5f 63 6c 6f 73 65 5f 6d 6f 64 Data Ascii: .stopEvent(i),c\|\|h();const n=o.getAttribute("tblEnablesScrolling");s.innerHTML=f(o.href,n),r.dom.removeClass(l,"trc_modal_hidden"),r.dom.removeClass(s,"trc_modal_hidden"),r.dom.on(t,"keyup",m),r.dom.on(t,"click",g),r.dom.on(t.getElementById("trc_close_mod
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 73 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 23 30 30 30 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 Data Ascii: se { font-family: sans-serif !important; width: 30px !important; height: 30px !important; font-size: 30px !important; font-weight: bold !important; line-height: 28px !important; color: #fff !important; text-shadow: 0 1px 0 #000; opacity: 0.9; filter: alph
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 63 6b 50 6c 75 73 20 64 65 74 65 63 74 65 64 20 6f 6e 20 64 69 76 20 77 69 74 68 20 63 6c 61 73 73 3a 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 21 30 29 7d 2c 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 43 6c 61 73 73 4e 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 65 5b 74 5d 29 7b 69 3d 74 68 69 73 2e 63 72 65 61 74 65 42 6c 6f 63 6b 44 65 74 65 63 74 69 6f 6e 44 69 76 28 65 5b 74 5d 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 44 69 76 28 69 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 54 52 43 2e 70 43 6f 6e 73 6f 6c 65 28 22 70 61 67 65 22 2c 22 65 72 72 6f Data Ascii: ckPlus detected on div with class: "+e.className),!0)},isBlockDetectedOnClassNames:function(e){var t,r=e.length,i;for(t=0;t<r;t++)if(e[t]){i=this.createBlockDetectionDiv(e[t]);try{if(this.isBlockDetectedOnDiv(i))return!0}catch(e){TRC.pConsole("page","erro
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 61 64 64 28 22 74 62 6c 2d 61 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 54 52 43 2e 65 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 73 75 62 73 63 72 69 62 65 28 22 6f 6e 72 65 6e 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 64 3d 7b 6e 65 67 61 74 69 76 65 3a 6e 2c 70 6f 73 69 74 69 76 65 3a 61 7d 3b 69 66 28 21 63 28 74 29 7c 7c 6c 29 72 65 74 75 72 6e 21 31 3b 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 21 28 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 7c 7c 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 2e 69 73 46 65 65 64 43 61 72 64 29 29 2c 72 3f 28 65 2e 67 65 74 41 4d 50 43 6f 6e 74 61 69 6e 65 72 28 29 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 73 74 61 74 69 Data Ascii: add("tbl-amp-container"),TRC.eventDelegator.subscribe("onrender",function(t){var d={negative:n,positive:a};if(!c(t)\|\|l)return!1;null===r&&(r=!(!t.container.placementData\|\|!t.container.placementData.isFeedCard)),r?(e.getAMPContainer().style.position="stati
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 31 2c 4d 4f 44 55 4c 45 5f 4e 41 4d 45 3a 60 24 7b 50 52 45 46 49 58 24 31 7d 2d 24 7b 4d 4f 44 55 4c 45 24 31 7d 60 2c 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 2c 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 24 31 2c 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 24 31 2c 46 4f 52 43 45 5f 50 41 52 41 4d 3a 53 48 4f 52 54 5f 4e 41 4d 45 24 31 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 3a 22 74 72 63 5f 62 6c 6f 63 6b 5f 63 6c 69 63 6b 73 22 2c 53 55 50 50 4c 59 5f 46 45 41 54 55 52 45 3a 7b 54 59 50 45 3a 22 63 6c 69 63 6b 62 6c 6f 63 6b 65 64 22 2c 53 54 41 54 45 Data Ascii: 1,MODULE_NAME:`${PREFIX$1}-${MODULE$1}`,GLOBAL_PREFIX:GLOBAL_PREFIX,GLOBAL_FRAUD_PREFIX:GLOBAL_FRAUD_PREFIX$1,GLOBAL_DEFAULT_PREFIX:GLOBAL_DEFAULT_PREFIX$1,FORCE_PARAM:SHORT_NAME$1,EMULATE_PARAM:"trc_block_clicks",SUPPLY_FEATURE:{TYPE:"clickblocked",STATE
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 75 72 65 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 28 65 29 7c 7c 21 74 7c 7c 21 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 29 72 65 74 75 72 6e 3b 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 7d 7d 73 74 61 74 69 63 20 67 65 74 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 65 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3b 69 66 28 72 29 72 65 74 75 72 6e Data Ascii: urements.isEnabled(e)\|\|!t\|\|!t.appearanceTime)return;t.appearanceTime=null}catch(e){__trcError(`Error in ItemMeasurements.clearAppearanceTime - ${e.message}`,e)}}static getAppearanceTime(e,t){const r=e&&e.video_data&&e.video_data.appearanceTime;if(r)return
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 6c 69 63 6b 54 69 6d 65 28 72 2c 69 2c 6f 29 2c 61 3d 60 24 7b 74 7d 26 76 63 74 3d 24 7b 6e 7d 60 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 75 6c 64 49 67 6e 6f 72 65 4c 6f 67 67 65 72 55 72 6c 50 72 65 66 69 78 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3f 74 3a 61 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 61 64 64 56 69 73 69 62 6c 65 54 6f 43 6c 69 63 6b 54 69 6d 65 54 6f 50 61 72 61 6d 55 52 4c 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 2c 74 7d 7d 7d 54 52 43 2e 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3d 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3b 63 6f 6e 73 74 7b 53 4f 55 52 43 45 5f 43 4f 4e 46 49 Data Ascii: lickTime(r,i,o),a=`${t}&vct=${n}`;return this.shouldIgnoreLoggerUrlPrefix(e,a.length)?t:a}catch(e){return __trcError(`Error in ItemMeasurements.addVisibleToClickTimeToParamURL - ${e.message}`,e),t}}}TRC.ItemMeasurements=ItemMeasurements;const{SOURCE_CONFI
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 67 43 6c 69 63 6b 44 65 6c 61 79 3a 74 68 69 73 2e 67 65 74 42 6c 6f 63 6b 46 61 73 74 43 6c 69 63 6b 73 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 4b 45 59 53 2e 52 45 43 55 52 52 49 4e 47 5f 4b 45 59 29 7d 7d 73 74 61 74 69 63 20 67 65 74 42 6c 6f 63 6b 43 6c 69 63 6b 73 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 72 63 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 54 52 43 2e 55 52 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 2e 63 61 6c 6c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 29 2c 69 3d 72 7c 7c 74 2e 74 72 63 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 41 43 54 49 4f 4e 5d 3b 69 26 26 28 65 2e 42 43 41 Data Ascii: gClickDelay:this.getBlockFastClicksTimeoutInMilliseconds(KEYS.RECURRING_KEY)}}static getBlockClicksFromResponse(t){if(!t\|\|!t.trc)return;const r=TRC.URL.prototype.getParameter.call(location.href,EMULATE_PARAM),i=r\|\|t.trc[KEYS.BLOCK_CLICKS_ACTION];i&&(e.BCA
2024-04-19 13:12:35 UTC	1378	IN	Data Raw: 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 44 45 46 41 55 4c 54 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 74 61 74 69 63 20 69 73 42 6c 6f 63 6b 43 6c 69 63 6b 73 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 42 43 41 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 44 49 53 41 42 4c 45 44 5d 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 46 61 6c 73 65 28 74 29 7d 63 68 65 63 6b 49 73 46 72 61 75 64 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 7b 67 6c 6f 62 61 6c 3a 65 7d 3d 74 68 69 73 2e 74 72 63 4d 61 6e 61 67 65 72 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 46 52 41 55 44 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 65 6e 64 42 6c Data Ascii: True(e[GLOBAL_KEYS.DEFAULT_ENABLED])}static isBlockClicksActionEnabled(){const t=e.BCA[KEYS.BLOCK_CLICKS_DISABLED];return TRC.util.isFalse(t)}checkIsFraudEnabled(){const{global:e}=this.trcManager;return TRC.util.isTrue(e[GLOBAL_KEYS.FRAUD_ENABLED])}sendBl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49947	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	916	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	930	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Length: 0 Connection: close x-amz-rid: KWSYCWFVRKBY85VMPD69 Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49951	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	611	OUT	POST /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Content-Length: 2082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	2082	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 36 61 38 38 65 32 38 30 62 35 66 32 37 31 22 2c 22 74 6d 61 78 22 3a 32 30 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 66 64 22 3a 31 2c 22 74 69 64 22 3a 22 33 39 61 30 31 34 36 32 2d 63 34 33 32 2d 34 37 34 63 2d 61 63 66 64 2d 61 36 35 63 64 37 66 63 31 66 36 64 22 2c 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 65 64 69 61 74 72 61 64 65 63 72 61 66 74 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 31 31 31 31 31 31 22 2c 22 68 70 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 54 72 61 64 65 63 72 61 66 74 20 4c 4c 43 20 64 62 61 20 4d 65 64 69 61 20 54 72 61 64 65 63 72 61 66 74 22 2c 22 72 69 64 22 3a 22 31 36 61 Data Ascii: {"id":"16a88e280b5f271","tmax":2000,"source":{"fd":1,"tid":"39a01462-c432-474c-acfd-a65cd7fc1f6d","ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mediatradecraft.com","sid":"111111","hp":1,"name":"Tradecraft LLC dba Media Tradecraft","rid":"16a
2024-04-19 13:12:35 UTC	599	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 880 Connection: close vary: Origin access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=P09.Oh.Aw2fd1rdeIoh4IrOrsmIQKdY1_qhMSIx.uEk-1713532355-1.0.1.1-AFw4v1fK_FLuL2wt4_xbHaU.anOvLFUcwKOCttva4_Ogrcv3f820MH.4.bvON5ArG02mBZZQY5p34KaTobK8BQ; path=/; expires=Fri, 19-Apr-24 13:42:35 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876d25a55c3f1396-ATL
2024-04-19 13:12:35 UTC	770	IN	Data Raw: 7b 22 69 64 22 3a 22 31 36 61 38 38 65 32 38 30 62 35 66 32 37 31 22 2c 22 62 69 64 69 64 22 3a 22 30 31 48 56 56 37 53 48 36 31 46 50 32 50 47 4d 47 45 43 54 58 42 32 38 45 38 22 2c 22 6e 62 72 22 3a 30 2c 22 65 78 74 22 3a 7b 22 73 79 6e 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 72 75 62 69 63 6f 6e 3f 75 73 65 72 49 64 3d 38 34 30 30 37 63 32 61 2d 64 33 31 66 2d 34 32 35 61 2d 62 35 65 33 2d 61 31 36 30 38 38 65 64 31 36 30 38 26 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 25 32 46 75 74 69 6c 73 25 32 46 Data Ascii: {"id":"16a88e280b5f271","bidid":"01HVV7SH61FP2PGMGECTXB28E8","nbr":0,"ext":{"sync":[{"type":"iframe","url":"https://cs.ingage.tech/v1/syncPage/rubicon?userId=84007c2a-d31f-425a-b5e3-a16088ed1608&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2F
2024-04-19 13:12:35 UTC	110	IN	Data Raw: 25 32 46 76 31 25 32 46 73 79 6e 63 25 32 46 61 64 66 6f 72 6d 25 32 46 38 34 30 30 37 63 32 61 2d 64 33 31 66 2d 34 32 35 61 2d 62 35 65 33 2d 61 31 36 30 38 38 65 64 31 36 30 38 25 33 46 75 69 64 25 33 44 25 32 34 55 49 44 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 26 67 64 70 72 3d 31 22 7d 5d 7d 7d Data Ascii: %2Fv1%2Fsync%2Fadform%2F84007c2a-d31f-425a-b5e3-a16088ed1608%3Fuid%3D%24UID&gdpr_consent=undefined&gdpr=1"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49953	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	656	OUT	POST /cdb?profileId=207&av=36&wv=8.37.0&cb=58523161363&lsavail=1 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 1710 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	1710	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 61 34 34 37 65 32 31 2d 39 32 30 34 2d 34 38 65 32 2d 38 34 36 30 2d 34 33 66 35 37 37 39 37 32 32 37 38 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 31 30 34 32 33 7d 2c 22 72 65 67 73 22 3a 7b 22 63 6f 70 70 61 22 3a 30 2c 22 65 78 74 22 3a 7b 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 7d 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 35 33 37 36 38 31 30 32 33 38 33 37 64 66 35 22 2c 22 69 6d 70 69 64 22 3a 22 68 6f 6d 65 5f 49 6e 43 6f 6e 74 65 6e 74 31 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 69 64 22 3a 22 32 63 36 35 32 38 62 Data Ascii: {"id":"6a447e21-9204-48e2-8460-43f577972278","publisher":{"url":"https://www.justjared.com/","networkid":10423},"regs":{"coppa":0,"ext":{"gdpr":0,"us_privacy":"1YNN"}},"slots":[{"slotid":"537681023837df5","impid":"home_InContent1","transactionid":"2c6528b
2024-04-19 13:12:35 UTC	309	IN	HTTP/1.1 204 No Content date: Fri, 19 Apr 2024 13:12:35 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49958	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	601	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 702 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	702	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 36 31 37 33 2d 37 38 32 31 2d 30 31 22 2c 22 63 6d 70 22 3a 74 72 75 65 2c 22 74 69 6d 65 6f 75 74 22 3a 32 30 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 37 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 35 33 33 39 33 2c 22 74 74 66 62 22 3a 38 34 30 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 36 35 34 64 35 37 35 39 36 33 34 30 66 37 37 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 3a 22 32 63 36 35 32 38 62 64 2d 66 38 39 33 2d 34 37 39 35 2d 38 39 Data Ascii: {"url":"https://www.justjared.com/","publisherToken":"6173-7821-01","cmp":true,"timeout":2000,"version":"8.37.0","connectionType":"fixed","auctionStart":1713532353393,"ttfb":840,"bidRequests":[{"id":"654d57596340f77","transactionId":"2c6528bd-f893-4795-89
2024-04-19 13:12:36 UTC	1065	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 96 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=53a4a572-fc56-446e-bfa3-4768d942056e; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Sat, 19 Apr 2025 13:12:35 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Sun, 19 May 2024 13:12:35 GMT; HttpOnly; Secure; SameSite=None Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:36 UTC	96	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 53 79 6e 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 73 65 65 64 74 61 67 2e 63 6f 6d 2f 63 73 2e 68 74 6d 6c 3f 70 74 3d 36 31 37 33 2d 37 38 32 31 2d 30 31 26 70 63 3d 55 53 26 63 6d 70 3d 74 72 75 65 26 75 73 3d 31 59 4e 4e 22 7d Data Ascii: {"bids":[],"cookieSync":"https://cs.seedtag.com/cs.html?pt=6173-7821-01&pc=US&cmp=true&us=1YNN"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49959	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	611	OUT	POST /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Content-Length: 1280 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	1280	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 38 63 31 37 30 61 37 61 65 62 63 61 37 35 22 2c 22 74 6d 61 78 22 3a 32 30 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 66 64 22 3a 31 2c 22 74 69 64 22 3a 22 65 35 39 36 38 64 66 38 2d 66 36 61 65 2d 34 35 30 61 2d 62 30 37 36 2d 37 61 39 39 36 32 61 66 35 61 61 38 22 2c 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 65 64 69 61 74 72 61 64 65 63 72 61 66 74 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 31 31 31 31 31 31 22 2c 22 68 70 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 54 72 61 64 65 63 72 61 66 74 20 4c 4c 43 20 64 62 61 20 4d 65 64 69 61 20 54 72 61 64 65 63 72 61 66 74 22 2c 22 72 69 64 22 3a 22 36 38 63 Data Ascii: {"id":"68c170a7aebca75","tmax":2000,"source":{"fd":1,"tid":"e5968df8-f6ae-450a-b076-7a9962af5aa8","ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mediatradecraft.com","sid":"111111","hp":1,"name":"Tradecraft LLC dba Media Tradecraft","rid":"68c
2024-04-19 13:12:35 UTC	599	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 880 Connection: close vary: Origin access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w; path=/; expires=Fri, 19-Apr-24 13:42:35 GMT; domain=.ingage.tech; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876d25a67fa069f7-ATL
2024-04-19 13:12:35 UTC	770	IN	Data Raw: 7b 22 69 64 22 3a 22 36 38 63 31 37 30 61 37 61 65 62 63 61 37 35 22 2c 22 62 69 64 69 64 22 3a 22 30 31 48 56 56 37 53 48 42 52 48 47 57 50 59 51 34 37 36 5a 38 43 59 42 31 39 22 2c 22 6e 62 72 22 3a 30 2c 22 65 78 74 22 3a 7b 22 73 79 6e 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 72 75 62 69 63 6f 6e 3f 75 73 65 72 49 64 3d 30 32 63 30 64 31 35 38 2d 34 31 61 65 2d 34 39 63 33 2d 38 33 30 35 2d 64 36 61 65 61 36 62 34 32 65 65 66 26 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 25 32 46 75 74 69 6c 73 25 32 46 Data Ascii: {"id":"68c170a7aebca75","bidid":"01HVV7SHBRHGWPYQ476Z8CYB19","nbr":0,"ext":{"sync":[{"type":"iframe","url":"https://cs.ingage.tech/v1/syncPage/rubicon?userId=02c0d158-41ae-49c3-8305-d6aea6b42eef&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2F
2024-04-19 13:12:35 UTC	110	IN	Data Raw: 25 32 46 76 31 25 32 46 73 79 6e 63 25 32 46 61 64 66 6f 72 6d 25 32 46 30 32 63 30 64 31 35 38 2d 34 31 61 65 2d 34 39 63 33 2d 38 33 30 35 2d 64 36 61 65 61 36 62 34 32 65 65 66 25 33 46 75 69 64 25 33 44 25 32 34 55 49 44 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 26 67 64 70 72 3d 31 22 7d 5d 7d 7d Data Ascii: %2Fv1%2Fsync%2Fadform%2F02c0d158-41ae-49c3-8305-d6aea6b42eef%3Fuid%3D%24UID&gdpr_consent=undefined&gdpr=1"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49952	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	1260	OUT	POST /prebid/multi/6513dc26eb0d65962a567a65 HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=2d80d361-74c6-d4a1-f21a-3b8208ab010b; vdzj1_a0c8efe3=tsj12P1XJniGR8Eq5KxMoKxwdKTdKNlMPCxNueVkIcWBadUBUMwdseFldc2oOI0gFZAZ6ZkxfdGVZc0IBNAU7fghbJmNackdWZwdpLlZLa3AOdxcAZwk5clYMJDcKc0IAMgdhK15acWcaaVMDYwY5fF9af2ELdUYCZQlqeV1YImsOJEcXfBNueVkIcWJbI0VWZFdqK18LcGRbckRXZgd6ZkxfdGVZcEkEaAA5KVhddWUMcUkDNgI9LF1La3AOdkZUZVQ7Ll1ad2UPcEkHYwJpL1YMIWYaaVMDYwY5fwsPdmZbcRcHMQA6fVgKcGcMI0cXfBNueVtfJWAKdBAFZVQ%2BeAhRc2NZckYMaAl6ZkxfdGJecUMHNANvfAoLJTQPfUUAM1NhcgxLGn4aJh5APkV6cF5FZTVcNQMXakolZkwaIiFLLB5bcgt6L1pfcmBedkMYNgBofUNYdGcIaEABNAJ1egtRJDYBdUVRMQY7aEJLJD1WKxRWJFg3JCcNZWgac0QEY1U7eFgMJWJcc0QMZgM5f1heJmQNZww%3D
2024-04-19 13:12:35 UTC	1092	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 35 34 31 33 36 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 22 31 22 2c 22 62 69 64 49 64 22 3a 22 35 31 61 61 31 66 30 30 61 63 63 64 62 63 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 68 6f 6d 65 5f 49 6e 43 6f 6e 74 65 6e 74 31 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 30 22 5d 2c 22 75 6e 69 71 75 65 44 65 61 6c 49 64 22 3a 22 5f 31 34 31 33 36 32 39 30 34 34 5f 31 37 31 33 35 33 32 33 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532354136,"bidFloor":"1","bidId":"51aa1f00accdbc","referrer":null,"adUnitCode":"home_InContent1","publisherId":"65lk7c192882r0011813fn9","sizes":["300x250"],"uniqueDealId":"_1413629044_17135323
2024-04-19 13:12:35 UTC	1176	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_a0c8efe3=2RI12ROiiFoxOeSyOKW0ZCDQbFioXIFt1CW1fWnEOTn0HY0guMXldW3FbTHdTNUB%2FZnhLRWRZS3gBY0h7ZXYKWnBdSn5SMBgsM3dZCHFNVG1TYR96ZXcIUX4KGypXZUp6MHlQCHZcTnpHf1t5YXgIX3ZfS34EME97YHhdXX5ZHndcY0htfm1fWnEOTn5Wa0p8YnheXH5dS3xUNkB5M3lLRWRZS3gEZUksNHsKXSBdGX4HZE8sZXoLX3BNVG1TYE4uZ3dYUXcOG3lRYU57ZndfD3UKHnxHf1t5YXgIXCMMHHxWY054Z3dbWnVeHXcANU1tfm1fWnEOTn4DZ0guMXldW3FbTHdTNUEqMC1LRWRZS3pTMUt9Yy5ZXCMJSildZ0guZXhQUX5NVG1TYEkpZn1bDXRYTisHMR94antcCiRWQC1Hf1t5YXgIX3VbHHsGZx99M34LXnAMT3lUN0Ftfm1fWnEOTSoDYk0sZilbCHcNT3kGZEx7NHlLNGpNGyAQPQ1taH9FSyELCD1HaQIyfm0aDDUcESALcUNtN3tfXHQJS31INUh%2FZWJYWnNfVX5RN0piYipRCiJWSHsBMk4scGNLCikBFioGJxAgPAYNS3xNTnpUYB0sYHkMC3YLTnpcZUsuZ3leCHBaWjI%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:35 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:35 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49955	3.222.148.106	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	777	OUT	POST /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 1823 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906
2024-04-19 13:12:35 UTC	1823	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4a 75 73 74 4a 61 72 65 64 5f 48 6f 6d 65 70 61 67 65 5f 44 5f 49 6e 46 65 65 64 5f 33 30 30 78 32 35 30 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2e 2a 26 68 6f 6d 65 5f 69 6e 63 6f 6e 74 65 6e 74 2e 2a 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 69 6e 63 6f 6e 74 65 6e 74 2f 68 6f 6d 65 2f 31 22 Data Ascii: {"imp":[{"id":0,"tagid":"JustJared_Homepage_D_InFeed_300x250","banner":{"format":[{"w":300,"h":250}]},"fpd":{"context":{"data":{"aupname":".&home_incontent.","adserver":{"name":"gam","adslot":"/21854935662,22573693114/justjared/desktop/incontent/home/1"
2024-04-19 13:12:36 UTC	741	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:35 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None content-length: 19 connection: close
2024-04-19 13:12:36 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49956	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1627 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	1627	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 33 35 33 32 33 35 34 31 35 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 36 31 30 63 61 64 65 34 30 38 61 63 64 61 34 22 2c 22 74 61 67 69 64 22 3a 22 32 37 37 38 32 32 34 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2e 2a 26 68 6f 6d 65 5f 69 6e 63 6f 6e 74 65 6e 74 2e 2a 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 69 6e 63 6f 6e 74 65 6e 74 2f 68 6f 6d 65 2f 31 22 7d 2c 22 70 62 61 64 73 6c 6f Data Ascii: {"id":"1713532354151","at":1,"cur":["USD"],"imp":[{"id":"610cade408acda4","tagid":"2778224","secure":1,"ext":{"data":{"aupname":".&home_incontent.","adserver":{"name":"gam","adslot":"/21854935662,22573693114/justjared/desktop/incontent/home/1"},"pbadslo
2024-04-19 13:12:35 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 19 Apr 2024 13:12:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49957	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	731	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 1964 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1713532355_1713532355; amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0
2024-04-19 13:12:35 UTC	1964	OUT	Data Raw: 7b 22 61 22 3a 22 30 61 39 33 36 61 36 63 2d 38 30 34 36 2d 34 64 65 34 2d 39 30 64 63 2d 35 63 62 37 35 61 63 62 62 64 35 65 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 33 37 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 66 61 6c 73 65 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a 7b 22 67 70 70 53 74 Data Ascii: {"a":"0a936a6c-8046-4de4-90dc-5cb75acbbd5e","B":0,"b":"www.justjared.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.37.0","vg":"pbjs","i":"anVzdGphcmVkLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":false,"gc":"","gpp":{"gppSt
2024-04-19 13:12:36 UTC	538	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, private, must-revalidate content-length: 858 content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:35 GMT server: envoy vary: origin, Accept-Encoding set-cookie: __amc=2_1713532355_1713532355; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:36 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 271 connection: close
2024-04-19 13:12:36 UTC	858	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 5f 65 3d 43 73 41 42 53 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 56 49 4c 59 57 46 7a 4c 57 51 34 4e 54 51 31 5a 47 4e 61 43 48 42 69 59 54 45 75 4d 79 34 30 61 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 66 6f 42 42 6a 67 75 4d 7a 63 75 4d 4f 67 43 41 59 67 44 77 39 75 4a 73 51 61 6f 41 30 66 71 41 79 51 77 59 54 6b 7a 4e 6d 45 32 59 79 30 34 4d 44 51 32 4c 54 52 6b 5a 54 51 74 4f 54 42 6b 59 79 30 31 59 32 49 33 4e 57 46 6a 59 Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1YNN&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzcuMOgCAYgDw9uJsQaoA0fqAyQwYTkzNmE2Yy04MDQ2LTRkZTQtOTBkYy01Y2I3NWFjY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49962	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	2816	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=581348282174153&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Chigh_impact%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=1x1&ifi=2&didk=461368580&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354220&lmt=1713532038&adxs=155&adys=8499&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=18x18&msz=0x0&fws=4&ohw=18&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3DhighImpactDFP%26pos%3DhighImpactDFP%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=829439793&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-19 13:12:35 UTC	1199	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A; expires=Sun, 19-Apr-2026 13:12:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:35 UTC	56	IN	Data Raw: 31 61 39 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 68 69 67 68 5f 69 6d 70 61 63 74 2f 68 6f 6d 65 22 3a Data Ascii: 1a9{"/21854935662/justjared/desktop/high_impact/home":
2024-04-19 13:12:35 UTC	376	IN	Data Raw: 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 30 2c 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 4a 79 49 67 72 75 74 7a 6f 55 44 46 61 62 76 4b 41 55 64 5f 66 59 44 6f 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: ["html",0,null,null,0,0,0,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CJyIgrutzoUDFabvKAUd_fYDog",null,null,null,null,null,null,null,null,null,null,nul
2024-04-19 13:12:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49967	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	963	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0\|t
2024-04-19 13:12:36 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 463 Connection: close x-amz-rid: 8NQCK98WGVKZ06BST8P0 Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:36 UTC	463	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 67 67 5f 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 69 6e 64 65 78 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 6e 2d 4f 67 75 72 79 5f 73 6e 62 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 73 6d 72 74 5f 6e 2d 54 61 70 70 78 5f 63 6e 76 5f 6e 2d 73 6d 61 61 74 6f Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49966	31.13.66.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	906	OUT	GET /tr/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:35 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=117, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 13:12:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49965	31.13.66.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	1016	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:36 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 13:12:36 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 13:12:36 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-19 13:12:36 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-19 13:12:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49964	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	801	OUT	GET /usersync?b=adf&i=1045438816811072924&gdpr=0&gdpr_consent= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:35 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:35 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:35 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49961	54.65.26.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:35 UTC	884	OUT	OPTIONS /data/episode_list/v2?cid=3921236&eids=567018231%2C564032508%2C553681366%2C548039517%2C544843609%2C544583019%2C542830300%2C537719976%2C532957961%2C528241106%2C522708940%2C518691930%2C514502604%2C512792695%2C504436661%2C502372444%2C500147724%2C497914708%2C495593596%2C493582438&raw=1&web=1&m=20240419&n=b9bfd31ff99871909a72499e059ffbbd&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web Origin: https://castbox.fm User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:36 UTC	609	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Allow: HEAD, OPTIONS, GET X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://castbox.fm Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49968	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:36 UTC	3964	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=3333872983477502&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Crail%2Chome%2C2%2C1%2C3%2Ctop&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F8%2F4&prev_iu_szs=320x50%7C300x600%7C300x250%7C160x600%2C320x50%7C300x250%2C320x50%7C160x600%7C300x250%7C300x600%2C728x90&fluid=height%2Cheight%2Cheight%2C0&ifi=3&didk=4152496204~1812581917~2418314740~3894687449&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354753&lmt=1713532038&adxs=812%2C812%2C812%2C268&adys=1511%2C564%2C3374%2C365&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3%7C0%7C4%7C0&ucis=3%7C4%7C5%7C6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x800%7C300x403%7C300x600%7C1000x184&msz=300x800%7C300x250%7C300x600%7C728x90&fws=4%2C4%2C4%2C0&ohw=300%2C300%2C300%2C0&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_Mid_Right_300xFlex_InnerRail%26pos%3Dhome_Mid_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_Right_300x250_InnerRail%26pos%3Dhome_Top_Right_300x250_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%26hb_format_rubicon%3Dbanner%26hb_size_rubicon%3D300x250%26hb_pb_rubicon%3D0.06%26hb_adid_rubicon%3D7038d15946e9bf6%26hb_bidder_rubicon%3Drubicon%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.06%26hb_adid%3D7038d15946e9bf6%26hb_bidder%3Drubicon%7CdivID%3Dhome_Bot_Right_300xFlex_InnerRail%26pos%3Dhome_Bot_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_728x90%26pos%3Dhome_Top_728x90%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=2076731111%2C4110530880%2C3132801048%2C629776701&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkfUXfAgk2cPDbZ-TMgAXq7ZTnZS4UYZ9b4Y7yq9u9lKpjBInvolzoX3VAfHAg
2024-04-19 13:12:36 UTC	977	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6481416626,6530590001,6530590001,6218455564 Google-Creative-Id: 138461749291,138463842200,138464356807,138422701804 Google-MediationGroup-Id: -2,-2,-2,-2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:36 UTC	278	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 72 61 69 6c 2f 68 6f 6d 65 2f 32 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 36 31 37 34 39 32 39 31 5d 2c 5b 36 34 38 31 34 31 36 36 32 36 5d 2c 5b 34 38 38 38 32 33 35 34 36 34 5d 2c 5b 32 38 35 38 32 38 32 38 33 35 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6b 36 50 48 58 6c 6d 69 42 75 5f 6a 55 67 63 76 59 67 79 Data Ascii: 8000{"/21854935662/justjared/desktop/rail/home/2":["html",1,null,null,1,250,300,0,0,null,null,null,1,null,[138461749291],[6481416626],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsk6PHXlmiBu_jUgcvYgy
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 52 55 74 74 47 32 52 63 52 33 6e 64 38 61 68 6d 50 63 30 75 54 41 58 31 55 59 6c 78 69 2d 4a 55 67 72 5f 4a 6c 7a 65 4e 64 47 6c 4c 65 56 50 38 4d 32 64 53 66 50 54 4d 73 44 71 48 79 36 46 4f 48 41 59 52 22 2c 22 43 4b 37 6d 70 62 75 74 7a 6f 55 44 46 58 62 30 4b 41 55 64 55 64 38 49 50 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: RUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR","CK7mpbutzoUDFXb0KAUdUd8IPg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 45 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 45 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 78 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 Data Ascii: .length:!1}function D(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};function E(a){E[" "](a);return a}E[" "]=function(){};!x("Android")\|\|D();D();x("Safari")&&(D()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edg
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 28 61 5b 47 5d 7c 30 29 26 32 3f 61 3a 73 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 48 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d Data Ascii: (c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)}}return a};function ra(a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=K(a,void 0,0)?void 0:e&&(a[G]\|0)&2?a:sa(a,b,c,void 0!==d,e);else if(H(a)){const f={};for(let g in a)f[g]=
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 28 22 70 76 74 6c 6d 74 22 29 3b 62 3d 62 26 2d 31 36 37 36 30 38 33 33 7c 28 63 26 31 30 32 33 29 3c 3c 31 34 7d 7d 61 5b 47 5d 3d 62 7d 74 68 69 73 2e 6c 3d 61 7d 74 6f 4a 53 4f 4e 28 29 7b 72 65 74 75 72 6e 20 4a 3f 75 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 3a 75 61 28 74 68 69 73 2c 73 61 28 74 68 69 73 2e 6c 2c 74 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 2c 21 30 29 7d 7d 3b 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 61 3b 20 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 Data Ascii: ("pvtlmt");b=b&-16760833\|(c&1023)<<14}}a[G]=b}this.l=a}toJSON(){return J?ua(this,this.l,!1):ua(this,sa(this.l,ta,void 0,void 0,!1),!0)}};O.prototype.A=fa; O.prototype.toString=function(){return ua(this,this.l,!1).toString()}; function ua(a,b,c){var d=ca?v
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 3b 30 3c 3d 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 63 2c 62 29 29 26 26 62 3c 64 3b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 3d 3d 66 7c 7c 36 33 3d 3d 66 29 69 66 28 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 65 29 2c 21 66 7c 7c 36 31 3d 3d 66 7c 7c 33 38 3d 3d 66 7c 7c 33 35 3d 3d 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 3d 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 44 61 3d 2f 23 7c 24 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 Data Ascii: ]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$");function Ca(a,b,c,d){for(var e=c.length;0<=(b=a.indexOf(c,b))&&b<d;){var f=a.charCodeAt(b-1);if(38==f\|\|63==f)if(f=a.charCodeAt(b+e),!f\|\|61==f\|\|38==f\|\|35==f)return b;b+=e+1}return-1}var Da=/#\|$/; function Ea(a)
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 63 3d 4e 61 28 75 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 62 29 7b 63 6f 6e 73 74 20 64 3d 65 3d 3e 7b 62 26 26 62 28 65 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 3b 41 61 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 41 61 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 63 2e 73 Data Ascii: u.google_image_requests\|\|(u.google_image_requests=[]);const c=Na(u.document);if(b){const d=e=>{b&&b(e);c.removeEventListener&&c.removeEventListener("load",d,!1);c.removeEventListener&&c.removeEventListener("error",d,!1)};Aa(c,"load",d);Aa(c,"error",d)}c.s
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 69 3d 62 7d 7d 2c 59 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 75 72 6c 3d 61 3b 74 68 69 73 2e 75 3d 21 21 62 3b 74 68 69 73 2e 64 65 70 74 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 54 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 26 26 61 2e 74 69 6d 69 6e 67 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6e 6f 77 28 29 2b 61 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e Data Ascii: onstructor(a,b){this.g=a;this.i=b}},Ya=class{constructor(a,b){this.url=a;this.u=!!b;this.depth=null}};let T=null;function Za(){const a=u.performance;return a&&a.now&&a.timing?Math.floor(a.now()+a.timing.navigationStart):Date.now()}function $a(){const a=u.
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 49 64 7d 5f 73 74 61 72 74 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 24 61 28 29 7c 7c 5a 61 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 21 74 68 69 73 2e 67 7c 7c 32 30 34 38 3c 20 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 69 2e 70 75 73 68 28 61 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 63 5b 61 5d 3d Data Ascii: Id}_start`;U&&V()&&U.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a.duration=($a()\|\|Za())-a.value;var b=`goog_${a.label}_${a.uniqueId}_end`;U&&V()&&U.mark(b);!this.g\|\|2048< this.i.length\|\|this.i.push(a)}}};function W(a,b){const c={};c[a]=
2024-04-19 13:12:36 UTC	1255	IN	Data Raw: 73 2e 69 3d 7b 7d 3b 74 68 69 73 2e 6d 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 Data Ascii: s.i={};this.m=0;this.g=[]}};function jb(a){let b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\\n"+a);let d;for(;a!=d;)d=a,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49971	151.101.193.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:36 UTC	560	OUT	GET /libtrc/google-topics-api.20240418-18-RELEASE.es6.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:36 UTC	773	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1930 x-amz-id-2: qR5uKQdBMZluravfDBRrMEOAmxgXbEhz63YuyTOQiCuwhW2qG3lXOb7LbqrMOYpaTLzkwAQxmWU= x-amz-request-id: TA9P3484CZ7EZTHE x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 11:36:35 GMT ETag: "4c18d7617af0157f9b414830120c88f6" x-amz-server-side-encryption: AES256 x-amz-version-id: nLaSVJLH94_bABqmxaCUSr40tE86YbmR Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 90744 Date: Fri, 19 Apr 2024 13:12:36 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130059-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1713532357.723246,VS0,VE1 Cache-Control: private,max-age=2629743 Vary: Accept-Encoding abp: 69 Access-Control-Allow-Origin: *
2024-04-19 13:12:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 34 31 38 2d 31 38 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 28 6f 3d 3e 7b 63 6f 6e 73 74 20 65 3d 22 74 6f 70 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 22 2c 69 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 39 38 37 36 22 2c 6e 3d 60 24 7b 74 7d 2f 6c 69 62 74 72 63 2f 73 74 61 74 69 63 2f 74 6f 70 69 63 73 2f 74 61 62 6f 6f 6c 61 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2e 68 74 6d 6c 60 2c 72 3d 60 74 62 6c 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2d 69 66 72 61 6d 65 2d 24 7b 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 60 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 72 79 7b 69 66 28 21 54 52 43 2e 74 6f 70 69 63 73 5f 73 64 6b 29 72 65 74 75 72 6e 3b Data Ascii: /! 20240418-18-RELEASE /(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics_sdk)return;
2024-04-19 13:12:36 UTC	552	IN	Data Raw: 2c 65 2e 73 72 63 3d 6e 2c 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6c 28 29 2c 6f 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 6f 26 26 6f 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 26 26 6f 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 70 28 29 26 26 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 63 6f 6e 73 74 20 65 3d 6f 2e 67 65 74 45 6c 65 6d 65 Data Ascii: ,e.src=n,e.style.width="0",e.style.height="0",e.style.display="none",l(),o.body.appendChild(e)}function p(){return"browsingTopics"in o&&o.featurePolicy&&o.featurePolicy.allowsFeature("browsing-topics")}function f(){p()&&g()}function u(){const e=o.getEleme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49970	151.101.193.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:36 UTC	555	OUT	GET /libtrc/spa-detector.20240418-18-RELEASE.es6.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:36 UTC	772	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1814 x-amz-id-2: sDFfRBGh5Q7oapPkRpVoTgR6g2FADgtbY1VMc7XjcZmwxVIOZOUQws0EaxUfnMnwFTkuU5nlb1U= x-amz-request-id: KJA97D5B03KX95AN x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 11:36:21 GMT ETag: "8f67e84733cae50cce31d7d6ff0a2f7c" x-amz-server-side-encryption: AES256 x-amz-version-id: MzxsCodtGH_owc5kKhwKAE0NjshqqNqr Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 89868 Date: Fri, 19 Apr 2024 13:12:36 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130077-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1713532357.724369,VS0,VE2 Cache-Control: private,max-age=2629743 Vary: Accept-Encoding abp: 9 Access-Control-Allow-Origin: *
2024-04-19 13:12:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 34 31 38 2d 31 38 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 2f 5e 28 5c 2f 72 65 61 63 74 29 28 28 5c 2e 7c 2d 29 28 2e 29 2b 29 2a 5c 2e 6a 73 2f 3b 63 6c 61 73 73 20 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 74 72 63 4d 61 6e 61 67 65 72 3d 65 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 69 6e 73 74 61 6e 63 65 7c 7c 28 72 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 72 28 65 29 29 2c 72 2e 69 6e 73 74 61 6e 63 65 7d 73 74 61 74 69 63 20 64 65 74 65 63 74 53 70 61 28 29 7b 63 6f 6e 73 74 20 65 3d 72 2e 64 65 74 65 63 74 41 6e 67 75 6c 61 72 28 29 2c 74 3d 72 2e 64 65 74 65 63 74 41 6e 67 75 6c 61 72 4a 73 28 29 2c 6e 3d Data Ascii: /! 20240418-18-RELEASE /(e=>{const t=/^(\/react)((\.\|-)(.)+)*\.js/;class r{constructor(e){this.trcManager=e}static getInstance(e){return r.instance\|\|(r.instance=new r(e)),r.instance}static detectSpa(){const e=r.detectAngular(),t=r.detectAngularJs(),n=
2024-04-19 13:12:36 UTC	436	IN	Data Raw: 6e 21 21 28 65 2e 61 6e 67 75 6c 61 72 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6e 67 2d 62 69 6e 64 69 6e 67 2c 20 5b 6e 67 2d 61 70 70 5d 2c 20 5b 64 61 74 61 2d 6e 67 2d 61 70 70 5d 2c 20 5b 6e 67 2d 63 6f 6e 74 72 6f 6c 6c 65 72 5d 2c 20 5b 64 61 74 61 2d 6e 67 2d 63 6f 6e 74 72 6f 6c 6c 65 72 5d 2c 20 5b 6e 67 2d 72 65 70 65 61 74 5d 2c 20 5b 64 61 74 61 2d 6e 67 2d 72 65 70 65 61 74 5d 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 73 72 63 2a 3d 22 61 6e 67 75 6c 61 72 2e 6a 73 22 5d 2c 20 73 63 72 69 70 74 5b 73 72 63 2a 3d 22 61 6e 67 75 6c 61 72 2e 6d 69 6e 2e 6a 73 22 5d 27 29 29 7d 73 74 61 74 69 63 20 64 65 74 65 63 74 41 6e 67 75 6c 61 72 28 29 Data Ascii: n!!(e.angular\|\|document.querySelector(".ng-binding, [ng-app], [data-ng-app], [ng-controller], [data-ng-controller], [ng-repeat], [data-ng-repeat]")\|\|document.querySelector('script[src="angular.js"], script[src="angular.min.js"]'))}static detectAngular()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49963	138.197.53.255	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	638	OUT	POST /prebid/multi/64bcef230cfd0997e8f05057 HTTP/1.1 Host: prebid.cootlogix.com Connection: keep-alive Content-Length: 1149 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:37 UTC	1149	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 35 34 31 35 30 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 31 2c 22 62 69 64 49 64 22 3a 22 35 39 61 61 64 63 33 33 31 37 64 35 35 61 37 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 68 6f 6d 65 5f 49 6e 43 6f 6e 74 65 6e 74 31 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 35 39 61 63 31 37 63 31 39 32 38 33 32 64 30 30 31 31 32 38 33 66 65 33 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 22 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 32 35 30 22 5d 2c 22 64 65 61 6c 49 64 22 3a 31 2c 22 75 6e 69 71 75 65 44 65 61 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532354150,"bidFloor":1,"bidId":"59aadc3317d55a7","referrer":null,"adUnitCode":"home_InContent1","publisherId":"59ac17c192832d0011283fe3","sessionId":"","sizes":["300x250"],"dealId":1,"uniqueDea
2024-04-19 13:12:37 UTC	1089	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; Domain=.cootlogix.com; Path=/; Expires=Sun, 19 May 2024 13:12:37 GMT; Secure; SameSite=None set-cookie: vdzj1_10abe312=R8615it8y0YaQPszR6coElZIGEItDzQiAFhobUFaD0cNSlVrWTVnR05jVVNfWENcGlVuAjNyX1hkAgIODRAAG1FqBTNoRRwzV1IOXk1ZT1J7TXNlFUk3AlNXUBdaTgc4V2FgQk0xVVdaDUAaVRJvUmU1SkJiAgENWhdcT1M8BWNgEEllAwFNRVYNHwNsUjQ2RR5lAldeCkQISAc9AjRnEB5wGkFZXUMOSQhpVDM2RktgV1QMD00OTwBqVGByX1hkBVFeC0QBTwdoUGlkRkIxB1peXRUNTAV7PH1yEBUnWBdNU0QUW1c9ESNySQEvGkEcDAdLEF83Q2tyS0liV1VdX0AVTwY7WXxhRBwxG1AKDEUVQAE7BzRpQU02BQdeS1gaGl83DzQzBxM9WCoLS04aTwQ7AjQ2QUliVQULWU0BTlVhB2FlQ09lFB4%3D; Domain=.cootlogix.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:37 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:37 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49972	54.65.26.44	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	1054	OUT	GET /data/episode_list/v2?cid=3921236&eids=567018231%2C564032508%2C553681366%2C548039517%2C544843609%2C544583019%2C542830300%2C537719976%2C532957961%2C528241106%2C522708940%2C518691930%2C514502604%2C512792695%2C504436661%2C502372444%2C500147724%2C497914708%2C495593596%2C493582438&raw=1&web=1&m=20240419&n=b9bfd31ff99871909a72499e059ffbbd&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Access-Token-Secret: sec-ch-ua-mobile: ?0 X-Suid: X-Web: true User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Uid: X-CastBox-UA: localTime=2024-04-19-15-12-34;timeZone=Europe/Zurich;deviceType=web;lang=;countryCode=;uid= X-Access-Token: sec-ch-ua-platform: "Windows" Accept: / Origin: https://castbox.fm Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:37 UTC	614	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:37 GMT Content-Type: application/json Content-Length: 39652 Connection: close Server: nginx Cache-Control: public, max-age=300 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://castbox.fm Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test
2024-04-19 13:12:37 UTC	15770	IN	Data Raw: 7b 22 6d 73 67 22 3a 20 22 4f 4b 22 2c 20 22 63 6f 64 65 22 3a 20 30 2c 20 22 64 61 74 61 22 3a 20 7b 22 63 68 61 6e 6e 65 6c 5f 69 64 22 3a 20 22 35 65 62 35 65 30 30 65 64 35 33 61 36 31 34 31 65 33 32 37 33 37 64 33 37 65 35 32 31 31 64 36 62 63 66 32 37 32 34 30 22 2c 20 22 65 70 69 73 6f 64 65 5f 6c 69 73 74 22 3a 20 5b 7b 22 77 65 62 73 69 74 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 6e 63 68 6f 72 2e 66 6d 2f 73 70 6f 75 74 2f 65 70 69 73 6f 64 65 73 2f 47 61 79 6c 65 2d 2d 42 6c 61 63 6b 62 65 61 72 2d 65 31 75 38 38 65 64 22 2c 20 22 63 69 64 22 3a 20 33 39 32 31 32 33 36 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 3c 70 3e 57 68 61 74 20 64 6f 20 79 6f 75 20 67 65 74 20 77 68 65 6e 20 79 6f 75 20 63 6f 6d 62 69 6e 65 20 61 6e 20 61 72 Data Ascii: {"msg": "OK", "code": 0, "data": {"channel_id": "5eb5e00ed53a6141e32737d37e5211d6bcf27240", "episode_list": [{"website": "https://anchor.fm/spout/episodes/Gayle--Blackbear-e1u88ed", "cid": 3921236, "description": "<p>What do you get when you combine an ar
2024-04-19 13:12:37 UTC	8934	IN	Data Raw: 65 69 22 2c 20 22 63 69 64 22 3a 20 33 39 32 31 32 33 36 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 3c 70 3e 57 68 69 6c 65 20 6d 6f 73 74 20 70 65 6f 70 6c 65 20 73 65 65 20 74 68 65 20 65 78 63 69 74 65 6d 65 6e 74 20 6f 66 20 43 6f 75 6e 74 72 79 20 4d 75 73 69 63 20 73 74 61 72 64 6f 6d 2c 20 66 65 77 20 63 61 6e 20 70 65 72 73 6f 6e 61 6c 6c 79 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 65 20 74 72 69 61 6c 73 20 61 6e 64 20 74 72 69 62 75 6c 61 74 69 6f 6e 73 20 74 68 61 74 20 6c 69 74 74 65 72 20 74 68 65 20 70 61 74 68 20 6f 66 20 73 74 61 72 64 6f 6d 20 62 65 74 74 65 72 20 74 68 61 6e 20 4c 69 74 74 6c 65 20 42 69 67 20 54 6f 77 6e 2e 20 54 68 65 20 6d 75 6c 74 69 70 6c 65 20 47 72 61 6d 6d 79 2c 20 45 6d 6d 79 2c 20 61 6e 64 20 42 69 Data Ascii: ei", "cid": 3921236, "description": "<p>While most people see the excitement of Country Music stardom, few can personally understand the trials and tribulations that litter the path of stardom better than Little Big Town. The multiple Grammy, Emmy, and Bi
2024-04-19 13:12:38 UTC	14948	IN	Data Raw: 61 72 65 6e 74 68 6f 6f 64 2c 20 74 68 65 20 69 6d 70 61 63 74 20 6f 66 20 6f 6e 65 20 66 61 6e 5c 75 32 30 31 39 73 20 73 69 6d 70 6c 65 20 74 77 65 65 74 2c 20 61 6e 64 20 6d 75 63 68 20 6d 6f 72 65 2e 5c 75 30 30 61 30 3c 2f 70 3e 5c 6e 3c 70 3e 57 68 69 6c 65 20 74 68 65 20 70 75 6e 20 69 73 20 69 6e 74 65 6e 64 65 64 2c 20 74 68 69 73 20 69 73 20 61 20 73 70 65 63 69 61 6c 20 65 70 69 73 6f 64 65 20 66 72 6f 6d 20 61 20 73 70 65 63 69 61 6c 20 61 72 74 69 73 74 2e 5c 75 30 30 61 30 3c 2f 70 3e 22 2c 20 22 65 70 5f 64 65 73 63 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 61 73 74 62 6f 78 2e 66 6d 2f 61 70 70 2f 64 65 73 2f 65 70 3f 65 69 64 3d 35 31 34 35 30 32 36 30 34 22 2c 20 22 69 6e 74 65 72 6e 61 6c 5f 70 72 6f 64 75 63 74 5f 69 64 22 3a Data Ascii: arenthood, the impact of one fan\u2019s simple tweet, and much more.\u00a0</p>\n<p>While the pun is intended, this is a special episode from a special artist.\u00a0</p>", "ep_desc_url": "https://castbox.fm/app/des/ep?eid=514502604", "internal_product_id":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49975	34.102.146.192	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	522	OUT	GET /esp.js HTTP/1.1 Host: oa.openxcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:37 UTC	777	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPolllpCZAOlTbz8LioU7N-5-x442TfK47KkU9l-u5KSsHKSDEi61q2Uv5zKiHqXotln454 x-goog-generation: 1622140251693895 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7927 Content-Encoding: gzip x-goog-hash: crc32c=f21hYg== x-goog-hash: md5=31VCuIvA42jGmZdUpbniug== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 7927 Server: UploadServer Date: Fri, 12 Apr 2024 20:22:36 GMT Expires: Sat, 12 Apr 2025 20:22:36 GMT Cache-Control: no-transform Age: 579001 Last-Modified: Thu, 27 May 2021 18:30:51 GMT ETag: "df5542b88bc0e368c6999754a5b9e2ba" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:37 UTC	478	IN	Data Raw: 1f 8b 08 08 5b e5 af 60 02 ff 74 6d 70 6d 74 39 72 5f 31 74 7a 00 cd 3c 0b 7b db 36 92 7f 45 e2 75 65 62 0d d3 56 d2 47 4a 85 d1 ba ae db 64 37 89 bd b1 d3 6d 4f 51 7d b4 04 49 6c 68 52 25 21 3b ae c5 fb ed 37 33 00 48 90 a2 ec 74 9b de 5d bf c6 e2 03 18 0c 06 f3 c6 80 37 51 32 4d 6f bc f4 c3 85 c8 97 c1 6c 95 4c 64 94 26 ae 64 77 d7 61 d6 11 c1 5d 31 30 0f 3b 99 9b b0 bb 68 e6 8a 51 32 66 99 90 ab 2c e9 e0 b5 27 3e 2c d3 4c e6 03 ec 92 06 f8 28 b8 8b fc 84 c7 7e b7 cf f5 4b ff ae 28 06 ba 93 c4 4e 93 30 8e dd d4 f4 e5 29 af ae 33 06 37 71 d0 3d a8 9e 15 ba 6b e6 5d 05 92 67 de 24 10 f0 77 6a 61 cc 05 07 f4 32 2f c5 4b b6 5e 9f 5c fe 22 26 d2 9b 8a 59 94 88 d3 2c 5d 8a 4c de 52 b3 3b 91 ac ae 44 16 5e c6 c2 87 31 e6 42 fa 49 c1 0a 80 97 d5 28 e0 ac 12 d5 Data Ascii: [`tmpmt9r_1tz<{6EuebVGJd7mOQ}IlhR%!;73Ht]7Q2MolLd&dwa]10;hQ2f,'>,L(~K(N0)37q=k]g$wja2/K^\"&Y,]LR;D^1BI(
2024-04-19 13:12:37 UTC	1255	IN	Data Raw: 27 e9 2d c2 fc e4 26 31 c4 52 c2 80 1d 10 c6 32 70 1c 9e 01 75 f3 a0 ff 88 15 ee a8 c6 e4 19 bb 93 46 2a 60 99 a1 01 af 0f 69 c9 2b b5 e7 48 b9 88 87 d0 2f bb 25 0a e4 81 1c 45 63 37 64 7c 15 e4 1e ad 46 31 09 e5 64 81 24 d2 18 5f a7 d1 14 21 b0 22 f7 a6 69 22 86 c2 5d 31 1f 10 be 8a 72 e1 65 22 4f e3 6b 7c e4 c9 85 48 70 71 58 51 a1 65 93 5c c3 b3 c8 a8 17 61 11 e5 3c 09 c2 6c 0e ac 91 80 f6 30 ab 26 6e 3a 7a 18 d7 2d 7b c1 0c 54 c7 30 90 5e b8 5c c6 b7 2e ca 7b a5 9c 72 1a cb 0d 69 ae 39 5f 71 27 11 1f 80 f5 60 02 65 9b d5 46 1b b9 c8 d2 1b 6a 94 bb 34 e3 03 56 30 56 14 bc 9c 8b 61 84 a0 7c 62 bd ab 78 08 94 55 7d 1d 70 9d 94 f0 d4 55 4a 2e 3a c8 ee 20 7f 03 45 87 26 6b f0 2c 68 b2 07 90 c9 31 50 2a b1 55 6a 65 a8 7e 40 bd f2 34 48 bc 48 82 98 c9 34 5b Data Ascii: '-&1R2puF`i+H/%Ec7d\|F1d$_!"i"]1re"Ok\|HpqXQe\a<l0&n:z-{T0^\.{ri9_q'`eFj4V0Va\|bxU}pUJ.: E&k,h1PUje~@4HH4[
2024-04-19 13:12:37 UTC	1255	IN	Data Raw: 4f 1b 29 78 be 5e 83 62 17 b4 9a 41 69 63 70 16 52 74 88 0c dc 6e 1d 88 0a e0 09 02 6c 0c 1b 8c cc dc 9c 2c 4d a5 53 80 ce 2a 15 ef 07 42 52 a3 0a 44 14 d2 ed 1e 58 18 1e 23 40 94 9d 12 4f d0 79 c8 76 16 9f a9 e8 4c 31 e3 a6 1f ae 98 a3 16 67 77 a3 fc 75 f8 1a e4 31 16 c9 5c 2e 98 f1 07 f7 fa e0 65 96 43 0b 50 cd e8 82 0d 76 77 93 a7 a6 ed 80 51 60 ad 03 c2 84 55 58 68 55 35 4a 70 21 90 6d 03 cc ae 0c 1a ef b5 5c 9b 16 70 55 54 de 2a 31 73 54 68 d1 bb c3 5b ff d0 d2 4d 87 a5 b1 d0 0e 88 86 46 1e 08 b8 e6 46 66 63 cb 34 5e c3 4a 81 2b 9d ad 26 c0 a6 c1 82 2f 6a f7 31 8f c9 19 8b c3 5b 94 ac 20 77 17 a0 44 2b 77 f6 3b 43 4e 86 c2 9f 6f 3c 6f 89 de db 96 00 03 7a 6b 58 3d e3 6e 17 dd 23 01 9a 23 86 60 66 73 4c 78 81 aa b5 42 6f bd 06 81 87 5f d0 e5 80 ce 55 Data Ascii: O)x^bAicpRtnl,MSBRDX#@OyvL1gwu1\.eCPvwQ`UXhU5Jp!m\pUT1sTh[MFFfc4^J+&/j1[ wD+w;CNo<ozkX=n##`fsLxBo_U
2024-04-19 13:12:37 UTC	1255	IN	Data Raw: 81 7a be 13 76 26 71 98 e7 9d 10 fe 2f b7 3e 9c 4f 83 69 7d b3 b3 12 5f 58 4e 5c 3f e3 4f e3 32 1a 97 1a 17 32 f1 aa fd a8 c0 be 59 af c1 6b 4d 3c 7b 7f 0a fd 68 87 5c 68 07 1c 4e f4 9c 12 cf ec 57 c1 bb ed 5b f7 09 c6 09 1c f9 b5 9d 9e 96 bf 86 39 69 d7 de 04 04 15 9a d0 33 68 a4 e2 be 3f 69 51 2d 8d a0 1c ea e1 a7 dd cc f3 d5 c6 dc 27 99 83 2d 33 8f b7 09 07 f0 28 49 30 04 99 4a 92 25 63 96 c0 fc 69 a4 54 56 fc 9e 92 11 54 46 f0 70 a4 cb 41 8c c2 1d af d7 e6 8d bd 65 5b 56 d8 a8 c9 cc 20 ba fe 34 d8 7f 04 11 b5 a8 eb 29 e9 ea 8c 2a d9 62 91 93 eb 78 3f db d8 c6 2e a3 6a 93 3d d3 81 d7 13 be d7 37 d1 b0 73 62 f6 07 82 ac 91 c1 01 29 cb 82 da 13 95 98 e1 ce ab 70 49 1d c0 fb 39 13 aa ef b0 46 23 df 39 34 35 05 ba e1 fe cf ee d0 7f 1b ad 5f b0 44 c2 d5 93 Data Ascii: zv&q/>Oi}_XN\?O22YkM<{h\hNW[9i3h?iQ-'-3(I0J%ciTVTFpAe[V 4)*bx?.j=7sb)pI9F#945_D
2024-04-19 13:12:37 UTC	1255	IN	Data Raw: 75 af aa 3c 6a b4 aa 77 b4 f8 63 5b ff 87 39 b4 0e d2 c8 e2 e6 46 c2 24 5d a1 7b 90 4a d2 fc 1d d3 b0 83 bd 30 3b 83 d3 77 4a 9d f7 31 78 20 43 8e 69 b7 5c 65 00 2b 66 b7 a8 b8 75 c2 0d fa 1a d2 02 f7 6e 3a 6d 5b 40 0c b7 53 db 86 a1 84 5f 6b fe 2d 4d 40 eb 9f cc 66 c0 19 fc a1 06 bb db 1b 68 bb b1 59 29 df 8e 7e 99 df 2d d9 cf ec 7d 7f 30 f6 de 43 a9 dc 60 4a 55 da 6c b3 66 52 86 e5 db 59 d3 ec d7 9a e7 7c 8b 91 e5 c6 ba e2 fa 92 59 fd dd 5c db 9e 53 df b0 a0 30 a0 95 73 35 59 59 98 d9 c1 20 a9 d2 77 c9 ee 2e cb f0 58 91 d6 8c 18 e9 1f 81 18 1f 81 40 ab e3 48 d5 89 8c 5f d2 28 71 b1 66 7c 1b c9 3f 95 b4 e0 ba 6c 97 96 ba 8c 80 84 2c 8d 92 99 19 5b d9 5e 91 40 eb 6d b8 e0 b4 e4 82 5f 72 bb 18 66 7b 8f bf 9f 9d bc f6 96 a8 e1 b4 54 16 73 4b a1 2a 8f b2 91 Data Ascii: u<jwc[9F$]{J0;wJ1x Ci\e+fun:m[@S_k-M@fhY)~-}0C`JUlfRY\|Y\S0s5YY w.X@H_(qf\|?l,[^@m_rf{TsK*
2024-04-19 13:12:37 UTC	1255	IN	Data Raw: 1a 55 2a e7 41 28 67 d5 de 93 7b d6 ea 3f 8b 3c 0f e7 58 45 a7 ea c3 f0 10 80 d0 41 86 42 55 6a 3f 03 10 99 bc 47 a5 83 bf e0 c6 6c 2b 84 a7 5e 36 d7 9c d9 5c 63 9d 3d 38 ab f4 c8 cb da 69 fc f6 64 b6 75 54 58 b3 34 ee 6e 53 0d a3 32 8d 60 db f4 95 17 5e a6 99 ac d2 ed 09 69 eb 33 f0 9f d4 73 70 1c e9 8a 50 75 f4 f6 64 44 60 7f 7c f5 f2 b9 94 cb 37 ca da 0d 6a e7 f4 22 05 17 14 7d d4 92 53 37 71 7f 12 98 35 8b 5a 58 3d 6a e3 73 17 6b 13 c1 8c 1c c6 f1 1b 91 83 ba cd c5 73 f5 ca a5 dd 26 9d 07 c0 63 37 95 26 cf 86 ef 92 d1 3b d9 19 1b 95 6e ac c3 3b 98 12 46 29 ad f5 f9 07 54 15 68 d8 d3 79 97 38 b8 71 92 af 2e 61 59 dc 3e 2f 0b af f0 f3 0f 5b 4c 52 c3 18 f9 0d 63 a4 0c 9b 4a 79 e8 f5 32 a6 08 9a 9a d7 a5 f9 a1 4f 13 90 59 01 5e 4e 48 e3 39 99 26 c2 db 37 Data Ascii: U*A(g{?<XEABUj?Gl+^6\c=8iduTX4nS2`^i3spPudD`\|7j"}S7q5ZX=jsks&c7&;n;F)Thy8q.aY>/[LRcJy2OY^NH9&7
2024-04-19 13:12:37 UTC	1174	IN	Data Raw: 72 e0 97 df a0 00 2f e3 39 a6 e0 e9 60 cf 13 7d 04 cb 54 c5 04 ed 91 14 29 bb 1b f5 65 c1 8b 8b 55 be 0c 97 d1 d0 fd cc 23 5e 73 9d b7 67 d0 27 ba 0e 27 b7 9d 38 ba cc c2 ec 16 3f 6b b0 c4 13 a8 09 7e d0 c0 74 71 b1 f0 f3 ed d9 29 15 30 f2 3e 6f 84 6a c9 f0 1f 6e e6 41 53 c5 61 10 66 b8 cc b7 46 c9 45 d6 59 84 ea 7b 09 f3 08 cc 2f b1 2a 0c e1 e1 47 13 5c f0 c9 98 2f e8 e4 30 04 23 f4 ab 37 23 1f 9a 90 9c cc ea 13 3a 3f fa ee f0 f4 45 fb 64 1a bd 68 4e e7 47 6a 4a 8f 36 a7 d4 cd bc f9 74 99 1d a2 c7 26 c0 bd ca 3c 40 7c 9a 66 9e c6 3d 1f 7d f9 f5 18 4f d0 2d 57 d9 32 cd 45 f5 bc 3f fe b7 09 c0 11 68 45 85 e4 a3 a8 30 b9 5a 5a 24 38 7a 75 fa c0 fc a1 3d 4d fe 07 9a cf 91 46 db a1 b1 6d 3a b0 bb 26 0d 48 41 18 42 1c d5 e8 a0 5f 69 62 1c fd 21 5a d8 8c f0 dc Data Ascii: r/9`}T)eU#^sg''8?k~tq)0>ojnASafFEY{/*G\/0#7#:?EdhNGjJ6t&<@\|f=}O-W2E?hE0ZZ$8zu=MFm:&HAB_ib!Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49980	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	1218	OUT	GET /v3/pr?exlist=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sovrn_n-Rise_3lift_n-Outbrain&dcc=t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:37 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:37 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 5820 Connection: close x-amz-rid: CRXX6PS4XDZB65D565KA Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:37 UTC	1180	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 35 65 63 35 35 64 66 62 2d 36 65 35 37 2d 34 37 34 32 2d 62 62 66 33 2d 35 38 63 64 30 37 62 38 63 33 66 37 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="5ec55dfb-6e57-4742-bbf3-58cd07b8c3f7"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s
2024-04-19 13:12:37 UTC	4380	IN	Data Raw: 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 73 2d 63 6f 6f 6b 69 65 2d 73 79 6e 63 2e 70 72 65 73 61 67 65 2e 69 6f 2f 61 6d 61 7a 6f 6e 2f 73 79 6e 63 3f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 25 32 46 65 63 6d 33 25 33 46 65 78 25 33 44 6f 67 75 72 79 2e 63 6f 6d 25 32 36 69 64 25 33 44 25 32 34 55 49 44 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 Data Ascii: frameborder="0" marginwidth="0" marginheight="0" src="https://ms-cookie-sync.presage.io/amazon/sync?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dogury.com%26id%3D%24UID&gdpr=0" sandbox="allow-same-origin allow-scripts"></iframe><iframe widt
2024-04-19 13:12:37 UTC	260	IN	Data Raw: 32 36 69 64 25 33 44 25 32 34 55 49 44 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 3c 69 6d 67 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 31 73 79 6e 63 2e 7a 65 6d 61 6e 74 61 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 61 6d 61 7a 6f 6e 5f 74 61 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 25 32 46 65 63 6d 33 25 33 46 65 78 25 33 44 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 25 32 36 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 67 64 70 72 3d 30 22 2f 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 Data Ascii: 26id%3D%24UID&gdpr=0" sandbox="allow-same-origin allow-scripts"></iframe><img width="1" height="1" src="https://b1sync.zemanta.com/usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0"/></body></h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49981	104.244.42.72	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	620	OUT	GET /settings?session_id=c64088ae7581f5b176ec67ae1f128e4313177360 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://platform.twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://platform.twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:37 UTC	567	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:37 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Fri, 19 Apr 2024 13:12:37 GMT content-length: 869 x-transaction-id: 28de0bbf8df07466 strict-transport-security: max-age=631138519 access-control-allow-origin: https://platform.twitter.com access-control-allow-credentials: true x-response-time: 5 x-connection-hash: b5872bfdef80e05c21e6db97d860cf4bf0bcb4353af549bca272bb09fa83a3e8 connection: close
2024-04-19 13:12:37 UTC	869	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 Data Ascii: {"should_obtain_cookie_consent":true,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","versi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49983	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	1353	OUT	GET /pcs/view?xai=AKAOjsvkuUY5zRKwdmMMlKdNwx9nfkDCogBThn2K07lcyzABgaO-Lc3HVFHZ3yypOF2sqH6wrrfUiWliPQYgbZVRNJfNe6NQKRCR93TGj34cCO5pOJmog6qgAWS1VPdi_c3HjLbFD_GXB5j8kwNoBewPLIoJ4PT6UcQVs523W0bRMUGvgiUa3lmGRSzeOFBv6R5--cDSvYOe90sI6TreTkZ55IIfS4ebEohlZfx1uvbE7PUiLuSHQ-vSanQCsjyAuGsm0gQc8_z6uQgutq_wRGMuBUmavjbOERAMFJxxBswWgWlPJNY8y90w9BTdl7GvffjohNlQ8A9_mGf8dcgZPk30eu8ryCpxr4jVQwhzzhuLe-H3hzExAvjiugLlUKMycXdZxS8EejktM1riQXmTAU83JiII2iYBgwkkYgpsPPxxA2W8Lg&sai=AMfl-YSoC8ABPPkz30SA3fxlyCD0rt-HCxK7mC4SMkZd1LJkVo8patGS5HtSzAWTDN96sc0k6VFfY1vM-K3iV8muYRDZ36THj_O0XvATLJEU44EYQ7g0e3479YtpqXoTKiI&sig=Cg0ArKJSzBusx6ZbMrSDEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:37 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49985	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	1333	OUT	GET /pcs/view?xai=AKAOjstniLsn00JE5pwwHYTXOWEc3VxGkzRQAowr1SeQ821M-aNLjMzhwoWB9_iLAsUPmGac4Jxv6GG6vPFCy_4w4G5iwtWFhltdUo_jZ856svr7DR0FyoF03BZxiAvSWcAZ1O_a7Jo729AKoiMlIiNy54K9kUlWDw8JKUCDFHzJkcbOztxBtN-RzO5toIpM2-kWfQ3IJtFrSXxPXmoc7qPa1ikB7fh4dM0eaEleggsJLx4jTkWSN0ElbDbYgcubUcJyK6qmjEEhVXlMhBaL98HSxalf5cmeP6IBq5XLE2rlxRxloA5nDpzaIayl2nmQt3COLmfL1zerjVoIzt07QuR5m1oDqjefPudqJENREH7o0d7GOz3AWH2QDKCueehkmPhsVy7eQ7xnua_4dTrJXvmMYEjUCA&sai=AMfl-YTFfeMk1q-Lm6x_flSI28_PSA5kva1Oa9RlW29D9O14xlWrm6CV5l24PE0gLyuicorkiOuvsA_x5tyHrqEHRzUVVqWSL7qbYrRC7RulcizSJWoOcdJcD0yxs7ACu_I&sig=Cg0ArKJSzMi-Zm3CjwWlEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:37 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49984	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	544	OUT	GET /js/infolinks_main.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:37 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:37 GMT Content-Type: application/javascript Content-Length: 4313 Connection: close last-modified: Wed, 03 Apr 2024 09:01:28 GMT etag: "10d9-6152d77d7053a" Cache-Control: max-age=3600 expires: Fri, 19 Apr 2024 11:50:03 GMT via: 1.1 google CF-Cache-Status: HIT Age: 8554 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d25b40a54507d-ATL
2024-04-19 13:12:37 UTC	969	IN	Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 64 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 28 63 3c 61 3f 22 22 3a 65 28 70 61 72 73 65 49 6e 74 28 63 2f 61 29 29 29 2b 28 28 63 3d 63 25 61 29 3e 33 35 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 2b 32 39 29 3a 63 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 7b 64 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 7d 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 6c 65 28 63 2d Data Ascii: eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c-
2024-04-19 13:12:37 UTC	1369	IN	Data Raw: 22 2b 70 5d 3d 74 7d 7d 7a 20 6d 28 29 7b 36 28 35 2e 77 26 26 35 2e 77 2e 31 4d 26 26 61 28 29 29 7b 36 28 21 35 2e 31 74 2e 31 6c 29 7b 35 2e 31 74 2e 31 6c 3d 55 2b 22 33 7a 22 2b 31 33 2e 31 45 28 31 33 2e 31 68 28 29 2a 31 71 29 3b 35 2e 77 2e 32 4c 3d 35 2e 31 74 2e 31 6c 7d 35 2e 77 2e 32 33 3d 64 2e 31 32 3b 35 2e 77 2e 32 36 3d 22 31 6f 3a 2f 2f 31 77 2e 31 6a 2e 31 63 2f 31 36 2f 22 2b 64 2e 31 35 3b 37 20 69 3d 35 2e 77 2e 32 36 2b 22 2f 32 50 2e 31 36 22 3b 37 20 70 3d 35 2e 39 2e 31 69 28 22 31 75 22 29 3b 70 2e 32 37 3d 22 32 30 2f 31 53 22 3b 70 2e 76 3d 35 2e 77 2e 76 7c 7c 69 3b 36 28 4b 26 26 4b 2e 78 29 7b 4b 5b 30 5d 2e 31 34 28 70 29 7d 75 7b 39 2e 31 66 2e 31 34 28 70 29 7d 7d 75 7b 37 20 65 3d 39 2e 31 69 28 22 31 75 22 29 3b 65 2e Data Ascii: "+p]=t}}z m(){6(5.w&&5.w.1M&&a()){6(!5.1t.1l){5.1t.1l=U+"3z"+13.1E(13.1h()*1q);5.w.2L=5.1t.1l}5.w.23=d.12;5.w.26="1o://1w.1j.1c/16/"+d.15;7 i=5.w.26+"/2P.16";7 p=5.9.1i("1u");p.27="20/1S";p.v=5.w.v\|\|i;6(K&&K.x){K[0].14(p)}u{9.1f.14(p)}}u{7 e=9.1i("1u");e.
2024-04-19 13:12:37 UTC	1369	IN	Data Raw: 22 3f 22 29 2b 31 2c 48 5b 6a 5d 2e 76 2e 78 29 3b 50 28 54 29 7d 31 65 28 44 29 7b 7d 31 6d 7d 7d 36 28 21 64 2e 31 32 29 7b 64 2e 31 32 3d 22 31 6f 3a 2f 2f 31 77 2e 31 6a 2e 31 63 2f 31 36 22 2b 63 7d 7d 7d 7d 64 2e 33 33 3d 33 34 20 33 37 28 29 2e 33 65 28 29 3b 36 28 64 2e 31 32 29 7b 36 28 4c 28 22 33 6e 22 29 26 26 31 55 29 7b 31 55 28 22 31 48 22 2c 32 2c 7a 28 65 2c 69 29 7b 36 28 69 26 26 28 65 2e 32 35 3d 3d 3d 22 33 74 22 7c 7c 65 2e 32 35 3d 3d 3d 22 32 38 22 29 29 7b 6d 28 29 7d 7d 29 7d 75 7b 6d 28 29 7d 7d 37 20 5a 3d 4c 28 22 32 39 22 29 3b 36 28 5a 29 7b 31 62 7b 37 20 68 3d 39 2e 31 69 28 22 32 62 22 29 3b 68 2e 76 3d 22 22 3b 36 28 4b 26 26 4b 2e 78 29 7b 4b 5b 30 5d 2e 31 34 28 68 29 7d 75 7b 39 2e 31 66 2e 31 34 28 68 29 7d 32 64 28 Data Ascii: "?")+1,H[j].v.x);P(T)}1e(D){}1m}}6(!d.12){d.12="1o://1w.1j.1c/16"+c}}}}d.33=34 37().3e();6(d.12){6(L("3n")&&1U){1U("1H",2,z(e,i){6(i&&(e.25==="3t"\|\|e.25==="28")){m()}})}u{m()}}7 Z=L("29");6(Z){1b{7 h=9.1i("2b");h.v="";6(K&&K.x){K[0].14(h)}u{9.1f.14(h)}2d(
2024-04-19 13:12:37 UTC	606	IN	Data Raw: 69 70 61 64 7c 61 6e 64 72 6f 69 64 7c 77 69 6e 64 6f 77 73 7c 6f 70 65 72 61 7c 6d 69 6e 69 7c 6e 61 76 69 67 61 74 6f 72 7c 73 75 70 70 6f 72 74 65 64 7c 75 63 77 65 62 7c 69 6e 66 6f 6c 69 6e 6b 73 5f 77 68 69 74 65 5f 6c 61 62 65 6c 7c 6d 6f 62 69 6c 65 5f 6f 66 66 7c 6d 6f 62 69 6c 65 7c 69 70 68 6f 6e 65 7c 73 75 7c 70 69 64 7c 63 6c 69 63 6b 7c 6d 6f 62 69 7c 5f 7c 69 6e 66 6f 6c 69 6e 6b 5f 7c 70 6f 73 74 4d 65 73 73 61 67 65 7c 4a 53 4f 4e 7c 63 6f 6e 74 69 6e 75 65 7c 77 68 69 63 68 7c 73 74 72 69 6e 67 69 66 79 7c 73 75 62 73 74 72 7c 63 6f 6e 74 61 69 6e 65 72 5f 69 64 7c 44 45 53 54 52 4f 59 7c 69 6e 6e 65 72 57 69 64 74 68 7c 6e 6f 74 7c 66 72 61 6d 65 5f 63 6f 6e 74 65 6e 74 7c 61 70 69 4b 7c 63 68 61 72 73 65 74 7c 55 54 46 7c 6c 4a 4b 48 Data Ascii: ipad\|android\|windows\|opera\|mini\|navigator\|supported\|ucweb\|infolinks_white_label\|mobile_off\|mobile\|iphone\|su\|pid\|click\|mobi\|_\|infolink_\|postMessage\|JSON\|continue\|which\|stringify\|substr\|container_id\|DESTROY\|innerWidth\|not\|frame_content\|apiK\|charset\|UTF\|lJKH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49986	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	578	OUT	GET /ads-code/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:38 UTC	668	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 43750 Connection: close Date: Fri, 19 Apr 2024 13:12:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:06:12 GMT ETag: "d770fc2c6240423ae3e46ec026e9e0c9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=60 x-amz-version-id: 0kAP80fIEmWpqlVfTwCyJZZwSPmkxf4l Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 782e548cb0b1b64c63d995fc59568b48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: bUsrdeD1UkEKgVrU6_8gAUrT6WPZ9yHP3eA_8GeZ-vzv53IYrWMZNA==
2024-04-19 13:12:38 UTC	16384	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 6d 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 3c 63 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 63 5b 6d 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 28 63 29 7d 7d 3b 24 6a 73 63 6f 6d 70 Data Ascii: 'use strict';var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(c){var m=0;return function(){return m<c.length?{done:!1,value:c[m++]}:{done:!0}}};$jscomp.arrayIterator=function(c){return{next:$jscomp.arrayIteratorImpl(c)}};$jscomp
2024-04-19 13:12:38 UTC	16384	IN	Data Raw: 65 73 73 61 67 65 49 64 3a 28 30 2c 67 2e 75 75 69 64 29 28 29 2c 6d 65 73 73 61 67 65 48 65 61 64 65 72 3a 65 2e 6d 65 73 73 61 67 65 48 65 61 64 65 72 2c 63 68 61 6e 6e 65 6c 4e 61 6d 65 3a 6c 2c 73 74 61 6d 70 73 3a 5b 65 2e 78 6d 65 73 73 4e 6f 64 65 49 64 5d 2c 70 61 79 6c 6f 61 64 3a 66 7d 29 7d 7d 7d 2c 39 35 39 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 61 2c 62 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 61 2e 6c 6f 67 3d 76 6f 69 64 20 30 3b 76 61 72 20 67 3d 62 28 34 39 37 29 3b 61 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 64 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 0a 77 69 6e 64 6f 77 2e Data Ascii: essageId:(0,g.uuid)(),messageHeader:e.messageHeader,channelName:l,stamps:[e.xmessNodeId],payload:f})}}},959:function(h,a,b){Object.defineProperty(a,"__esModule",{value:!0});a.log=void 0;var g=b(497);a.log=function(e,d){"undefined"!=typeof window&&window.
2024-04-19 13:12:38 UTC	10982	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 75 29 7b 76 61 72 20 70 2c 74 2c 43 3d 28 6e 75 6c 6c 3d 3d 3d 28 70 3d 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 70 72 65 6c 6f 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 76 6f 69 64 20 30 3a 70 2e 69 73 50 72 65 6c 6f 61 64 4d 6f 64 65 29 26 26 41 2e 67 65 74 28 7a 29 3b 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 70 72 65 6c 6f 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 30 3a 74 2e 69 73 50 72 65 6c 6f 61 64 4d 6f 64 65 29 26 26 21 43 3f 42 2e 70 75 73 68 28 5b 7a 2c 75 5d 29 3a 77 5b 7a 5d 26 26 0a 77 5b 7a 5d 28 75 29 7d 7d 2c 36 30 37 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6b 29 7b 76 61 72 20 66 2c 6c 3d Data Ascii: =function(z,u){var p,t,C=(null===(p=window.Insticator.preload)\|\|void 0===p?void 0:p.isPreloadMode)&&A.get(z);(null===(t=window.Insticator.preload)\|\|void 0===t?0:t.isPreloadMode)&&!C?B.push([z,u]):w[z]&&w[z](u)}},607:function(h,a,b){function g(k){var f,l=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49987	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:37 UTC	1335	OUT	GET /pcs/view?xai=AKAOjssB_KA48xkfaSraJTum5AKsL8TwE8yll4cg4dH2niDn5nGhBnX-4yu0BuiQPaX0Fl7WZ4OP0NNEvX5X-txK249dOiG7INeR-x1txdQYuwsM1xBe1Nzv0G8-C5okl-lglFbgyKyQyLVTIM1XC8CwyWghdAbdxUPtQLQqEZED3luGLn18M5EOJQKjJtPxsOaI_BTtpTxuY_1vQT_QZQ-0haXo1HATgv8mSEL8C0g6U81dGZCF4NzN4QYTN5LPgf99hcn2bbqX_XYPVTdFGbkb6n3_BTpTNSL2EdbIyDKh1MFcOrC-gRRx1WbDPchlzM3rVnhC7h1YUmSuUA8fDC26jeowq7AUluKrlT4BnIp5HYeQ3FrL8BoAWEoj2MmvbRsejrn94A5i3bg1hcVqJOOihuLFuJmW&sai=AMfl-YR6dBGHKmcE_1GqshfVxUUXRV7lk2gbDTAHUbmSP0MpYfQA1Yqc5brqmzEBJhhH0n78rUCETs1AU-PlrHiGe80YqoVASj8z-nq234I1RADJx57AcfS5Mdw7UbMKzBE&sig=Cg0ArKJSzNYEFKiBSSO6EAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:38 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49990	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:38 UTC	1317	OUT	GET /pcs/view?xai=AKAOjst6ST3WbaTkEkBGVPMqEeVNo8N1tbU9FiLhNTn4Ef37nYKSFPnCLDtxKlxmJdm3JcvgDgKJGI1YvlFu3QtL4rX7SzpusHmRdwQ23MuuJAvHqdgGUGlHIbOQLp8QZ8VxJBuTWp168Ox5_r1G0BbhSeCT3a9xEP5HNiwT1R9KTclBlI3LcbM4oDF4MN51KSVR9xU1pemsSl8ZaqgKZJwY6q0jQWkHrBQuwiC4UkjOmDrlfUyPvvlzmynDSseNvX53jOER4ckKfhqspQOeQvwTspJROqJf_6Aov3BSZyvaNQGq3fm0LrYDxZcQPbOQhk6HIvO2Q1TML5cexwHsMY0VUo-fEuW1MdafWoj9zHP2dsllyuUez_KPWyk3eCHQvIBKntEpdhGTUINdBp5qqs4&sai=AMfl-YQP0wT5uFsi4XFzAk5Tb5N1-aVkH4ueTr5A0aghmurEJvqMxe3MvLC9ZQqOf38fzyy4f9gT10cAalW86exdexK8oeasVBs7lK-jS36CmNNZLMvRvo9zO61tYY5VZzU&sig=Cg0ArKJSzNG3oG-rSsJPEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:38 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:38 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49991	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:38 UTC	3383	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=2920935011648889&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cincontent%2Chome%2C1&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=300x250&ifi=7&didk=3656293417&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532356746&lmt=1713532038&adxs=309&adys=1231&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=5&ucis=7&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=610x-1&msz=300x-1&fws=516&ohw=1280&psts=AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR%2CAOrYGslC9W3W_3AujtsHnyKtJMzQcYpr29r_5ZsX6pG6_BNMAK-nIoeky6P_RVwjaPSfPclOilDIK7goP-od-fRqMNHEBgF2Smxd6_f4hUde5MH9o3CL%2CAOrYGsnbkBJrfC_SMFmhI3gHn7Jbpoegxe5Tygpb8xpqz8X_Ccj3kILwyL1gliBCXmc5cwrDFAzR2NL0OvXhP2KjkGmw83sDL02mdFW4VBm1WIr2pwyN%2CAOrYGsnsJAV7ez72LGmmn6d2Ht2A1Jn70sMm93fMBjaT35p272D3_9exGuvZfel5_89_mevwxZnFTZISElsmYFWRA8HzuOEWjshP8ez0zEdgLw%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_InContent1%26pos%3Dhome_InContent1%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=3508217207&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:38 UTC	896	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6530590001 Google-Creative-Id: 138467780849 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:38 UTC	359	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 69 6e 63 6f 6e 74 65 6e 74 2f 68 6f 6d 65 2f 31 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 36 37 37 38 30 38 34 39 5d 2c 5b 36 35 33 30 35 39 30 30 30 31 5d 2c 5b 34 38 38 38 32 33 35 34 36 34 5d 2c 5b 32 38 35 38 32 38 32 38 33 35 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 72 65 67 48 38 6d 33 33 31 35 31 76 57 Data Ascii: 8000{"/21854935662/justjared/desktop/incontent/home/1":["html",1,null,null,1,250,300,0,0,null,null,null,1,null,[138467780849],[6530590001],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslregH8m33151vW
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 62 79 74 7a 6f 55 44 46 58 48 39 4b 41 55 64 64 71 49 4f 44 51 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 7d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 69 6e 44 61 70 49 46 3d 74 72 75 65 2c 69 6e 47 70 74 49 46 3d 74 Data Ascii: bytzoUDFXH9KAUddqIODQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"7",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}<!doctype html><html><head><script>var inDapIF=true,inGptIF=t
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 45 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 45 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 78 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 65 61 3d 7b 7d 2c 46 3d 6e 75 6c 6c Data Ascii: !(y()?0:x("Edge"))\|\|x("Silk")};function E(a){E[" "](a);return a}E[" "]=function(){};!x("Android")\|\|D();D();x("Safari")&&(D()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera"));var ea={},F=null
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 6f 61 28 62 29 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 28 61 5b 47 5d 7c 30 29 26 32 3f 61 3a 73 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 48 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 72 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d Data Ascii: oa(b)}}return a};function ra(a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=K(a,void 0,0)?void 0:e&&(a[G]\|0)&2?a:sa(a,b,c,void 0!==d,e);else if(H(a)){const f={};for(let g in a)f[g]=ra(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function sa(a,b,c,d,e){const f=
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 3a 75 61 28 74 68 69 73 2c 73 61 28 74 68 69 73 2e 6c 2c 74 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 2c 21 30 29 7d 7d 3b 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 61 3b 20 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 43 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6c 3a 62 29 5b 47 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 Data Ascii: this,this.l,!1):ua(this,sa(this.l,ta,void 0,void 0,!1),!0)}};O.prototype.A=fa; O.prototype.toString=function(){return ua(this,this.l,!1).toString()}; function ua(a,b,c){var d=ca?void 0:a.constructor.C;const e=(c?a.l:b)[G];a=b.length;if(!a)return b;let f,g
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 3d 63 2e 6c 65 6e 67 74 68 3b 30 3c 3d 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 63 2c 62 29 29 26 26 62 3c 64 3b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 3d 3d 66 7c 7c 36 33 3d 3d 66 29 69 66 28 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 65 29 2c 21 66 7c 7c 36 31 3d 3d 66 7c 7c 33 38 3d 3d 66 7c 7c 33 35 3d 3d 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 3d 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 44 61 3d 2f 23 7c 24 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 65 61 72 63 68 28 44 61 29 2c 63 3d 43 61 28 61 2c 30 2c 22 61 73 65 22 2c 62 29 3b 69 66 28 30 3e 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 Data Ascii: =c.length;0<=(b=a.indexOf(c,b))&&b<d;){var f=a.charCodeAt(b-1);if(38==f\|\|63==f)if(f=a.charCodeAt(b+e),!f\|\|61==f\|\|38==f\|\|35==f)return b;b+=e+1}return-1}var Da=/#\|$/; function Ea(a){var b=a.search(Da),c=Ca(a,0,"ase",b);if(0>c)return null;var d=a.indexOf("&"
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 3b 69 66 28 62 29 7b 63 6f 6e 73 74 20 64 3d 65 3d 3e 7b 62 26 26 62 28 65 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 3b 41 61 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 41 61 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 63 2e 73 72 63 3d 61 3b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 63 29 7d 3b 6c 65 74 20 51 61 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 Data Ascii: ;if(b){const d=e=>{b&&b(e);c.removeEventListener&&c.removeEventListener("load",d,!1);c.removeEventListener&&c.removeEventListener("error",d,!1)};Aa(c,"load",d);Aa(c,"error",d)}c.src=a;u.google_image_requests.push(c)};let Qa=0;function Ra(a,b=null){return
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 73 2e 75 3d 21 21 62 3b 74 68 69 73 2e 64 65 70 74 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 54 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 26 26 61 2e 74 69 6d 69 6e 67 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6e 6f 77 28 29 2b 61 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 3f 61 2e 6e 6f 77 28 29 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 76 61 72 20 Data Ascii: s.u=!!b;this.depth=null}};let T=null;function Za(){const a=u.performance;return a&&a.now&&a.timing?Math.floor(a.now()+a.timing.navigationStart):Date.now()}function $a(){const a=u.performance;return a&&a.now?a.now():null};var ab=class{constructor(a,b){var
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 24 61 28 29 7c 7c 5a 61 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 21 74 68 69 73 2e 67 7c 7c 32 30 34 38 3c 20 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 69 2e 70 75 73 68 28 61 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 66 75 6e 63 74 69 6f 6e 20 65 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 49 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 70 29 7b 28 67 3d 66 62 28 67 2c 62 2c 63 Data Ascii: value){a.duration=($a()\|\|Za())-a.value;var b=`goog_${a.label}_${a.uniqueId}_end`;U&&V()&&U.mark(b);!this.g\|\|2048< this.i.length\|\|this.i.push(a)}}};function W(a,b){const c={};c[a]=b;return[c]}function eb(a,b,c,d,e){const f=[];Ia(a,function(g,p){(g=fb(g,b,c
2024-04-19 13:12:38 UTC	1255	IN	Data Raw: 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 5c 5c 64 2b 28 3f 3a 2e 7c 5c 5c 6e 29 2a 29 5c 5c 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e Data Ascii: indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\\\d+(?:.\|\\n)*)\\\\2"),"$1");b=a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49995	54.230.253.74	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:39 UTC	593	OUT	GET /check/1260 HTTP/1.1 Host: check.analytics.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:39 UTC	505	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 25 Connection: close Date: Fri, 19 Apr 2024 13:12:39 GMT x-amzn-RequestId: 1ee51bf3-4c46-4a0e-bb47-7ea5432796a6 Access-Control-Allow-Origin: * x-amz-apigw-id: WeYXLFA3joEEAHw= X-Amzn-Trace-Id: Root=1-66226dc7-20458be919cbae6003b82154 X-Cache: Miss from cloudfront Via: 1.1 9e32d061d6f1c0e8ba238fdbb0c7b97e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: AKDf4U1CT0Zqd1XK_kb0HTjznBATnUbv-V-B4CPW46uocCSimIVGzQ==
2024-04-19 13:12:39 UTC	25	IN	Data Raw: 7b 0a 20 20 22 73 61 6d 70 6c 69 6e 67 52 61 74 65 22 3a 20 31 30 30 0a 7d Data Ascii: { "samplingRate": 100}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49994	34.120.135.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:39 UTC	596	OUT	GET /esp?url=https%3A%2F%2Fwww.justjared.com%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:39 UTC	499	IN	HTTP/1.1 302 Found X-Powered-By: Express Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin Access-Control-Allow-Credentials: true Location: /esp?url=https%3A%2F%2Fwww.justjared.com%2F&rid=esp&cc=1 Set-Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359;Domain=.openx.net;Path=/;Max-Age=31536000;SameSite=None;Secure; Date: Fri, 19 Apr 2024 13:12:39 GMT Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	50000	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:40 UTC	625	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.justjared.com%2F&domain=www.justjared.com&cw=1&lsw=1&us_privacy=1YNN&gdpr=0 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:40 UTC	524	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:39 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://www.justjared.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 185741 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:40 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	50006	104.26.15.45	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:40 UTC	360	OUT	GET /assets/images/11.svg HTTP/1.1 Host: aacdn.nagich.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	910	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:40 GMT Content-Type: image/svg+xml Content-Length: 1017 Connection: close Cache-Control: public, max-age=2204800 last-modified: Thu, 01 Aug 2019 12:47:47 GMT etag: "42b27526748d51:0" access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 51686 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOAQe8A7nk%2F%2FARhItC%2BEpelnsFae5ww7i7czQBWIVmQvzzMh1rc5tEHsDFbzRhDNIlRwletqih09EczYToe8mbTdx7fnhY0ROLyCd33tzp1UXGVtwEvpg5T6hFCU9diGIYY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d25c7fa6d8834-ATL
2024-04-19 13:12:41 UTC	459	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 32 22 20 62 61 73 65 50 72 6f 66 69 6c 65 3d 22 74 69 6e 79 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0d 0a 09 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 2e 32 39 39 20 31 34 2e 38 38 36 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 31 30 31 30 31 22 20 64 3d 22 4d 31 31 2e 32 37 31 2c 33 2e 36 35 36 63 2d 30 2e 31 31 37 2d 30 2e 34 34 32 2d 30 2e 36 31 39 2d 30 2e 37 30 38 2d 31 2e 30 36 31 2d Data Ascii: <svg version="1.2" baseProfile="tiny" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 11.299 14.886" xml:space="preserve"><path fill="#010101" d="M11.271,3.656c-0.117-0.442-0.619-0.708-1.061-
2024-04-19 13:12:41 UTC	558	IN	Data Raw: 2e 38 35 38 2d 30 2e 32 30 37 2c 32 2e 33 32 39 63 2d 30 2e 32 39 35 2c 31 2e 33 35 36 2d 31 2e 39 31 36 2c 35 2e 30 37 2d 31 2e 39 31 36 2c 35 2e 30 37 0d 0a 09 63 2d 30 2e 32 30 37 2c 30 2e 34 34 32 2c 30 2c 30 2e 39 34 33 2c 30 2e 34 31 33 2c 31 2e 31 35 63 30 2e 31 31 38 2c 30 2e 30 35 39 2c 30 2e 32 33 36 2c 30 2e 30 38 38 2c 30 2e 33 35 34 2c 30 2e 30 38 38 63 30 2e 33 32 34 2c 30 2c 30 2e 36 34 38 2d 30 2e 31 37 38 2c 30 2e 37 36 36 2d 30 2e 35 30 31 4c 35 2e 37 2c 31 30 2e 38 34 38 6c 31 2e 36 35 31 2c 33 2e 35 36 37 0d 0a 09 63 30 2e 31 34 37 2c 30 2e 32 39 33 2c 30 2e 34 34 31 2c 30 2e 34 37 31 2c 30 2e 37 36 37 2c 30 2e 34 37 31 63 30 2e 31 31 38 2c 30 2c 30 2e 32 33 35 2d 30 2e 30 32 39 2c 30 2e 33 35 34 2d 30 2e 30 38 38 63 30 2e 34 34 2d 30 Data Ascii: .858-0.207,2.329c-0.295,1.356-1.916,5.07-1.916,5.07c-0.207,0.442,0,0.943,0.413,1.15c0.118,0.059,0.236,0.088,0.354,0.088c0.324,0,0.648-0.178,0.766-0.501L5.7,10.848l1.651,3.567c0.147,0.293,0.441,0.471,0.767,0.471c0.118,0,0.235-0.029,0.354-0.088c0.44-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	50008	34.232.204.139	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:40 UTC	1591	OUT	GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A2%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fkourtney-kardashian-shuts-down-fan-comment.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A1636%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22Kourtney%20Kardashian%20Shuts%20Down%20Fan%20Who%20Assumed%20She%20Wouldn%27t%20Like%20Kim%27s%20Birthday%20Post%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350575&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:41 UTC	406	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 1829 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:40 GMT; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true ETag: "05085c90ef93602b299e16eb2e779fdeb" Timing-Allow-Origin: *
2024-04-19 13:12:41 UTC	1829	IN	Data Raw: 7b 22 61 64 73 22 3a 5b 5d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 75 5f 62 64 37 33 61 39 38 35 2d 33 65 66 37 2d 34 34 31 36 2d 61 36 37 39 2d 33 61 39 33 30 39 31 38 31 36 31 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 33 30 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 66 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 Data Ascii: {"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=","t":"f"},{"u":"https://sync-tm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	50005	34.107.165.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:40 UTC	601	OUT	GET /api/identity/envelope?pid=1260 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	457	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	50007	34.232.204.139	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:40 UTC	1586	OUT	GET /assets/new?assets=%7B%22v%22%3A%221.1%22%2C%22pv%22%3A%2268ab9643-cd36-4b2c-ab6d-2b900dbdb245%22%2C%22r%22%3A%223.88.29%22%2C%22t%22%3A%22jstjared%22%2C%22rf%22%3A%22%22%2C%22fs%22%3Afalse%2C%22ce%22%3Atrue%2C%22p%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22a%22%3A%5B%7B%22i%22%3A1%2C%22u%22%3A%22https%3A%2F%2Fcdn01.justjared.com%2Fwp-content%2Fuploads%2Fheadlines%2F2024%2F04%2Fthank-you-aimee-song-lyrics.jpg%22%2C%22w%22%3A300%2C%22h%22%3A300%2C%22x%22%3A155%2C%22y%22%3A613%2C%22lt%22%3A%22none%22%2C%22af%22%3Afalse%2C%22prefetch%22%3Atrue%2C%22ia%22%3A%22%27thanK%20you%20aIMee%27%20Lyrics%3A%20Is%20Taylor%20Swift%27s%20Song%20About%20Kim%20Kardashian%20Feud%3F%20Listen%20Now!%22%7D%5D%2C%22ac%22%3A%7B%7D%2C%22vp%22%3A%7B%22ii%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A907%7D%2C%22sc%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22d%22%3A1%7D%2C%22tr%22%3A0.4%2C%22ogu%22%3A%22https%3A%2F%2Fwww.justjared.com%22%7D&bf=f42f33720e241642e593da0d840ca6c8d6073588&lt=1713532350573&to=-120&gdprApplies=0&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280&uspConsent=1YNN&r=false HTTP/1.1 Host: g2.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:41 UTC	406	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 1829 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:40 GMT; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true ETag: "0d8b599cdee2dc0cf2ac7cd020ffc0cd7" Timing-Allow-Origin: *
2024-04-19 13:12:41 UTC	1829	IN	Data Raw: 7b 22 61 64 73 22 3a 5b 5d 2c 22 70 78 73 22 3a 7b 22 73 63 72 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 73 2f 34 34 31 2f 39 2e 67 69 66 3f 70 75 69 64 3d 75 5f 62 64 37 33 61 39 38 35 2d 33 65 66 37 2d 34 34 31 36 2d 61 36 37 39 2d 33 61 39 33 30 39 31 38 31 36 31 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 74 22 3a 22 69 22 7d 2c 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 25 32 46 75 73 65 72 73 79 6e 63 25 33 46 62 25 Data Ascii: {"ads":[],"pxs":{"scr":[{"u":"https://id5-sync.com/s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=","t":"i"},{"u":"https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	50003	18.67.76.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:40 UTC	659	OUT	GET /consent/tcfv2/vendor-list/categories?siteId=7443 HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 1819 Connection: close Date: Fri, 19 Apr 2024 13:12:41 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET, PUT, POST, DELETE Cache-Control: max-age=0, s-maxage=3600 Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b18bcd54d0f77ca53d7c0ba4b9e54284.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: V3dVUF1_s2l9Rfd6GO-CbFsefm_3p4uobcZgXy575R6Syyk59P_mHA==
2024-04-19 13:12:41 UTC	1819	IN	Data Raw: 7b 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 7b 22 5f 69 64 22 3a 22 35 66 32 39 62 61 61 38 35 31 64 32 65 63 32 35 61 62 34 37 32 39 34 32 22 2c 22 74 79 70 65 22 3a 22 49 41 42 5f 50 55 52 50 4f 53 45 22 2c 22 6e 61 6d 65 22 3a 22 53 74 6f 72 65 20 61 6e 64 2f 6f 72 20 61 63 63 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 61 20 64 65 76 69 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6f 6b 69 65 73 2c 20 64 65 76 69 63 65 20 6f 72 20 73 69 6d 69 6c 61 72 20 6f 6e 6c 69 6e 65 20 69 64 65 6e 74 69 66 69 65 72 73 20 28 65 2e 67 2e 20 6c 6f 67 69 6e 2d 62 61 73 65 64 20 69 64 65 6e 74 69 66 69 65 72 73 2c 20 72 61 6e 64 6f 6d 6c 79 20 61 73 73 69 67 6e 65 64 20 69 64 65 6e 74 69 66 69 65 72 73 2c 20 6e 65 74 77 6f 72 6b 20 62 Data Ascii: {"categories":[{"_id":"5f29baa851d2ec25ab472942","type":"IAB_PURPOSE","name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	50004	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	608	OUT	GET /track/rid?ttd_pid=qvrl0w8&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	451	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json Content-Length: 63 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://www.justjared.com cache-control: private expires: Sun, 19 May 2024 13:12:41 GMT vary: Origin
2024-04-19 13:12:41 UTC	63	IN	Data Raw: 7b 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 34 31 22 7d Data Ascii: {"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:41"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	50017	34.202.33.5	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	1084	OUT	GET /v/1.0/t/sync?_c=app27ow1713532354208&usPrivacy=1YNN HTTP/1.1 Host: pre.ads.justpremium.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; 83481_313785=0_0_0; 83481_313787=1_8_0; 83481_313788=1_8_0; 83481_313789=1_8_0; 83481_313795=0_0_0; 83481_453288=0_0_0; 83481_454035=1_8_0
2024-04-19 13:12:41 UTC	203	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, no-cache, no-store, must-revalidate
2024-04-19 13:12:41 UTC	1218	IN	Data Raw: 34 62 62 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4a 75 73 74 70 72 65 6d 69 75 6d 20 53 79 6e 63 20 50 69 78 65 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 3d 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 54 72 61 63 6b 55 72 6c 28 73 73 70 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 63 6f 70 65 20 3d 20 77 69 6e 64 6f 77 3b 0a 20 Data Ascii: 4bb <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Justpremium Sync Pixel</title> <link rel="icon" href="data:;base64,iVBORw0KGgo="></head><body><script> function getTrackUrl(ssp) { var scope = window;
2024-04-19 13:12:41 UTC	3484	IN	Data Raw: 64 39 35 0d 0a 2f 74 72 61 63 6b 69 6e 67 2e 6a 75 73 74 70 72 65 6d 69 75 6d 2e 63 6f 6d 2f 74 72 61 63 6b 69 6e 67 2e 67 69 66 27 20 2b 20 74 72 50 61 72 61 6d 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 69 78 65 6c 54 72 61 63 6b 69 6e 67 28 73 73 70 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 67 65 74 54 72 61 63 6b 55 72 6c 28 73 73 70 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6d 67 50 69 78 65 6c 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 0a 20 20 20 20 20 20 20 20 69 6d 67 50 69 78 65 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 20 3d 20 22 66 69 78 65 64 22 3b 0a 20 20 20 20 20 20 20 20 69 6d 67 50 69 78 65 6c 2e Data Ascii: d95/tracking.justpremium.com/tracking.gif' + trParams; } function pixelTracking(ssp) { var url = getTrackUrl(ssp); var imgPixel = window.document.createElement("img"); imgPixel.style.position = "fixed"; imgPixel.
2024-04-19 13:12:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	50026	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	621	OUT	GET /files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 507853 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:05:42 GMT ETag: "11e81cb9c1f9e4a9f76454ef3e180919" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 x-amz-version-id: 3ou9ldE6xuXP2aZq0vMg38Q.E9O0EmM_ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0459f0f7053eeb224fd9fe0f5db5970a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: qEqGDHO25UqVIvci9f8G1MLOQ-zfDiq7V8yKPXiR6ERB7PY3QH9-_g==
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 2f 2a 0a 45 6e 61 62 6c 65 64 20 4d 6f 64 75 6c 65 73 3a 20 70 72 65 62 69 64 2d 63 6f 72 65 2c 6b 65 79 77 6f 72 64 73 2c 63 6f 6e 6e 65 63 74 49 64 53 79 73 74 65 6d 2c 63 6d 70 2c 33 33 61 63 72 6f 73 73 49 64 53 79 73 74 65 6d 2c 63 68 75 6e 6b 2c 63 61 74 65 67 6f 72 79 54 72 61 6e 73 6c 61 74 69 6f 6e 4d 61 70 70 69 6e 67 2c 69 64 35 49 64 53 79 73 74 65 6d 2c 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 6f 72 74 62 43 6f 6e 76 65 72 74 65 72 2c 63 72 65 61 74 69 76 65 2d 72 65 6e 64 65 72 65 72 2d 64 69 73 70 6c 61 79 2c 73 63 68 61 69 6e 2c 6c 6f 74 61 6d 65 50 61 6e 6f 72 61 6d 61 49 64 53 79 73 74 65 6d 2c 68 74 6d 6c 45 73 63 61 70 65 2c 75 72 6c 55 74 69 6c 73 2c 75 6e 69 66 69 65 64 49 64 53 79 73 74 65 6d 2c 69 6e 73 74 69 63 61 74 6f 72 Data Ascii: /*Enabled Modules: prebid-core,keywords,connectIdSystem,cmp,33acrossIdSystem,chunk,categoryTranslationMapping,id5IdSystem,gdprEnforcement,ortbConverter,creative-renderer-display,schain,lotamePanoramaIdSystem,htmlEscape,urlUtils,unifiedIdSystem,insticator
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 7b 7d 2c 49 2e 51 66 2c 65 2e 63 6f 6e 66 69 67 4e 61 6d 65 29 29 7d 76 61 72 20 5f 3d 28 30 2c 6c 2e 7a 33 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 62 69 64 64 65 72 43 6f 64 65 2c 74 3d 65 2e 61 75 63 74 69 6f 6e 49 64 2c 72 3d 65 2e 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 2c 69 3d 65 2e 61 64 55 6e 69 74 73 2c 6f 3d 65 2e 73 72 63 2c 63 3d 65 2e 6d 65 74 72 69 63 73 3b 72 65 74 75 72 6e 20 69 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 73 3d 69 2e 62 69 64 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 64 65 72 3d 3d 3d 6e 7d 29 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 26 26 30 3d 3d 3d 73 2e 6c 65 6e Data Ascii: {},I.Qf,e.configName))}var _=(0,l.z3)("sync",(function(e){var n=e.bidderCode,t=e.auctionId,r=e.bidderRequestId,i=e.adUnits,o=e.src,c=e.metrics;return i.reduce((function(e,i){var s=i.bids.filter((function(e){return e.bidder===n}));return null==n&&0===s.len
2024-04-19 13:12:41 UTC	279	IN	Data Raw: 69 6f 6e 43 6f 6e 66 69 67 73 29 2c 6f 3d 72 2e 62 69 64 73 29 3a 6f 3d 72 2c 6f 26 26 28 28 30 2c 76 2e 69 73 41 72 72 61 79 29 28 6f 29 3f 6f 2e 66 6f 72 45 61 63 68 28 61 29 3a 61 28 6f 29 29 2c 68 28 29 7d 29 29 2c 70 3d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6d 28 29 2c 64 28 65 2c 6e 29 2c 68 28 29 7d 29 29 3b 75 28 6e 29 3b 76 61 72 20 6d 3d 74 2e 73 74 61 72 74 54 69 6d 69 6e 67 28 22 6e 65 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 29 7b 76 61 72 20 72 2c 69 3d 6e 2e 6f 70 74 69 6f 6e 73 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2c 69 2c 7b 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3a 21 28 6e 75 6c 6c 21 3d 69 26 26 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 Data Ascii: ionConfigs),o=r.bids):o=r,o&&((0,v.isArray)(o)?o.forEach(a):a(o)),h()})),p=o((function(e,n){m(),d(e,n),h()}));u(n);var m=t.startTiming("net");function y(t){var r,i=n.options;return Object.assign(t,i,{browsingTopics:!(null!=i&&i.hasOwnProperty("browsingTop
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 29 26 26 28 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 62 2e 53 2e 67 65 74 28 65 2e 63 6f 64 65 2c 22 74 6f 70 69 63 73 48 65 61 64 65 72 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 29 26 26 28 30 2c 77 2e 78 44 29 28 43 2e 6f 4b 2c 28 30 2c 45 2e 54 29 28 41 2e 55 4c 2c 65 2e 63 6f 64 65 29 29 29 7d 29 7d 73 77 69 74 63 68 28 6e 2e 6d 65 74 68 6f 64 29 7b 63 61 73 65 22 47 45 54 22 3a 69 28 22 22 2e 63 6f 6e 63 61 74 28 6e 2e 75 72 6c 29 2e 63 6f 6e 63 61 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 72 65 74 75 72 6e 22 3f 22 2e 63 6f 6e 63 61 74 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 72 2e 5a 29 28 65 29 3f 28 30 2c 76 2e 70 61 72 73 65 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 65 74 65 72 73 29 28 65 29 3a 65 29 3b 72 65 74 75 Data Ascii: )&&((null===(r=b.S.get(e.code,"topicsHeader"))\|\|void 0===r\|\|r)&&(0,w.xD)(C.oK,(0,E.T)(A.UL,e.code)))})}switch(n.method){case"GET":i("".concat(n.url).concat(function(e){if(e)return"?".concat("object"===(0,r.Z)(e)?(0,v.parseQueryStringParameters)(e):e);retu
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 3d 3d 75 2e 62 61 63 6b 75 70 4f 6e 6c 79 7c 7c 21 65 2e 72 65 6e 64 65 72 65 72 29 26 26 28 70 3d 75 29 2c 70 26 26 28 65 2e 72 65 6e 64 65 72 65 72 3d 73 2e 54 68 2e 69 6e 73 74 61 6c 6c 28 7b 75 72 6c 3a 70 2e 75 72 6c 2c 63 6f 6e 66 69 67 3a 70 2e 6f 70 74 69 6f 6e 73 7d 29 2c 65 2e 72 65 6e 64 65 72 65 72 2e 73 65 74 52 65 6e 64 65 72 28 70 2e 72 65 6e 64 65 72 29 29 3b 76 61 72 20 76 3d 48 28 65 2e 6d 65 64 69 61 54 79 70 65 2c 66 2c 64 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 6d 65 64 69 61 54 79 70 65 50 72 69 63 65 47 72 61 6e 75 6c 61 72 69 74 79 22 29 29 2c 6d 3d 28 30 2c 61 2e 44 29 28 65 2e 63 70 6d 2c 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 72 2e 5a 29 28 76 29 3f 76 3a 64 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 63 75 73 74 6f 6d Data Ascii: ==u.backupOnly\|\|!e.renderer)&&(p=u),p&&(e.renderer=s.Th.install({url:p.url,config:p.options}),e.renderer.setRender(p.render));var v=H(e.mediaType,f,d.vc.getConfig("mediaTypePriceGranularity")),m=(0,a.D)(e.cpm,"object"===(0,r.Z)(v)?v:d.vc.getConfig("custom
2024-04-19 13:12:41 UTC	2048	IN	Data Raw: 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 28 7b 7d 2c 6e 29 29 2c 6e 7d 28 30 2c 63 2e 6c 6f 67 45 72 72 6f 72 29 28 22 6d 65 72 67 65 43 6f 6e 66 69 67 20 69 6e 70 75 74 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 2c 73 65 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 63 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 29 28 65 29 3f 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2c 74 29 29 3a 28 30 2c 63 2e 6c 6f 67 45 72 72 6f 72 29 28 22 64 65 66 61 75 6c 74 73 20 6d Data Ascii: {Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}({},n)),n}(0,c.logError)("mergeConfig input must be an object")},setDefaults:function(t){(0,c.isPlainObject)(e)?(Object.assign(e,t),Object.assign(n,t)):(0,c.logError)("defaults m
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 7d 29 2c 6d 28 74 68 69 73 2c 49 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 6d 28 74 68 69 73 2c 54 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 6d 28 74 68 69 73 2c 4f 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 21 30 7d 29 2c 6d 28 74 68 69 73 2c 42 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 28 30 2c 64 2e 5a 29 28 74 68 69 73 2c 22 67 65 6e 65 72 61 74 65 64 54 69 6d 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 64 2e 5a 29 28 74 68 69 73 2c 22 68 61 73 68 46 69 65 6c 64 73 22 2c 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 72 65 73 65 74 28 29 7d 72 65 74 75 72 6e 28 30 2c 73 2e 5a 29 28 65 2c 5b 7b 6b 65 79 3a 22 72 Data Ascii: }),m(this,I,{writable:!0,value:void 0}),m(this,T,{writable:!0,value:void 0}),m(this,O,{writable:!0,value:!0}),m(this,B,{writable:!0,value:void 0}),(0,d.Z)(this,"generatedTime",void 0),(0,d.Z)(this,"hashFields",void 0),this.reset()}return(0,s.Z)(e,[{key:"r
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 20 72 3d 22 6e 61 74 69 76 65 22 2c 69 3d 22 76 69 64 65 6f 22 2c 6f 3d 22 62 61 6e 6e 65 72 22 2c 61 3d 22 61 64 70 6f 64 22 7d 2c 37 30 30 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 46 42 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 2c 46 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 4a 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 53 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 55 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 61 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 65 36 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 65 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: r="native",i="video",o="banner",a="adpod"},70059:function(e,n,t){t.d(n,{FB:function(){return H},Fb:function(){return U},JL:function(){return z},Sg:function(){return m},Ur:function(){return x},a$:function(){return N},e6:function(){return Z},eK:function(){
2024-04-19 13:12:41 UTC	2048	IN	Data Raw: 65 2e 61 64 55 6e 69 74 43 6f 64 65 2c 72 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2b 22 70 78 22 3a 22 31 30 30 25 22 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 72 3d 63 28 6e 2c 74 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 72 29 3b 72 65 74 75 72 6e 20 69 26 26 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 69 73 47 70 74 50 75 62 61 64 73 44 65 66 69 6e 65 64 29 28 29 3f 73 28 65 29 3a 28 30 2c 75 2e 69 73 41 70 6e 47 65 74 54 61 67 44 65 66 69 6e 65 64 29 28 29 3f 64 28 6e 29 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 28 Data Ascii: e.adUnitCode,r=e.width,i=e.height;function o(e){return e?e+"px":"100%"}function a(e){var r=c(n,t),i=document.getElementById(r);return i&&i.querySelector(e)}function c(e,n){return(0,u.isGptPubadsDefined)()?s(e):(0,u.isApnGetTagDefined)()?d(n):n}function s(
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 72 6f 70 65 72 20 73 69 7a 65 73 20 66 69 65 6c 64 2e 20 20 50 6c 65 61 73 65 20 65 6e 73 75 72 65 20 74 68 65 20 73 69 7a 65 73 20 61 72 65 20 6c 69 73 74 65 64 20 6c 69 6b 65 3a 20 5b 5b 33 30 30 2c 20 32 35 30 5d 2c 20 2e 2e 2e 5d 2e 20 20 52 65 6d 6f 76 69 6e 67 20 69 6e 76 61 6c 69 64 20 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 20 6f 62 6a 65 63 74 20 66 72 6f 6d 20 72 65 71 75 65 73 74 2e 22 29 2c 64 65 6c 65 74 65 20 6e 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 6e 3d 28 30 2c 75 2e 64 65 65 70 43 6c 6f 6e 65 29 28 65 29 2c 74 3d 6e 2e 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 3b 69 66 28 74 2e 70 6c 61 79 65 72 53 69 7a 65 29 7b 76 61 72 20 72 3d 22 6e 75 Data Ascii: roper sizes field. Please ensure the sizes are listed like: [[300, 250], ...]. Removing invalid mediaTypes.banner object from request."),delete n.mediaTypes.banner),n}function $(e){var n=(0,u.deepClone)(e),t=n.mediaTypes.video;if(t.playerSize){var r="nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	50022	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	621	OUT	GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10-hb.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 144131 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:05:47 GMT ETag: "b32038724d4bdd891b2eb5991b7c39f6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=60 x-amz-version-id: zuG26uP3D15tdaJ912YdlN34GbcTc789 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e880df37740c4e68e519f8478d14cb88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: BmzO4BOwaoodmWgtnB7yVDL-KqG26qFhOPWLOMkqjdxx7rIhSfAO-w==
2024-04-19 13:12:41 UTC	15641	IN	Data Raw: 76 61 72 20 69 6e 73 74 69 63 61 74 6f 72 43 6f 6d 6d 65 6e 74 69 6e 67 55 6e 69 74 53 65 74 74 69 6e 67 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 69 64 5c 22 3a 5c 22 35 63 37 62 65 62 63 63 2d 64 39 30 65 2d 34 61 31 61 2d 62 65 38 66 2d 37 64 63 32 66 34 65 65 36 38 63 38 5c 22 2c 5c 22 6e 65 78 74 54 6f 42 75 74 74 6f 6e 41 64 44 65 73 6b 74 6f 70 5c 22 3a 5c 22 44 49 53 41 42 4c 45 44 5c 22 2c 5c 22 62 65 6c 6f 77 4c 6f 61 64 4d 6f 72 65 42 75 74 74 6f 6e 41 64 44 65 73 6b 74 6f 70 5c 22 3a 5c 22 44 49 53 41 42 4c 45 44 5c 22 2c 5c 22 62 65 6c 6f 77 4c 6f 61 64 4d 6f 72 65 42 75 74 74 6f 6e 41 64 4d 6f 62 69 6c 65 5c 22 3a 5c 22 44 49 53 41 42 4c 45 44 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 32 30 32 33 2d 30 35 2d 33 Data Ascii: var insticatorCommentingUnitSettings = JSON.parse("{\"id\":\"5c7bebcc-d90e-4a1a-be8f-7dc2f4ee68c8\",\"nextToButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdMobile\":\"DISABLED\",\"createdAt\":\"2023-05-3
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 47 46 3a 22 61 64 61 67 69 6f 20 61 64 78 20 61 6d 78 20 63 72 69 74 65 6f 20 69 6e 6d 6f 62 69 20 69 6e 6d 6f 62 69 5f 6f 6b 6f 20 69 6e 73 74 69 63 61 74 6f 72 20 6f 70 65 6e 78 20 72 75 62 69 63 6f 6e 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 47 3a 22 61 64 61 67 69 6f 20 61 64 78 20 61 6d 78 20 63 72 69 74 65 6f 20 69 6e 6d 6f 62 69 20 69 6e 6d 6f 62 69 5f 6f 6b 6f 20 6f 70 65 6e 78 20 72 75 62 69 63 6f 6e 20 74 65 61 64 73 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 48 3a 22 61 64 61 67 69 6f 20 61 64 78 20 61 6d 78 20 63 72 69 74 65 6f 20 69 6e 6d 6f 62 69 20 69 6e 6d 6f 62 69 5f 6f 6b 6f 20 69 6e 73 74 69 63 61 74 6f 72 20 6f 70 65 6e 78 20 72 75 62 69 63 6f 6e 20 74 65 61 64 73 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 49 3a 22 61 64 61 67 69 6f 20 Data Ascii: GF:"adagio adx amx criteo inmobi inmobi_oko insticator openx rubicon".split(" "),GG:"adagio adx amx criteo inmobi inmobi_oko openx rubicon teads".split(" "),GH:"adagio adx amx criteo inmobi inmobi_oko insticator openx rubicon teads".split(" "),GI:"adagio
2024-04-19 13:12:41 UTC	1024	IN	Data Raw: 76 69 65 77 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 6e 61 62 6c 65 64 47 41 4d 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 31 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 32 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 34 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 36 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 63 6d 74 2d 31 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 63 6d 74 2d 32 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 69 6e 63 6d 74 2d 6c 6d 62 74 6e 2d 33 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 69 6e 63 6d 74 2d 6c 6d Data Ascii: view".split(" "),enabledGAM:"div-insticator-ad-1 div-insticator-ad-2 div-insticator-ad-3 div-insticator-ad-4 div-insticator-ad-5 div-insticator-ad-6 div-insticator-ad-cmt-1 div-insticator-ad-cmt-2 div-insticator-ad-incmt-lmbtn-3 div-insticator-ad-incmt-lm
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 73 74 69 63 61 74 6f 72 2d 61 64 2d 36 22 3a 5b 5b 33 30 30 2c 36 30 30 5d 2c 5b 37 32 38 2c 39 30 5d 2c 5b 32 35 30 2c 32 35 30 5d 2c 5b 34 36 38 2c 36 30 5d 2c 5b 31 32 30 2c 36 30 30 5d 2c 5b 33 32 30 2c 35 30 5d 2c 5b 31 36 30 2c 36 30 30 5d 2c 5b 39 37 30 2c 39 30 5d 2c 5b 33 32 30 2c 31 30 30 5d 2c 5b 33 30 30 2c 32 35 30 5d 2c 5b 39 37 30 2c 32 35 30 5d 2c 5b 33 33 36 2c 32 38 30 5d 5d 2c 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 63 6d 74 2d 31 22 3a 5b 5b 33 30 30 2c 36 30 30 5d 2c 5b 37 32 38 2c 39 30 5d 2c 5b 32 35 30 2c 32 35 30 5d 2c 5b 34 36 38 2c 36 30 5d 2c 5b 31 32 30 2c 36 30 30 5d 2c 5b 33 32 30 2c 35 30 5d 2c 5b 31 36 30 2c 36 30 30 5d 2c 5b 39 37 30 2c 39 30 5d 2c 5b 33 32 30 2c 31 30 30 5d 2c 5b 33 30 30 2c 32 35 30 5d Data Ascii: sticator-ad-6":[[300,600],[728,90],[250,250],[468,60],[120,600],[320,50],[160,600],[970,90],[320,100],[300,250],[970,250],[336,280]],"div-insticator-ad-cmt-1":[[300,600],[728,90],[250,250],[468,60],[120,600],[320,50],[160,600],[970,90],[320,100],[300,250]
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 70 6c 61 63 65 6d 65 6e 74 49 64 3a 22 32 30 30 34 33 35 38 36 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 33 33 61 63 72 6f 73 73 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 73 69 74 65 49 64 3a 22 62 6c 54 5f 78 57 44 42 61 72 36 79 6f 6f 61 4b 6c 49 64 38 73 51 22 2c 70 72 6f 64 75 63 74 49 64 3a 22 73 69 61 62 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 69 6e 73 74 69 63 61 74 6f 72 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 32 35 30 2c 32 35 30 5d 2c 5b 33 32 30 2c 31 30 30 5d 2c 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 61 64 55 6e 69 74 49 64 3a 22 30 31 48 4d 45 58 34 56 4a 58 54 5a 48 51 32 33 57 39 5a 46 Data Ascii: 50]],params:{placementId:"20043586"}}},{name:"33across",desktop:{sizeArray:[[300,250]],params:{siteId:"blT_xWDBar6yooaKlId8sQ",productId:"siab"}}},{name:"insticator",desktop:{sizeArray:[[250,250],[320,100],[300,250]],params:{adUnitId:"01HMEX4VJXTZHQ23W9ZF
2024-04-19 13:12:41 UTC	2048	IN	Data Raw: 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6f 72 67 3a 22 30 31 67 61 72 67 39 36 63 38 38 62 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 72 69 73 65 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6f 72 67 3a 22 36 31 32 34 63 61 65 64 39 63 37 61 64 62 30 30 30 31 63 30 32 38 64 38 22 7d 7d 2c 6d 6f 62 69 6c 65 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6f 72 67 3a 22 36 31 32 34 63 61 65 64 39 63 37 61 64 62 30 30 30 31 63 30 32 38 64 38 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 6f 70 65 6e 78 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 Data Ascii: sizeArray:[[300,250]],params:{org:"01garg96c88b"}}},{name:"rise",desktop:{sizeArray:[[300,250]],params:{org:"6124caed9c7adb0001c028d8"}},mobile:{sizeArray:[[300,250]],params:{org:"6124caed9c7adb0001c028d8"}}},{name:"openx",desktop:{sizeArray:[[300,250]],p
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 7d 2c 7b 6e 61 6d 65 3a 22 61 64 61 67 69 6f 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 3a 22 31 33 37 36 22 2c 73 69 74 65 3a 22 6a 75 73 74 6a 61 72 65 64 2d 63 6f 6d 22 2c 61 64 55 6e 69 74 45 6c 65 6d 65 6e 74 49 64 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 2c 70 6c 61 63 65 6d 65 6e 74 3a 22 64 2d 73 74 64 2d 35 22 7d 7d 2c 6d 6f 62 69 6c 65 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 3a 22 31 33 37 36 22 2c 73 69 74 65 3a 22 6a 75 73 74 6a 61 72 65 64 2d 63 6f 6d 22 2c 61 64 55 6e 69 74 45 6c 65 6d 65 6e 74 49 64 Data Ascii: },{name:"adagio",desktop:{sizeArray:[[300,250]],params:{organizationId:"1376",site:"justjared-com",adUnitElementId:"div-insticator-ad-5",placement:"d-std-5"}},mobile:{sizeArray:[[300,250]],params:{organizationId:"1376",site:"justjared-com",adUnitElementId
2024-04-19 13:12:41 UTC	1024	IN	Data Raw: 73 54 61 67 20 3d 24 7b 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 2c 6f 2c 61 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 69 29 7b 65 5b 74 5d 2e 5f 51 2e 70 75 73 68 28 5b 6e 2c 69 5d 29 7d 65 5b 74 5d 7c 7c 28 65 5b 74 5d 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 22 69 22 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 65 74 63 68 42 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 22 66 22 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 65 74 44 69 73 70 6c 61 79 42 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 61 72 67 65 74 69 6e 67 4b 65 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 2c 64 70 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: sTag =${function(){var t,e,n;!function(t,e,n,i,o,a,s){function r(n,i){e[t]._Q.push([n,i])}e[t]\|\|(e[t]={init:function(){r("i",arguments)},fetchBids:function(){r("f",arguments)},setDisplayBids:function(){},targetingKeys:function(){return[]},dpa:function(){r
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 6f 72 41 75 63 74 69 6f 6e 3d 74 2c 75 3d 74 3d 3e 64 2e 64 65 66 69 6e 65 47 41 4d 53 6c 6f 74 73 3d 74 2c 67 3d 28 29 3d 3e 64 3b 28 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 7c 7c 7b 7d 29 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 53 74 61 74 65 3d 67 2c 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 3d 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 7c 7c 7b 71 3a 5b 5d 7d 3b 6c 65 74 20 70 3d 7b 7d 3b 63 6f 6e 73 74 20 66 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 6c 61 73 74 44 69 73 70 6c 61 79 65 64 3d 65 29 7d 2c 6d 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 74 69 6d 65 73 52 65 66 72 65 73 68 65 64 3d 65 29 7d 2c 68 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 72 65 66 72 65 Data Ascii: orAuction=t,u=t=>d.defineGAMSlots=t,g=()=>d;(window.Insticator\|\|{}).getContainerState=g,window.Insticator=window.Insticator\|\|{q:[]};let p={};const f=(t,e)=>{p[t]&&(p[t].lastDisplayed=e)},m=(t,e)=>{p[t]&&(p[t].timesRefreshed=e)},h=(t,e)=>{p[t]&&(p[t].refre
2024-04-19 13:12:41 UTC	1024	IN	Data Raw: 70 65 72 74 79 28 74 68 69 73 2c 22 69 73 4f 6e 53 63 72 65 65 6e 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 65 6e 64 65 72 54 69 6d 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 65 73 70 6f 6e 73 65 54 69 6d 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 Data Ascii: perty(this,"isOnScreen",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"renderTime",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"responseTime",{enumerable:!0,configurable:!0,wr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	50027	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	621	OUT	GET /files/instibid/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 507853 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:05:43 GMT ETag: "11e81cb9c1f9e4a9f76454ef3e180919" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 x-amz-version-id: Jc_laVSq9bOuLEq2JvQ0K4ZMg2Wq19YA Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b18bcd54d0f77ca53d7c0ba4b9e54284.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: sYDex2TUqgLAzQ74gLuuVKT2qg4tggWPCMvWdCWS90k7BwZOLEHp0w==
2024-04-19 13:12:41 UTC	1290	IN	Data Raw: 2f 2a 0a 45 6e 61 62 6c 65 64 20 4d 6f 64 75 6c 65 73 3a 20 70 72 65 62 69 64 2d 63 6f 72 65 2c 6b 65 79 77 6f 72 64 73 2c 63 6f 6e 6e 65 63 74 49 64 53 79 73 74 65 6d 2c 63 6d 70 2c 33 33 61 63 72 6f 73 73 49 64 53 79 73 74 65 6d 2c 63 68 75 6e 6b 2c 63 61 74 65 67 6f 72 79 54 72 61 6e 73 6c 61 74 69 6f 6e 4d 61 70 70 69 6e 67 2c 69 64 35 49 64 53 79 73 74 65 6d 2c 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 6f 72 74 62 43 6f 6e 76 65 72 74 65 72 2c 63 72 65 61 74 69 76 65 2d 72 65 6e 64 65 72 65 72 2d 64 69 73 70 6c 61 79 2c 73 63 68 61 69 6e 2c 6c 6f 74 61 6d 65 50 61 6e 6f 72 61 6d 61 49 64 53 79 73 74 65 6d 2c 68 74 6d 6c 45 73 63 61 70 65 2c 75 72 6c 55 74 69 6c 73 2c 75 6e 69 66 69 65 64 49 64 53 79 73 74 65 6d 2c 69 6e 73 74 69 63 61 74 6f 72 Data Ascii: /*Enabled Modules: prebid-core,keywords,connectIdSystem,cmp,33acrossIdSystem,chunk,categoryTranslationMapping,id5IdSystem,gdprEnforcement,ortbConverter,creative-renderer-display,schain,lotamePanoramaIdSystem,htmlEscape,urlUtils,unifiedIdSystem,insticator
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 74 68 69 73 2e 72 65 6e 64 65 72 4e 6f 77 3d 66 2c 74 68 69 73 2e 6c 6f 61 64 65 64 3d 73 2c 74 68 69 73 2e 63 6d 64 3d 5b 5d 2c 74 68 69 73 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 2e 6c 6f 61 64 65 64 3f 65 2e 63 61 6c 6c 28 29 3a 6e 2e 63 6d 64 2e 70 75 73 68 28 65 29 3a 28 30 2c 69 2e 6c 6f 67 45 72 72 6f 72 29 28 22 43 6f 6d 6d 61 6e 64 73 20 67 69 76 65 6e 20 74 6f 20 52 65 6e 64 65 72 65 72 2e 70 75 73 68 20 6d 75 73 74 20 62 65 20 77 72 61 70 70 65 64 20 69 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 75 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 70 72 6f 63 65 73 73 28 29 7d 2c 74 68 69 Data Ascii: this.renderNow=f,this.loaded=s,this.cmd=[],this.push=function(e){"function"==typeof e?n.loaded?e.call():n.cmd.push(e):(0,i.logError)("Commands given to Renderer.push must be wrapped in a function")},this.callback=u\|\|function(){n.loaded=!0,n.process()},thi
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 2c 72 3d 74 2e 67 65 74 53 32 53 42 69 64 64 65 72 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 7a 3a 72 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6f 3d 69 28 6e 29 3b 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 68 61 73 28 65 2e 62 69 64 64 65 72 29 7d 29 29 7d 29 2c 22 66 69 6c 74 65 72 42 69 64 73 46 6f 72 41 64 55 6e 69 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 6e 29 7b 76 61 72 20 74 3d 28 30 2c 61 2e 64 65 65 70 43 6c 6f 6e 65 29 28 65 29 2c 72 3d 21 31 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 62 69 Data Ascii: nts[2]?arguments[2]:{},r=t.getS2SBidders,i=void 0===r?z:r;if(null==n)return e;var o=i(n);return e.filter((function(e){return o.has(e.bidder)}))}),"filterBidsForAdUnit");function M(e,n){var t=(0,a.deepClone)(e),r=!1;return t.forEach((function(e){var t=e.bi
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 2e 6b 5f 2e 72 65 67 69 73 74 65 72 53 79 6e 63 28 6e 2e 74 79 70 65 2c 65 2e 63 6f 64 65 2c 6e 2e 75 72 6c 29 7d 29 29 2c 73 2e 6b 5f 2e 62 69 64 64 65 72 44 6f 6e 65 28 65 2e 63 6f 64 65 29 29 7d 7d 29 2c 22 72 65 67 69 73 74 65 72 53 79 6e 63 73 22 29 2c 6a 3d 28 30 2c 68 2e 7a 33 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 7d 29 2c 22 61 64 64 43 6f 6d 70 6f 6e 65 6e 74 41 75 63 74 69 6f 6e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 6e 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 2c 72 3d 74 2e 69 6e 64 65 78 2c 6f 3d 76 6f 69 64 20 Data Ascii: function(n){s.k_.registerSync(n.type,e.code,n.url)})),s.k_.bidderDone(e.code))}}),"registerSyncs"),j=(0,h.z3)("sync",(function(e,n){}),"addComponentAuction");function U(e,n){var t=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},r=t.index,o=void
2024-04-19 13:12:41 UTC	1024	IN	Data Raw: 4c 67 3a 74 3d 3d 3d 77 2e 51 6c 2e 4d 32 3f 6e 2e 70 62 4d 67 3a 74 3d 3d 3d 77 2e 51 6c 2e 6c 6a 3f 6e 2e 70 62 48 67 3a 74 3d 3d 3d 77 2e 51 6c 2e 71 4e 3f 6e 2e 70 62 43 67 3a 76 6f 69 64 20 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 6e 29 7b 72 65 74 75 72 6e 7b 6b 65 79 3a 65 2c 76 61 6c 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 67 65 74 56 61 6c 75 65 29 28 65 2c 6e 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 2c 6e 29 7b 76 61 72 20 74 3d 77 2e 54 44 2c 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6d 2e 53 2e 73 65 74 74 69 6e 67 73 46 6f 72 28 6e Data Ascii: Lg:t===w.Ql.M2?n.pbMg:t===w.Ql.lj?n.pbHg:t===w.Ql.qN?n.pbCg:void 0}};function J(e,n){return{key:e,val:"function"==typeof n?function(e,t){return n(e,t)}:function(e){return(0,i.getValue)(e,n)}}}function Q(e,n){var t=w.TD,r=Object.assign({},m.S.settingsFor(n
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 6e 2e 6b 65 79 3d 3d 3d 65 7d 29 29 26 26 61 2e 70 75 73 68 28 4a 28 65 2c 22 76 69 64 65 6f 43 61 63 68 65 4b 65 79 22 29 29 7d 29 29 2c 64 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 63 61 63 68 65 2e 75 72 6c 22 29 26 26 28 21 6e 7c 7c 21 31 21 3d 3d 6d 2e 53 2e 67 65 74 28 6e 2c 22 73 65 6e 64 53 74 61 6e 64 61 72 64 54 61 72 67 65 74 69 6e 67 22 29 29 29 7b 76 61 72 20 75 3d 28 30 2c 69 2e 70 61 72 73 65 55 72 6c 29 28 64 2e 76 63 2e 67 65 74 43 6f 6e 66 69 67 28 22 63 61 63 68 65 2e 75 72 6c 22 29 29 3b 76 6f 69 64 20 30 3d 3d 3d 28 30 2c 67 2e 73 45 29 28 61 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6b 65 79 3d 3d 3d 74 2e 43 41 43 48 45 5f 48 4f 53 54 7d 29 29 26 26 61 2e 70 75 73 68 28 4a 28 74 2e 43 Data Ascii: eturn n.key===e}))&&a.push(J(e,"videoCacheKey"))})),d.vc.getConfig("cache.url")&&(!n\|\|!1!==m.S.get(n,"sendStandardTargeting"))){var u=(0,i.parseUrl)(d.vc.getConfig("cache.url"));void 0===(0,g.sE)(a,(function(e){return e.key===t.CACHE_HOST}))&&a.push(J(t.C
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 6d 28 74 68 69 73 2c 49 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 6d 28 74 68 69 73 2c 54 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 6d 28 74 68 69 73 2c 4f 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 21 30 7d 29 2c 6d 28 74 68 69 73 2c 42 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 28 30 2c 64 2e 5a 29 28 74 68 69 73 2c 22 67 65 6e 65 72 61 74 65 64 54 69 6d 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 64 2e 5a 29 28 74 68 69 73 2c 22 68 61 73 68 46 69 65 6c 64 73 22 2c 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 72 65 73 65 74 28 29 7d 72 65 74 75 72 6e 28 30 2c 73 2e Data Ascii: ,value:void 0}),m(this,I,{writable:!0,value:void 0}),m(this,T,{writable:!0,value:void 0}),m(this,O,{writable:!0,value:!0}),m(this,B,{writable:!0,value:void 0}),(0,d.Z)(this,"generatedTime",void 0),(0,d.Z)(this,"hashFields",void 0),this.reset()}return(0,s.
2024-04-19 13:12:41 UTC	12392	IN	Data Raw: 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 22 6e 61 74 69 76 65 22 2c 69 3d 22 76 69 64 65 6f 22 2c 6f 3d 22 62 61 6e 6e 65 72 22 2c 61 3d 22 61 64 70 6f 64 22 7d 2c 37 30 30 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 46 42 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 2c 46 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 4a 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 53 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 55 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 61 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 65 36 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 65 Data Ascii: turn i}});var r="native",i="video",o="banner",a="adpod"},70059:function(e,n,t){t.d(n,{FB:function(){return H},Fb:function(){return U},JL:function(){return z},Sg:function(){return m},Ur:function(){return x},a$:function(){return N},e6:function(){return Z},e
2024-04-19 13:12:41 UTC	1024	IN	Data Raw: 3d 68 28 68 28 7b 7d 2c 4a 28 65 29 29 2c 7b 7d 2c 7b 61 73 73 65 74 73 3a 5b 5d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 29 7b 76 61 72 20 69 3d 6e 2e 61 73 73 65 74 73 2e 66 69 6e 64 28 65 29 3b 6e 75 6c 6c 21 3d 69 26 26 28 72 28 69 3d 28 30 2c 63 2e 64 65 65 70 43 6c 6f 6e 65 29 28 69 29 29 2c 74 2e 61 73 73 65 74 73 2e 70 75 73 68 28 69 29 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 21 65 5b 6e 5d 7d 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 4c 28 65 5b 6e 5d 29 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 74 69 74 6c 65 22 3a 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: =h(h({},J(e)),{},{assets:[]});function r(e,r){var i=n.assets.find(e);null!=i&&(r(i=(0,c.deepClone)(i)),t.assets.push(i))}return Object.keys(e).filter((function(n){return!!e[n]})).forEach((function(n){var t=L(e[n]);switch(n){case"title":r((function(e){retu
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 73 3d 5b 5d 3b 76 61 72 20 63 2c 73 3d 5b 5d 3b 65 2e 69 6d 70 74 72 61 63 6b 65 72 73 26 26 28 63 3d 74 2e 69 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 73 29 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 28 30 2c 72 2e 5a 29 28 65 2e 69 6d 70 74 72 61 63 6b 65 72 73 29 29 3b 76 61 72 20 64 2c 66 3d 67 28 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 76 65 6e 74 74 72 61 63 6b 65 72 73 29 7c 7c 5b 5d 29 3b 74 72 79 7b 66 6f 72 28 66 2e 73 28 29 3b 21 28 64 3d 66 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 6c 3d 64 2e 76 61 6c 75 65 3b 6c 2e 65 76 65 6e 74 3d 3d 3d 53 26 26 6c 2e 6d 65 74 68 6f 64 3d 3d 3d 42 2e 69 6d 67 26 26 74 2e 69 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 73 2e 70 75 73 Data Ascii: essionTrackers=[];var c,s=[];e.imptrackers&&(c=t.impressionTrackers).push.apply(c,(0,r.Z)(e.imptrackers));var d,f=g((null==e?void 0:e.eventtrackers)\|\|[]);try{for(f.s();!(d=f.n()).done;){var l=d.value;l.event===S&&l.method===B.img&&t.impressionTrackers.pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	50054	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	1553	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=2&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_InContent1%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fincontent%2Fhome%2F1%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:41 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 293 Connection: close Date: Fri, 19 Apr 2024 13:12:41 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 9ee0798bf3c9ce69ea61a62e7771caa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: OHjNwzlSszt0h6zdmOt3cS96637fFvDwQtGIR0M6rdbsofoq1mDSOQ==
2024-04-19 13:12:41 UTC	293	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 5f 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 69 6e 64 65 78 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 6e 2d 4f 67 75 72 79 5f 73 6e 62 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 73 6d 72 74 5f 6e 2d 54 61 70 70 78 5f 63 6e 76 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 72 62 64 5f 70 70 74 5f 6e 2d 62 61 69 64 75 5f 6e 2d 56 69 64 61 7a 6f 6f 5f 6e 2d 6e 61 74 69 76 6f 5f 61 6e 2d 64 62 35 5f 73 6f 76 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	50023	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	622	OUT	GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/606d8d15-9a87-4b2c-b63c-7fa2a3294d10-dmp.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	668	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15678 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:05:47 GMT ETag: "fa20faeda4783eddb081e9ae512ebc9a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=60 x-amz-version-id: U0bnkJ2dcemf5EUP3UjTNSP8qzg2uOgh Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e7e267d22aaab825174c9e30c630f528.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: JByriAgZMRDW19WojcUfb1hyTPOmS0-G5Fr1AsCkNvPrc5CXVbDqow==
2024-04-19 13:12:41 UTC	1306	IN	Data Raw: 76 61 72 20 49 6e 73 74 69 63 61 74 6f 72 41 70 70 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 69 29 65 2e 6f 28 69 2c 6f 29 26 26 21 65 2e 6f 28 74 2c 6f 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 5b 6f 5d 7d 29 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: var InsticatorApp;!function(){"use strict";var e={d:function(t,i){for(var o in i)e.o(i,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:i[o]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof
2024-04-19 13:12:41 UTC	14372	IN	Data Raw: 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 7d 7d 29 3b 73 2e 6f 6b 3f 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 6f 67 67 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 50 61 67 65 76 69 65 77 20 53 65 6e 74 22 29 3a 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6c 6f 67 67 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 61 2e 6c 6f 67 4d 65 73 73 61 67 65 Data Ascii: nt-type":"application/json; charset=UTF-8"}});s.ok?null===(n=null===(o=window.Insticator)\|\|void 0===o?void 0:o.logger)\|\|void 0===n\|\|n.logMessage("Pageview Sent"):null===(a=null===(r=window.Insticator)\|\|void 0===r?void 0:r.logger)\|\|void 0===a\|\|a.logMessage

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	50025	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	622	OUT	GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38-dmp.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	668	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15678 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:05:53 GMT ETag: "8c01cab23af3aee9e033f43de7caba28" x-amz-server-side-encryption: AES256 Cache-Control: max-age=60 x-amz-version-id: 0ZtKRKM4IjeU.nu_WTMekwL6FJsueMvx Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e880df37740c4e68e519f8478d14cb88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: gvXMKhm6t6HvWpnm_YJNSBbcRO94Q8iTDPMcCwvcsBFOwNdZA5gdMA==
2024-04-19 13:12:41 UTC	15678	IN	Data Raw: 76 61 72 20 49 6e 73 74 69 63 61 74 6f 72 41 70 70 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 69 29 65 2e 6f 28 69 2c 6f 29 26 26 21 65 2e 6f 28 74 2c 6f 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 5b 6f 5d 7d 29 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: var InsticatorApp;!function(){"use strict";var e={d:function(t,i){for(var o in i)e.o(i,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:i[o]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	50024	18.67.79.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	621	OUT	GET /header-tags/2cdf4c71-ad6c-487e-b43a-8f1af912284a/76ab8408-3e64-425f-a1ce-688c79050f38-hb.js HTTP/1.1 Host: d3lcz8vpax4lo2.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 144175 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 18 Apr 2024 14:05:53 GMT ETag: "84034aa66ab83fc4ba215ea6e424f3f0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=60 x-amz-version-id: PoUroky.nIRMB4YQ_RPjCEDg.IpQgK9M Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 573f3bf892e6baf323888f7038237db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: mubYHpVuOICGqXNiraWWMHyiPL8vhwDLlrDDQumTd-FMVpNDVneE6w==
2024-04-19 13:12:41 UTC	14935	IN	Data Raw: 76 61 72 20 69 6e 73 74 69 63 61 74 6f 72 43 6f 6d 6d 65 6e 74 69 6e 67 55 6e 69 74 53 65 74 74 69 6e 67 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 69 64 5c 22 3a 5c 22 65 63 66 35 61 31 32 32 2d 38 64 38 33 2d 34 38 63 66 2d 62 34 63 31 2d 39 62 39 36 66 63 35 62 36 36 37 30 5c 22 2c 5c 22 6e 65 78 74 54 6f 42 75 74 74 6f 6e 41 64 44 65 73 6b 74 6f 70 5c 22 3a 5c 22 44 49 53 41 42 4c 45 44 5c 22 2c 5c 22 62 65 6c 6f 77 4c 6f 61 64 4d 6f 72 65 42 75 74 74 6f 6e 41 64 44 65 73 6b 74 6f 70 5c 22 3a 5c 22 44 49 53 41 42 4c 45 44 5c 22 2c 5c 22 62 65 6c 6f 77 4c 6f 61 64 4d 6f 72 65 42 75 74 74 6f 6e 41 64 4d 6f 62 69 6c 65 5c 22 3a 5c 22 44 49 53 41 42 4c 45 44 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 32 30 32 33 2d 31 32 2d 32 Data Ascii: var insticatorCommentingUnitSettings = JSON.parse("{\"id\":\"ecf5a122-8d83-48cf-b4c1-9b96fc5b6670\",\"nextToButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdDesktop\":\"DISABLED\",\"belowLoadMoreButtonAdMobile\":\"DISABLED\",\"createdAt\":\"2023-12-2
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 62 69 63 6f 6e 20 73 65 65 64 74 61 67 20 73 6d 61 72 74 61 64 73 65 72 76 65 72 20 74 65 61 64 73 20 74 72 69 70 6c 65 6c 69 66 74 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 57 46 3a 22 61 64 61 67 69 6f 20 61 64 78 20 61 6d 78 20 69 6e 6d 6f 62 69 20 69 6e 6d 6f 62 69 5f 6f 6b 6f 20 69 6e 73 74 69 63 61 74 6f 72 20 6f 70 65 6e 78 20 72 75 62 69 63 6f 6e 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 0a 47 41 3a 22 61 64 61 67 69 6f 20 61 64 78 20 61 6d 78 20 63 72 69 74 65 6f 20 69 6e 6d 6f 62 69 20 69 6e 6d 6f 62 69 5f 6f 6b 6f 20 69 6e 73 74 69 63 61 74 6f 72 20 6f 70 65 6e 78 20 72 75 62 69 63 6f 6e 20 74 65 61 64 73 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 42 3a 22 61 64 61 67 69 6f 20 61 64 66 20 61 64 78 20 61 6d 61 7a 6f 6e 20 61 6d 78 20 61 70 70 6e 65 78 Data Ascii: bicon seedtag smartadserver teads triplelift".split(" "),WF:"adagio adx amx inmobi inmobi_oko insticator openx rubicon".split(" "),GA:"adagio adx amx criteo inmobi inmobi_oko insticator openx rubicon teads".split(" "),GB:"adagio adf adx amazon amx appnex
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 53 69 7a 65 4f 6e 3a 5b 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 63 6d 74 2d 31 22 2c 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 63 6d 74 2d 32 22 2c 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 69 6e 63 6d 74 2d 6c 6d 62 74 6e 2d 33 22 2c 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 69 6e 63 6d 74 2d 6c 6d 62 74 6e 2d 34 22 2c 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 69 6e 76 69 65 77 22 5d 2c 61 64 52 65 66 72 65 73 68 4f 6e 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 31 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 32 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 20 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 34 20 64 69 76 2d 69 6e Data Ascii: SizeOn:["div-insticator-ad-cmt-1","div-insticator-ad-cmt-2","div-insticator-ad-incmt-lmbtn-3","div-insticator-ad-incmt-lmbtn-4","div-insticator-ad-inview"],adRefreshOn:"div-insticator-ad-1 div-insticator-ad-2 div-insticator-ad-3 div-insticator-ad-4 div-in
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 22 2c 73 69 74 65 49 64 3a 22 31 35 35 35 37 32 22 2c 7a 6f 6e 65 49 64 3a 22 33 31 37 32 37 30 36 22 7d 7d 2c 6d 6f 62 69 6c 65 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 32 30 2c 35 30 5d 2c 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 61 63 63 6f 75 6e 74 49 64 3a 22 31 37 30 36 32 22 2c 73 69 74 65 49 64 3a 22 35 32 35 35 32 38 22 2c 7a 6f 6e 65 49 64 3a 22 33 31 37 32 37 31 38 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 6d 69 6e 75 74 65 6d 65 64 69 61 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 32 35 30 2c 32 35 30 5d 2c 5b 33 32 30 2c 35 30 5d 2c 5b 33 32 30 2c 31 30 30 5d 2c 5b 33 33 36 2c 32 38 30 5d 2c 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6f 72 67 3a 22 30 31 67 61 72 67 39 36 63 38 38 62 22 7d Data Ascii: ",siteId:"155572",zoneId:"3172706"}},mobile:{sizeArray:[[320,50],[300,250]],params:{accountId:"17062",siteId:"525528",zoneId:"3172718"}}},{name:"minutemedia",desktop:{sizeArray:[[250,250],[320,50],[320,100],[336,280],[300,250]],params:{org:"01garg96c88b"}
2024-04-19 13:12:41 UTC	4912	IN	Data Raw: 7b 6e 61 6d 65 3a 22 61 6d 78 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 74 61 67 49 64 3a 22 61 57 35 7a 64 47 6c 6a 59 58 52 76 63 69 35 6a 62 32 30 22 7d 7d 2c 0a 6d 6f 62 69 6c 65 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 74 61 67 49 64 3a 22 61 57 35 7a 64 47 6c 6a 59 58 52 76 63 69 35 6a 62 32 30 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 73 65 65 64 74 61 67 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 70 75 62 6c 69 73 68 65 72 49 64 3a 22 36 34 31 36 2d 36 35 36 31 2d 30 31 22 2c 61 64 55 6e 69 74 49 64 3a 22 32 39 35 33 37 33 37 31 22 2c 70 6c Data Ascii: {name:"amx",desktop:{sizeArray:[[300,250]],params:{tagId:"aW5zdGljYXRvci5jb20"}},mobile:{sizeArray:[[300,250]],params:{tagId:"aW5zdGljYXRvci5jb20"}}},{name:"seedtag",desktop:{sizeArray:[[300,250]],params:{publisherId:"6416-6561-01",adUnitId:"29537371",pl
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 74 61 67 69 64 3a 22 31 30 39 34 35 38 38 22 7d 7d 7d 5d 2c 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 36 22 3a 5b 7b 6e 61 6d 65 3a 22 63 72 69 74 65 6f 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6e 65 74 77 6f 72 6b 49 64 3a 22 31 31 38 31 36 22 7d 7d 2c 6d 6f 62 69 6c 65 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 6e 65 74 77 6f 72 6b 49 64 3a 22 31 31 38 31 36 22 7d 7d 7d 2c 7b 6e 61 6d 65 3a 22 73 6f 6e 6f 62 69 22 2c 64 65 73 6b 74 6f 70 3a 7b 73 69 7a 65 41 72 72 61 79 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 70 61 72 61 6d 73 3a 7b 70 6c 61 63 65 6d 65 Data Ascii: 300,250]],params:{tagid:"1094588"}}}],"div-insticator-ad-6":[{name:"criteo",desktop:{sizeArray:[[300,250]],params:{networkId:"11816"}},mobile:{sizeArray:[[300,250]],params:{networkId:"11816"}}},{name:"sonobi",desktop:{sizeArray:[[300,250]],params:{placeme
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 29 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 53 74 61 74 65 3d 67 2c 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 3d 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 7c 7c 7b 71 3a 5b 5d 7d 3b 6c 65 74 20 70 3d 7b 7d 3b 63 6f 6e 73 74 20 66 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 6c 61 73 74 44 69 73 70 6c 61 79 65 64 3d 65 29 7d 2c 6d 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 74 69 6d 65 73 52 65 66 72 65 73 68 65 64 3d 65 29 7d 2c 68 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 72 65 66 72 65 73 68 54 79 70 65 3d 65 29 7d 2c 77 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e 76 69 65 77 65 64 3d 65 29 7d 2c 62 3d 28 74 2c 65 29 3d 3e 7b 70 5b 74 5d 26 26 28 70 5b 74 5d 2e Data Ascii: ).getContainerState=g,window.Insticator=window.Insticator\|\|{q:[]};let p={};const f=(t,e)=>{p[t]&&(p[t].lastDisplayed=e)},m=(t,e)=>{p[t]&&(p[t].timesRefreshed=e)},h=(t,e)=>{p[t]&&(p[t].refreshType=e)},w=(t,e)=>{p[t]&&(p[t].viewed=e)},b=(t,e)=>{p[t]&&(p[t].
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 65 6e 64 65 72 54 69 6d 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 65 73 70 6f 6e 73 65 54 69 6d 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 65 71 75 65 73 74 54 69 6d 65 22 2c Data Ascii: ,value:void 0}),Object.defineProperty(this,"renderTime",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"responseTime",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"requestTime",
2024-04-19 13:12:41 UTC	3072	IN	Data Raw: 6f 63 75 6d 65 6e 74 2c 20 27 22 2b 74 2b 22 27 29 3b 62 72 65 61 6b 3b 7d 20 63 61 74 63 68 20 28 65 29 20 7b 63 6f 6e 74 69 6e 75 65 3b 7d 7d 7d 3c 5c 2f 73 63 72 69 70 74 3e 22 7d 28 65 29 3b 4e 74 28 6f 2c 61 29 2c 66 28 74 2c 44 61 74 65 2e 6e 6f 77 28 29 29 2c 79 28 74 2c 21 31 29 7d 7d 28 65 2c 61 2e 61 6d 7a 6e 69 69 64 2c 73 5b 30 5d 2c 73 5b 31 5d 29 29 3a 46 74 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 47 41 4d 20 64 69 73 61 62 6c 65 64 3a 20 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 6c 6f 61 64 20 41 6d 61 7a 6f 6e 20 61 64 20 66 6f 72 20 22 2b 65 29 3a 28 46 74 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 47 41 4d 20 64 69 73 61 62 6c 65 64 3a 20 4c 6f 61 64 69 6e 67 20 49 6e 73 74 62 69 64 20 61 64 20 66 72 6f 6d 20 22 2b 61 2e 62 69 64 64 65 72 43 Data Ascii: ocument, '"+t+"');break;} catch (e) {continue;}}}<\/script>"}(e);Nt(o,a),f(t,Date.now()),y(t,!1)}}(e,a.amzniid,s[0],s[1])):Ft.logMessage("GAM disabled: Attempting to load Amazon ad for "+e):(Ft.logMessage("GAM disabled: Loading Instbid ad from "+a.bidderC
2024-04-19 13:12:41 UTC	16384	IN	Data Raw: 42 74 6e 22 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 6e 73 74 2d 63 6c 6f 73 65 42 74 6e 22 29 3b 63 6f 6e 73 74 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 73 76 67 22 29 3b 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 69 65 77 42 6f 78 22 2c 22 30 20 30 20 32 30 20 32 30 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 32 30 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 32 30 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 77 69 64 74 68 3a 20 38 30 25 3b 22 29 3b 63 6f 6e 73 74 20 61 3d 64 6f 63 75 6d Data Ascii: Btn",i.classList.add("inst-closeBtn");const o=document.createElementNS("http://www.w3.org/2000/svg","svg");o.setAttribute("viewBox","0 0 20 20"),o.setAttribute("width","20"),o.setAttribute("height","20"),o.setAttribute("style","width: 80%;");const a=docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	50050	130.211.23.194	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	366	OUT	GET /country?o=5668060692217856 HTTP/1.1 Host: api.btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	300	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Length: 37 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:41 UTC	37	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 69 73 52 65 73 74 72 69 63 74 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"country":"US","isRestricted":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	50059	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	2233	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=373946354429396&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cinsticator%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=320x50%7C300x250%7C1x1&fluid=height&ifi=1&didk=2376894448&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1713532353032&lmt=1713532038&adxs=301&adys=2469&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x50&msz=300x50&fws=0&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dconnatix_video%26pos%3Dconnatix_video%26refresh_count%3D0&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=826837274&frm=20&eoidce=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:41 UTC	800	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6481416626 Google-Creative-Id: 138461749291 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:41 UTC	455	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 69 6e 73 74 69 63 61 74 6f 72 2f 68 6f 6d 65 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 5b 22 49 44 3d 32 31 32 32 31 36 32 39 37 39 38 66 64 63 62 35 3a 54 3d 31 37 31 33 35 33 32 33 36 31 3a 52 54 3d 31 37 31 33 35 33 32 33 36 31 3a 53 3d 41 4c 4e 49 5f 4d 5a 78 4b 72 65 6e 6c 4d 68 51 37 36 49 6c 6a 57 73 74 62 4f 74 79 65 64 67 73 5f 51 22 2c 31 37 34 37 32 32 38 33 36 31 2c 22 2f 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 65 31 30 32 61 64 33 36 39 35 3a 54 3d 31 Data Ascii: 8000{"/21854935662/justjared/desktop/insticator/home":["html",1,null,null,1,250,300,0,0,null,null,null,1,[["ID=21221629798fdcb5:T=1713532361:RT=1713532361:S=ALNI_MZxKrenlMhQ76IljWstbOtyedgs_Q",1747228361,"/","justjared.com",1],["UID=00000de102ad3695:T=1
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6d 6d 4b 38 44 77 39 36 50 32 48 4e 46 52 39 52 78 35 35 47 61 4c 52 63 39 35 39 6f 67 6e 7a 6b 33 65 37 63 61 31 33 41 31 56 6f 63 61 4d 4e 45 73 31 68 57 32 41 6d 69 78 61 30 70 33 76 36 57 35 37 2d 50 4e 72 4a 6a 5a 38 76 51 71 71 7a 34 49 66 5a 39 33 53 70 45 47 33 65 4e 51 6e 79 6a 75 41 32 65 59 38 30 41 22 2c 22 43 4a 58 66 34 37 32 74 7a 6f 55 44 46 53 63 73 69 67 4d 64 78 56 34 4e 72 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: ll,null,null,null,"AOrYGsmmK8Dw96P2HNFR9Rx55GaLRc959ognzk3e7ca13A1VocaMNEs1hW2Amixa0p3v6W57-PNrJjZ8vQqqz4IfZ93SpEG3eNQnyjuA2eY80A","CJXf472tzoUDFScsigMdxV4Nrg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,n
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 76 69 67 61 74 6f 72 3b 76 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 72 65 74 75 72 6e 20 62 61 3f 76 3f 76 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 75 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 62 61 3f 21 21 76 26 26 30 3c 76 2e 62 72 61 6e 64 73 2e 6c Data Ascii: vigator;v=da?da.userAgentData\|\|null:null;function w(a){return ba?v?v.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function x(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function y(){return ba?!!v&&0<v.brands.l
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 6c 65 74 20 62 3d 22 22 2c 63 3d 30 3b 63 6f 6e 73 74 20 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 66 6f 72 28 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 Data Ascii: turn isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(K(a,void 0,0))return}else if(null!=a&&a instanceof Uint8Array){let b="",c=0;const d=a.length-10240;for(;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 61 29 3b 6f 61 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 47 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 48 28 63 5b 64 5d 29 29 29 7b 62 7c 3d 32 35 36 3b 63 3d 64 2d 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 3b 69 66 28 31 30 32 34 3c 3d 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: 0;null==a&&(a=oa);oa=void 0;if(null==a){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[G]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,H(c[d]))){b\|=256;c=d-(+!!(b&512)-1);if(1024<=c)throw Error("
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 42 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b Data Ascii: =a.substring(a.length-7)?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Aa(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};var Ba=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 50 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 2c 62 29 7b 75 2e Data Ascii: s(a);return a[0]/65536/65536}catch{return Math.random()}}function Ia(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Na(a=document){return a.createElement("img")};function Oa(a,b=null){Pa(a,b)}function Pa(a,b){u.
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 53 61 3b 63 6c 61 73 73 20 56 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 57 61 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 58 61 3d 63 6c 61 73 73 7b 63 6f 6e Data Ascii: N.parse(a)}catch(b){}}},Sa;class Va{constructor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const Wa=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var Xa=class{con
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 69 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 56 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 61 62 28 61 2c 62 29 3b 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 Data Ascii: b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.i=a.google_js_reporting_queue,b=a.google_measure_js_timing);this.g=V()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new ab(a,b);b=`goog_${a.label}_${a.uniqueId
2024-04-19 13:12:41 UTC	1255	IN	Data Raw: 63 6f 6e 73 74 20 67 3d 61 2e 67 5b 66 5d 2c 70 3d 61 2e 69 5b 67 5d 3b 66 6f 72 28 6c 65 74 20 6b 3d 30 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 69 66 28 21 64 29 7b 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 3b 62 72 65 61 6b 7d 6c 65 74 20 68 3d 65 62 28 70 5b 6b 5d 2c 61 2e 6a 2c 22 2c 24 22 29 3b 69 66 28 68 29 7b 68 3d 65 2b 68 3b 69 66 28 64 3e 3d 68 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 68 2e 6c 65 6e 67 74 68 3b 63 2b 3d 68 3b 65 3d 61 2e 6a 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 65 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 69 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6a 3d 22 26 22 3b 74 68 69 73 2e Data Ascii: const g=a.g[f],p=a.i[g];for(let k=0;k<p.length;k++){if(!d){b=null==b?g:b;break}let h=eb(p[k],a.j,",$");if(h){h=e+h;if(d>=h.length){d-=h.length;c+=h;e=a.j;break}b=null==b?g:b}}}a="";null!=b&&(a=e+"trn="+b);return c+a}class ib{constructor(){this.j="&";this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	50105	104.18.26.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	515	OUT	GET /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:41 UTC	279	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 82 Connection: close vary: Origin access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d25cb1d107bde-ATL
2024-04-19 13:12:41 UTC	82	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 52 6f 75 74 65 20 47 45 54 3a 2f 76 31 2f 6f 70 65 6e 72 74 62 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Route GET:/v1/openrtb not found","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	50117	31.13.88.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	676	OUT	GET /tr/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 13:12:41 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	50093	147.28.129.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; __amc=2_1713532355_1713532355
2024-04-19 13:12:41 UTC	242	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:41 GMT server: envoy x-envoy-upstream-service-time: 0 connection: close
2024-04-19 13:12:41 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	50104	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	603	OUT	GET /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:41 UTC	557	IN	HTTP/1.1 404 Not Found Server: openresty Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 152 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:41 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 70 75 62 6c 69 63 2f 68 62 2f 62 69 64 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /public/hb/bid</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50088	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	384	OUT	GET /webstatic/images/player_sticker_bg.d9d306ff.png HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	460	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1366 Connection: close Date: Mon, 01 Apr 2024 03:41:04 GMT Last-Modified: Tue, 12 Mar 2019 07:58:43 GMT ETag: "d9d306ff9fc9607e0ddcd4d206372784" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 153732004a8887453ca523567f55954a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 0-74F2gyF-W3dT6_5CYsC9J-MSTKnEX93HWa3DCoxmEyZ6kBskuZ2A== Age: 1589498
2024-04-19 13:12:41 UTC	1366	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 11 00 00 00 28 08 03 00 00 00 ee 48 3e 6d 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 11 1b 22 33 44 55 66 77 88 99 aa bb cc dd ee 50 0a 97 ca 00 00 04 c2 49 44 41 54 68 de ed 5a cb 96 e3 28 0c bd 19 20 06 c6 80 fe ff 6b 7b 61 c0 e2 69 9c e4 a4 6a ce 34 0b aa 6c 09 4b 5c 29 20 24 40 bf b5 21 77 3f 20 b7 d3 9e df 10 fe fc 2f 21 82 c7 fe f2 37 f7 17 85 17 e3 1e 48 dd 27 25 2e b0 d7 22 b7 f8 07 78 d9 3c 1b b6 09 71 6b 84 6f 5d 5d 00 a2 6d 55 09 7c c6 0d 2a e2 e1 14 d8 a3 3e 13 65 1e 53 71 0f 00 63 23 70 da e1 01 d9 0f 1e 0d 22 00 1e Data Ascii: PNGIHDR(H>m3PLTEGtRNS"3DUfwPIDAThZ( k{aij4lK\) $@!w? /!7H'%."x<qko]]mU\|*>eSqc#p"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50107	31.13.88.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	713	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=572262379840831&ev=PageView&dl=https%3A%2F%2Fcastbox.fm%2Fapp%2Fcastbox%2Fplayer%2Fid3921236%3Fv%3D8.22.11%26autoplay%3D0&rl=https%3A%2F%2Fwww.justjared.com%2F&if=true&ts=1713532353904&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713532353902.195637398&ler=other&cdl=API_unavailable&it=1713532351063&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 13:12:41 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 13:12:41 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50063	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	374	OUT	GET /webstatic/images/des_btn.2466a7a5.svg HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1728 Connection: close Date: Mon, 08 Apr 2024 01:33:43 GMT Last-Modified: Tue, 21 May 2019 06:03:17 GMT ETag: "2466a7a5a60d0af7d084a67cfecce341" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 16fa0a8ca7a82e44b5e6e3b503a13fdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: tVToQqI-9W5ToxwE-uXZnC5Fae39zB4eP4XXO2lnyxxrogBFbgx6mg== Age: 992339
2024-04-19 13:12:41 UTC	1728	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 69 6d 61 67 65 20 78 3d 22 2d 38 22 20 79 3d 22 2d 34 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 47 41 41 41 41 42 67 43 41 59 41 41 41 44 69 6d 48 63 34 41 41 41 41 42 47 64 42 54 55 45 41 41 4c 47 50 43 2f 78 68 42 51 41 41 42 42 31 4a Data Ascii: <svg width="8" height="16" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><image x="-8" y="-4" width="24" height="24" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGAAAABgCAYAAADimHc4AAAABGdBTUEAALGPC/xhBQAABB1J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50055	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	2142	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=0&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22home_Mid_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22300x600%22%2C%22300x250%22%2C%22160x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F2%22%7D%2C%7B%22sd%22%3A%22home_Top_Right_300x250_InnerRail%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F1%22%7D%2C%7B%22sd%22%3A%22home_Bot_Right_300xFlex_InnerRail%22%2C%22s%22%3A%5B%22160x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Frail%2Fhome%2F3%22%7D%2C%7B%22sd%22%3A%22home_Top_728x90%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Ftop%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:41 UTC	355	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 1132 Connection: close Date: Fri, 19 Apr 2024 13:12:41 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 c735e59ec25449beec4868052527263c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: 8bVU5aPBO4jcVo1wriZoOYG5WeAGJ4ztSd8i-8Yo5kpAElD5nuekoQ==
2024-04-19 13:12:41 UTC	1132	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 41 72 37 57 4f 6f 59 6b 36 39 45 32 55 33 79 32 38 47 64 79 74 49 41 41 41 47 4f 39 6e 7a 63 72 67 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 41 74 55 76 69 6c 22 2c 22 73 69 7a 65 22 3a 22 37 32 38 78 39 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a 65 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JAr7WOoYk69E2U3y28GdytIAAAGO9nzcrgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAtUvil","size":"728x90","meta":["slotID","mediaType","size

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50094	54.158.18.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	490	OUT	GET /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3059573620546902553906
2024-04-19 13:12:41 UTC	389	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 x-auction-status: 5 content-length: 19 connection: close
2024-04-19 13:12:41 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50111	151.101.193.229	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	391	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20240419 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1597 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.2030 X-JSD-Version-Type: version ETag: W/"63d-H7r/MAGglW35prF2YAKdt7VA/BQ" Accept-Ranges: bytes Date: Fri, 19 Apr 2024 13:12:41 GMT Age: 33107 X-Served-By: cache-fra-eddf8230103-FRA, cache-pdk-kfty2130054-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-19 13:12:41 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 36 3a 30 30 3a 33 35 2e 33 39 38 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 35 34 2e 33 34 30 32 39 34 30 33 35 30 32 32 2c 22 42 47 4e 22 3a 31 2e 38 33 31 34 34 34 38 39 31 38 34 33 38 30 35 35 2c 22 43 5a 4b 22 3a 32 33 2e 36 34 38 32 38 31 36 37 34 33 31 34 30 37 34 2c 22 44 4b 4b 22 3a 36 2e 39 38 37 31 37 31 30 38 33 34 33 34 37 37 38 2c 22 47 42 50 22 3a 30 2e 38 30 31 38 33 35 33 37 37 38 34 34 33 36 37 34 2c 22 48 55 46 22 3a 33 36 38 2e 38 38 32 38 35 34 31 39 39 38 33 31 34 Data Ascii: {"dataAsOf":"2024-04-18T00:00:00.000Z","generatedAt":"2024-04-18T16:00:35.398Z","conversions":{"USD":{"USD":1,"JPY":154.340294035022,"BGN":1.8314448918438055,"CZK":23.648281674314074,"DKK":6.987171083434778,"GBP":0.8018353778443674,"HUF":368.8828541998314
2024-04-19 13:12:41 UTC	219	IN	Data Raw: 52 57 22 3a 31 37 31 33 2e 37 30 33 34 36 31 34 38 34 35 36 31 2c 22 4d 58 4e 22 3a 32 31 2e 31 33 30 39 33 38 34 37 38 30 36 37 39 32 2c 22 4d 59 52 22 3a 35 2e 39 36 35 36 38 38 37 39 33 33 38 35 33 34 31 2c 22 4e 5a 44 22 3a 32 2e 31 30 33 36 33 34 33 32 35 32 32 30 37 32 32 2c 22 50 48 50 22 3a 37 31 2e 33 38 36 36 39 35 39 34 30 35 38 30 31 38 2c 22 53 47 44 22 3a 31 2e 36 39 35 37 30 37 30 31 31 37 32 35 31 33 36 35 2c 22 54 48 42 22 3a 34 35 2e 38 33 38 39 37 37 39 30 34 34 32 33 37 38 2c 22 5a 41 52 22 3a 32 33 2e 37 36 31 30 33 36 31 30 39 36 38 33 37 34 37 2c 22 45 55 52 22 3a 31 2e 31 36 37 38 34 32 32 39 34 35 37 36 35 34 30 33 7d 7d 7d Data Ascii: RW":1713.703461484561,"MXN":21.13093847806792,"MYR":5.965688793385341,"NZD":2.103634325220722,"PHP":71.38669594058018,"SGD":1.6957070117251365,"THB":45.83897790442378,"ZAR":23.761036109683747,"EUR":1.1678422945765403}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50062	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	381	OUT	GET /app/castbox/static/images/episodeDefault.png HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	460	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4646 Connection: close Date: Sun, 31 Mar 2024 20:54:25 GMT Last-Modified: Tue, 15 May 2018 09:45:39 GMT ETag: "df9d8c116ac9c2af941e74f26514db88" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cb8f9eeabb5079cbcdbabdbd476ce1a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: VbsQCq7BgpD7-KlXfWYzmKMCB7meiWoPvJr7gK8SXWS8bHU-z769Zg== Age: 1613897
2024-04-19 13:12:41 UTC	4646	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 00 00 00 00 9b 0d c7 00 00 00 11 ed 49 44 41 54 78 da ed dd fb 7f 14 e5 bd c0 71 ff be 21 e1 76 90 62 4b cb 51 4a 2d 5a 2f a5 3d b6 87 8a 48 ad 2d 55 39 88 78 b4 30 d9 84 dc 6f 24 ae b9 60 48 48 42 20 09 21 b0 e4 ba 9b 2f de f0 52 40 b9 1f 11 11 48 32 87 4d 36 90 95 dd cd 5e 9e 79 e6 f6 f9 fc 36 2f 89 af d9 bc de af d9 c9 33 cf f3 cc 63 42 64 43 8f f1 2b 20 60 11 b0 08 58 44 c0 22 60 11 b0 88 80 45 c0 22 60 11 01 8b 80 45 c0 22 02 16 01 8b 80 45 04 2c 02 16 01 8b 08 58 04 2c 02 16 11 b0 08 58 04 2c 22 60 11 b0 08 58 44 c0 22 60 11 b0 88 80 45 c0 22 60 11 01 8b 80 45 c0 22 02 16 01 8b 80 45 04 2c 02 16 01 8b 08 58 04 2c 02 16 11 b0 08 58 04 2c 22 60 11 b0 08 58 44 c0 22 60 11 b0 88 Data Ascii: PNGIHDRXXIDATxq!vbKQJ-Z/=H-U9x0o$`HHB !/R@H2M6^y6/3cBdC+ `XD"`E"`E"E,X,X,"`XD"`E"`E"E,X,X,"`XD"`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50058	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	1159	OUT	GET /pcs/view?xai=AKAOjssztw9ZVvoGFptdeR10bYUzk_EccIfJes2mzOa77nY41VSf6N5tcEQSfNSdZ8U8ATbj_jl2BbBoNI5yfoZer0UzsP-VvPU4cKCY4m9iWJdrEuJrhsrV0DmwxYNIO9hgmwnToqdhI9UA2DNgmzew09zbi8We-hygmHAg8klPoEl2pOp3fqfWiU66sZqmeFeBsLt8v9B72iL0wuKOuuWMPGjjgbyuNIWenU-WpZWXTj1yWrZRP_NpbEJ_zS8Cp1iz2JUGZ-hDxDL7USrO60o99Qtp5a0DfSFSXGGZWsFUEcgkziOzKrvnJON2ey3axDLjPksxOG1faiXJ3G-KeK9dIqkwOaUZpPnXOEX_WhcvpICOKPvIp0l-MOnrztSWJnQt5BQ&sai=AMfl-YTR1o9fNzxNqQ2pqIJ-RT_ePTgquLGb3m1Qt0dQ9YB4VSu6mBkuuAorKR6OyOPpbe7NH7UkEpkLSiwVnUfvFXX62VcY2DwMLAckvXoQyPCbOSg6x9YCQxmtYPPqXR3u5v84129cstANQdT2Ef0oCp00&sig=Cg0ArKJSzJzoKOOjfT4fEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:41 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50064	18.164.78.7	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	376	OUT	GET /webstatic/images/logo_gray.0b75f9d4.png HTTP/1.1 Host: s3.castbox.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	459	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1461 Connection: close Date: Mon, 08 Apr 2024 01:33:43 GMT Last-Modified: Tue, 12 Mar 2019 07:58:43 GMT ETag: "0b75f9d407f7447c0edf988dff95c3a4" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 bfcf96734b4cc9857b114ec0d9419dc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: gPke4qgzuWc7V8EsqOANf01jkjmBtO8PL8Q3Fok9Dq4GDhYAHk6XRQ== Age: 992339
2024-04-19 13:12:41 UTC	1461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 32 08 03 00 00 00 10 86 c9 d8 00 00 02 1c 50 4c 54 45 00 00 00 ff ff ff 80 80 80 55 55 55 80 80 80 66 66 66 55 55 55 49 49 49 60 60 60 55 55 55 46 46 46 4e 4e 4e 49 49 49 44 44 44 50 50 50 4b 4b 4b 43 43 43 4d 4d 4d 49 49 49 43 43 43 4a 4a 4a 47 47 47 45 45 45 49 49 49 46 46 46 44 44 44 42 42 42 48 48 48 46 46 46 44 44 44 47 47 47 45 45 45 43 43 43 41 41 41 46 46 46 44 44 44 43 43 43 41 41 41 44 44 44 43 43 43 41 41 41 45 45 45 42 42 42 41 41 41 45 45 45 43 43 43 42 42 42 41 41 41 44 44 44 43 43 43 42 42 42 41 41 41 44 44 44 43 43 43 41 41 41 44 44 44 42 42 42 42 42 42 41 41 41 43 43 43 41 41 41 43 43 43 42 42 42 42 42 42 41 41 41 41 41 41 43 43 43 40 40 40 43 43 43 41 41 41 43 43 43 42 Data Ascii: PNGIHDR,2PLTEUUUfffUUUIII```UUUFFFNNNIIIDDDPPPKKKCCCMMMIIICCCJJJGGGEEEIIIFFFDDDBBBHHHFFFDDDGGGEEECCCAAAFFFDDDCCCAAADDDCCCAAAEEEBBBAAAEEECCCBBBAAADDDCCCBBBAAADDDCCCAAADDDBBBBBBAAACCCAAACCCBBBBBBAAAAAACCC@@@CCCAAACCCB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50057	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	2623	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=581348282174153&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Chigh_impact%2Chome&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=1x1&ifi=2&didk=461368580&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354220&lmt=1713532038&adxs=155&adys=8499&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=18x18&msz=0x0&fws=4&ohw=18&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3DhighImpactDFP%26pos%3DhighImpactDFP%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=829439793&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:41 UTC	782	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:41 UTC	432	IN	Data Raw: 31 61 39 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 68 69 67 68 5f 69 6d 70 61 63 74 2f 68 6f 6d 65 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 30 2c 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 50 7a 78 33 62 32 74 7a 6f 55 44 46 57 45 4a 69 67 4d 64 34 73 6b 41 6d Data Ascii: 1a9{"/21854935662/justjared/desktop/high_impact/home":["html",0,null,null,0,0,0,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CPzx3b2tzoUDFWEJigMd4skAm
2024-04-19 13:12:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50053	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	1545	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=1&ws=1280x907&v=24.305.1002&t=1500&slots=%5B%7B%22sd%22%3A%22highImpactDFP%22%2C%22s%22%3A%5B%221x1%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fhigh_impact%2Fhome%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:41 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 293 Connection: close Date: Fri, 19 Apr 2024 13:12:41 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 a692b28e995e2a8288fe7156f8144a44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: 0tZdpHz3jDMdX4f9w96e5_zMEwx2TjKIEiiD0VQb6FJkxkGQ0UCp6A==
2024-04-19 13:12:41 UTC	293	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 5f 6e 2d 6d 65 64 69 61 67 72 69 64 5f 6e 2d 69 6e 64 65 78 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 6e 2d 4f 67 75 72 79 5f 73 6e 62 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 73 6d 72 74 5f 6e 2d 54 61 70 70 78 5f 63 6e 76 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 69 5f 72 62 64 5f 70 70 74 5f 6e 2d 62 61 69 64 75 5f 6e 2d 56 69 64 61 7a 6f 6f 5f 6e 2d 6e 61 74 69 76 6f 5f 61 6e 2d 64 62 35 5f 73 6f 76 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-mediagrid_n-index_n-minuteMedia_n-Ogury_snb_n-MediaNet_smrt_n-Tappx_cnv_n-smaato_n-sharethrough_pm-db5_n-simpli.fi_rbd_ppt_n-baidu_n-Vidazoo_n-nativo_an-db5_sov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50095	34.95.69.49	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50052	23.20.111.240	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	398	OUT	GET /v1/recordVendorsLoaded HTTP/1.1 Host: prod.us-east-1.cxm-bcn.publisher-services.amazon.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	146	IN	HTTP/1.1 405 Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Allow: POST
2024-04-19 13:12:41 UTC	108	IN	Data Raw: 36 36 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 35 33 32 33 36 31 34 37 30 2c 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 70 61 74 68 22 3a 22 2f 76 31 2f 72 65 63 6f 72 64 56 65 6e 64 6f 72 73 4c 6f 61 64 65 64 22 7d 0d 0a Data Ascii: 66{"timestamp":1713532361470,"status":405,"error":"Method Not Allowed","path":"/v1/recordVendorsLoaded"}
2024-04-19 13:12:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50110	3.221.230.176	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	720	OUT	GET /v/2.0/t/xhr?i=1713532353390 HTTP/1.1 Host: pre.ads.justpremium.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; 83481_313785=0_0_0; 83481_313787=1_8_0; 83481_313788=1_8_0; 83481_313789=1_8_0; 83481_313795=0_0_0; 83481_453288=0_0_0; 83481_454035=1_8_0
2024-04-19 13:12:41 UTC	242	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: pre.ads.justpremium.com Access-Control-Allow-Credentials: true
2024-04-19 13:12:41 UTC	60	IN	Data Raw: 33 36 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 45 52 52 4f 52 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 6f 75 74 65 72 3a 20 4e 6f 20 72 6f 75 74 65 20 66 6f 75 6e 64 2e 22 7d 0d 0a Data Ascii: 36{"status":"ERROR","message":"Router: No route found."}
2024-04-19 13:12:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50123	54.230.253.74	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	593	OUT	GET /check/1260 HTTP/1.1 Host: check.analytics.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	505	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 25 Connection: close Date: Fri, 19 Apr 2024 13:12:41 GMT x-amzn-RequestId: 40ce42f3-a2eb-4d66-938c-e37777ccdde3 Access-Control-Allow-Origin: * x-amz-apigw-id: WeYXjF3MjoEEK7A= X-Amzn-Trace-Id: Root=1-66226dc9-1f8c8a5626ea9dfb55fdfec5 X-Cache: Miss from cloudfront Via: 1.1 561b0a8d3583161b19d204c90e2904fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: Mh61xDyX8yiyG-E4UvrqDG83bg3sj1mbkLt8mQrqgTGh4v5RH-tH6Q==
2024-04-19 13:12:41 UTC	25	IN	Data Raw: 7b 0a 20 20 22 73 61 6d 70 6c 69 6e 67 52 61 74 65 22 3a 20 31 30 30 0a 7d Data Ascii: { "samplingRate": 100}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50121	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	701	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fwww.justjared.com%2F&domain=www.justjared.com&cw=1&lsw=1&us_privacy=1YNN&gdpr=0 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	480	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:41 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://www.justjared.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 777170 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:41 UTC	368	IN	Data Raw: 31 36 34 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 72 32 64 45 68 46 38 32 4d 47 45 77 65 56 67 7a 57 6c 6c 32 5a 31 59 6c 4d 6b 4a 6c 63 33 46 76 59 33 6c 7a 56 44 63 77 54 46 4e 43 4e 54 51 6c 4d 6b 4a 4e 4e 6b 77 31 54 30 39 70 63 6b 56 59 55 6c 68 57 61 55 4e 79 55 55 64 70 65 57 4a 68 4e 57 59 77 52 45 4e 71 5a 45 6c 4f 55 69 55 79 52 6a 64 54 4d 6a 5a 33 63 58 51 35 57 47 78 72 54 46 64 57 56 7a 5a 33 4d 46 64 76 4a 54 4a 43 53 45 45 7a 59 57 31 31 65 6a 5a 4f 57 6e 42 58 63 58 42 75 59 31 5a 56 64 56 46 6c 4e 6b 56 6c 54 32 56 47 53 31 56 30 63 58 70 79 64 33 6c 6f 63 6e 64 52 54 32 4e 72 51 57 64 54 22 2c 22 62 69 64 49 64 22 3a 22 36 31 35 6c 42 46 39 6f 53 6b 5a 46 63 6b 55 33 4e 6b 5a 6c 52 56 68 30 5a 32 64 59 5a 33 4e 72 64 32 46 76 5a 45 35 44 Data Ascii: 164{"bundle":"r2dEhF82MGEweVgzWll2Z1YlMkJlc3FvY3lzVDcwTFNCNTQlMkJNNkw1T09pckVYUlhWaUNyUUdpeWJhNWYwRENqZElOUiUyRjdTMjZ3cXQ5WGxrTFdWVzZ3MFdvJTJCSEEzYW11ejZOWnBXcXBuY1ZVdVFlNkVlT2VGS1V0cXpyd3locndRT2NrQWdT","bidId":"615lBF9oSkZFckU3NkZlRVh0Z2dYZ3Nrd2FvZE5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50060	147.28.129.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; __amc=2_1713532355_1713532355
2024-04-19 13:12:41 UTC	242	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:41 GMT server: envoy x-envoy-upstream-service-time: 0 connection: close
2024-04-19 13:12:41 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50115	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	603	OUT	GET /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:41 UTC	557	IN	HTTP/1.1 404 Not Found Server: openresty Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 152 Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:41 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 70 75 62 6c 69 63 2f 68 62 2f 62 69 64 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /public/hb/bid</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50116	104.18.26.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	515	OUT	GET /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:41 UTC	279	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json; charset=utf-8 Content-Length: 82 Connection: close vary: Origin access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d25cc0fd5b060-ATL
2024-04-19 13:12:41 UTC	82	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 52 6f 75 74 65 20 47 45 54 3a 2f 76 31 2f 6f 70 65 6e 72 74 62 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d Data Ascii: {"message":"Route GET:/v1/openrtb not found","error":"Not Found","statusCode":404}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50100	54.199.208.110	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	431	OUT	GET /data/channel/v3?cid=3921236&raw=1&web=1&m=20240419&n=92c75641391bc21cf7585973d7d93510&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	248	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json Content-Length: 1781 Connection: close Server: nginx Cache-Control: public, max-age=10800 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-19 13:12:41 UTC	1781	IN	Data Raw: 7b 22 6d 73 67 22 3a 20 22 4f 4b 22 2c 20 22 63 6f 64 65 22 3a 20 30 2c 20 22 64 61 74 61 22 3a 20 7b 22 6e 65 77 5f 63 69 64 22 3a 20 36 30 33 36 30 35 35 2c 20 22 6f 62 73 6f 6c 65 74 65 22 3a 20 22 33 38 37 61 64 31 30 61 65 34 30 31 37 66 31 62 63 33 32 38 63 39 66 33 35 39 66 65 66 33 32 36 33 33 66 63 66 66 65 37 22 2c 20 22 65 70 69 73 6f 64 65 5f 63 6f 75 6e 74 22 3a 20 37 38 2c 20 22 78 5f 70 6c 61 79 5f 62 61 73 65 22 3a 20 30 2c 20 22 73 74 61 74 5f 63 6f 76 65 72 5f 65 78 74 5f 63 6f 6c 6f 72 22 3a 20 74 72 75 65 2c 20 22 6b 65 79 77 6f 72 64 73 22 3a 20 5b 22 4d 75 73 69 63 20 49 6e 74 65 72 76 69 65 77 73 22 2c 20 22 4d 75 73 69 63 22 5d 2c 20 22 63 6f 76 65 72 5f 65 78 74 5f 63 6f 6c 6f 72 22 3a 20 22 2d 31 35 31 37 36 32 37 38 22 2c 20 22 Data Ascii: {"msg": "OK", "code": 0, "data": {"new_cid": 6036055, "obsolete": "387ad10ae4017f1bc328c9f359fef32633fcffe7", "episode_count": 78, "x_play_base": 0, "stat_cover_ext_color": true, "keywords": ["Music Interviews", "Music"], "cover_ext_color": "-15176278", "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50099	54.199.208.110	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	433	OUT	GET /data/episodes/overview?cids=3921236&web=1&m=20240419&n=667accfeb78aeb12da97930e8573ee61&r=1 HTTP/1.1 Host: everest.castbox.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:41 UTC	245	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:41 GMT Content-Type: application/json Content-Length: 4836 Connection: close Server: nginx Cache-Control: public, max-age=10 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-19 13:12:41 UTC	4836	IN	Data Raw: 7b 22 6d 73 67 22 3a 20 22 4f 4b 22 2c 20 22 63 6f 64 65 22 3a 20 30 2c 20 22 64 61 74 61 22 3a 20 5b 7b 22 6c 61 74 65 73 74 5f 65 69 64 22 3a 20 35 36 37 30 31 38 32 33 31 2c 20 22 73 6f 72 74 5f 62 79 22 3a 20 22 64 65 66 61 75 6c 74 22 2c 20 22 73 6f 72 74 5f 6f 72 64 65 72 22 3a 20 30 2c 20 22 65 70 69 73 6f 64 65 5f 6c 69 73 74 22 3a 20 5b 7b 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 20 22 32 30 32 33 2d 30 31 2d 33 31 54 30 31 3a 35 30 3a 30 33 5a 22 2c 20 22 65 69 64 22 3a 20 35 36 37 30 31 38 32 33 31 7d 2c 20 7b 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 20 22 32 30 32 33 2d 30 31 2d 31 37 54 30 31 3a 31 36 3a 33 35 5a 22 2c 20 22 65 69 64 22 3a 20 35 36 34 30 33 32 35 30 38 7d 2c 20 7b 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 20 22 32 Data Ascii: {"msg": "OK", "code": 0, "data": [{"latest_eid": 567018231, "sort_by": "default", "sort_order": 0, "episode_list": [{"release_date": "2023-01-31T01:50:03Z", "eid": 567018231}, {"release_date": "2023-01-17T01:16:35Z", "eid": 564032508}, {"release_date": "2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50125	54.158.18.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:41 UTC	490	OUT	GET /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3059573620546902553906
2024-04-19 13:12:42 UTC	389	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 x-auction-status: 5 content-length: 19 connection: close
2024-04-19 13:12:42 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50128	54.230.253.74	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	593	OUT	GET /check/1260 HTTP/1.1 Host: check.analytics.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	505	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 25 Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT x-amzn-RequestId: 06283639-a652-4afa-b71c-8e9eb80de5e7 Access-Control-Allow-Origin: * x-amz-apigw-id: WeYXpHZjjoEEvig= X-Amzn-Trace-Id: Root=1-66226dca-068d8ad75de0d62b4b2d84e4 X-Cache: Miss from cloudfront Via: 1.1 2c060d2b820e53bf308fe03fbfaed0e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: SlXKr9fK4Br7uUeS4y5Tr6p4bqhSWJ-6n_DUSHeLHtXuNc_tOsr6Pg==
2024-04-19 13:12:42 UTC	25	IN	Data Raw: 7b 0a 20 20 22 73 61 6d 70 6c 69 6e 67 52 61 74 65 22 3a 20 31 30 30 0a 7d Data Ascii: { "samplingRate": 100}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50013	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	1047	OUT	GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1YNN&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzcuMOgCAYgDw9uJsQaoA0fqAyRlZmRiYjc3Yy00MjRhLTQxNWUtYjA3ZS03ODAxNzdiMGNmMWGqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0
2024-04-19 13:12:42 UTC	261	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2324 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:42 GMT server: envoy x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close
2024-04-19 13:12:42 UTC	2324	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 65 38 62 61 36 61 39 37 2d 34 66 30 65 2d 34 66 31 37 2d 61 30 39 37 2d 31 66 30 35 38 37 39 30 39 66 64 30 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50010	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	1254	OUT	GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=R8615it8y0YaQPszR6coElZIGEItDzQiAFhobUFaD0cNSlVrWTVnR05jVVNfWENcGlVuAjNyX1hkAgIODRAAG1FqBTNoRRwzV1IOXk1ZT1J7TXNlFUk3AlNXUBdaTgc4V2FgQk0xVVdaDUAaVRJvUmU1SkJiAgENWhdcT1M8BWNgEEllAwFNRVYNHwNsUjQ2RR5lAldeCkQISAc9AjRnEB5wGkFZXUMOSQhpVDM2RktgV1QMD00OTwBqVGByX1hkBVFeC0QBTwdoUGlkRkIxB1peXRUNTAV7PH1yEBUnWBdNU0QUW1c9ESNySQEvGkEcDAdLEF83Q2tyS0liV1VdX0AVTwY7WXxhRBwxG1AKDEUVQAE7BzRpQU02BQdeS1gaGl83DzQzBxM9WCoLS04aTwQ7AjQ2QUliVQULWU0BTlVhB2FlQ09lFB4%3D
2024-04-19 13:12:42 UTC	1251	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; Domain=.cootlogix.com; Path=/; Expires=Sun, 19 May 2024 13:12:42 GMT; Secure; SameSite=None set-cookie: vdzj1_10abe312=Fbl140c8GLP7ktNCANAS0FIJj4kWQ4GPWF7FWMFBQtyfzUFUxB5d3V%2FIgBTCXAoM1JcFyxhbWx3BAJZIyhoVQpHKiF5eCdRAgkme2lWXRZsb2N7JwMGDHd0aVQJQ3kid35xAVRbJHhlU19WYmF3fXVVWgB3eDJVWBcqdSIrJQJTW3R7ZVVJWGx2J310AwZecShnA19FLXNxf3ZUAF1wLzQVR1Z4d3Z4cQhTDSUqZQZZFXkgJ3d3BlMLcn1yG0lCfXFwLHEJVQ92fWgDXkwtcnh%2FdVFWDXJuDRtJFyE2LzpjClMUZSs0RxlWdDhjJzJ1Nhp9KjFbGBFiYSYqMUJBAmV8chtJEyozMw0uXhBdKThyDUlWYmE0PRFCCk4mLykVUVZ%2FGg8AY01PGjQpI0QCGyBhe2x5A1NZcX5mA0ZCeCF5Y3AHBVtqfzVSWll3ciMoJAlRDyN%2FNAZJWGwgLiAvVQBMLiM%2Bfg9WdGF3eiNTBl51f2BUDRB%2Benh5JAgFCHJ8ZQBJWGwqMgcnQgJVIm5qQxkBKz4%3D; Domain=.cootlogix.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:42 GMT; Secure; SameSite=None content-type: text/html content-length: 2456 date: Fri, 19 Apr 2024 13:12:42 GMT keep-alive: timeout=5 connection: close
2024-04-19 13:12:42 UTC	2456	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 3d 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 76 61 72 20 73 79 6e 63 73 3d 5b 27 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 63 6f 6f 74 6c 6f 67 69 78 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 63 6f 6f 6b 69 65 25 33 46 70 61 72 74 6e 65 72 49 64 25 33 44 Data Ascii: <html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50012	104.16.186.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	982	OUT	GET /cs.html?pt=6173-7821-01&pc=US&cmp=true&us=1YNN HTTP/1.1 Host: cs.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:42 UTC	780	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: ABPtcPpL2aAaQnTkt9NW5PXDDGftCzxDc1BsF5onftbphyfd_wq2ldHwdNu3YcYJVjysoNuqW4R6WfQJ2w Cache-Control: public, max-age=86400 Expires: Sat, 20 Apr 2024 13:12:42 GMT Last-Modified: Fri, 19 Apr 2024 11:39:09 GMT ETag: W/"ebdfc029b94e33253cb6a31b312fb715" Vary: Accept-Encoding x-goog-generation: 1713526749936685 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15514 x-goog-hash: crc32c=7PwHmw== x-goog-hash: md5=69/AKblOMyU8tqMbMS+3FQ== x-goog-storage-class: REGIONAL CF-Cache-Status: HIT Age: 164 Server: cloudflare CF-RAY: 876d25cfd92a6736-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:42 UTC	589	IN	Data Raw: 37 63 61 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 7b 7d 2c 74 3d 7b 7d 2c 73 3d 7b 7d 2c 6e 3d 65 2e 70 61 72 63 65 6c 52 65 71 75 69 72 65 32 32 38 34 3b 6e 75 6c 6c 3d Data Ascii: 7ca5<!DOCTYPE html><html><head></head><body> <script type="module">var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},t={},s={},n=e.parcelRequire2284;null=
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 73 2c 69 3d 74 26 26 74 2e 65 78 70 6f 72 74 73 3d 3d 72 26 26 74 2c 6f 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3b 6f 2e 67 6c 6f 62 61 6c 21 3d 3d 6f 26 26 6f 2e 77 69 6e 64 6f 77 21 3d 3d 6f 7c 7c 28 6e 3d 6f 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 7d 3b 28 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 45 72 72 6f 72 29 2e 6e 61 6d 65 3d 22 49 6e 76 61 6c 69 64 43 68 61 72 61 63 74 65 72 45 72 72 6f 72 22 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 61 28 65 29 7d 2c 63 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 Data Ascii: unction(n){var r=s,i=t&&t.exports==r&&t,o="object"==typeof e&&e;o.global!==o&&o.window!==o\|\|(n=o);var a=function(e){this.message=e};(a.prototype=new Error).name="InvalidCharacterError";var d=function(e){throw new a(e)},c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefg
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 50 72 6f 70 65 72 74 79 28 70 29 26 26 28 72 5b 70 5d 3d 6c 5b 70 5d 29 3b 65 6c 73 65 20 6e 2e 62 61 73 65 36 34 3d 6c 7d 28 74 68 69 73 29 7d 29 29 3b 76 61 72 20 72 3d 7b 7d 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 Data Ascii: Property(p)&&(r[p]=l[p]);else n.base64=l}(this)}));var r={},i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":t
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 22 2c 74 79 70 65 3a 22 62 69 74 73 22 2c 6e 75 6d 42 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 78 56 65 6e 64 6f 72 49 64 7d 2c 76 61 6c 69 64 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 65 2e 69 73 52 61 6e 67 65 7d 7d 2c 7b 6e 61 6d 65 3a 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 22 2c 74 79 70 65 3a 22 62 6f 6f 6c 22 2c 6e 75 6d 42 69 74 73 3a 31 2c 76 61 6c 69 64 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 52 61 6e 67 65 7d 7d 2c 7b 6e 61 6d 65 3a 22 6e 75 6d 45 6e 74 72 69 65 73 22 2c 6e 75 6d 42 69 74 73 3a 31 32 2c 74 79 70 65 3a 22 69 6e 74 22 2c 76 61 6c 69 64 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e Data Ascii: ",type:"bits",numBits:function(e){return e.maxVendorId},validator:function(e){return!e.isRange}},{name:"defaultConsent",type:"bool",numBits:1,validator:function(e){return e.isRange}},{name:"numEntries",numBits:12,type:"int",validator:function(e){return e.
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 75 72 6e 20 31 3d 3d 3d 70 61 72 73 65 49 6e 74 28 65 2e 73 75 62 73 74 72 28 74 2c 31 29 2c 32 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 76 61 72 20 74 3d 62 28 65 29 3b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 2b 36 35 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 2c 74 2c 73 29 7b 76 61 72 20 6e 3d 65 2e 73 75 62 73 74 72 28 74 2c 73 29 3b 72 65 74 75 72 6e 20 4c 28 6e 2e 73 6c 69 63 65 28 30 2c 73 2f 32 29 29 2b 4c 28 6e 2e 73 6c 69 63 65 28 73 2f 32 29 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 76 61 72 20 74 3d 65 2e 69 6e 70 75 74 2c 73 3d 65 2e 66 69 65 6c 64 2c 6e 3d 73 2e 6e 61 6d 65 2c 72 3d 73 2e 74 79 70 65 2c 69 3d 73 2e 6e 75 6d 42 69 74 73 2c 6f 3d Data Ascii: urn 1===parseInt(e.substr(t,1),2)}function L(e){var t=b(e);return String.fromCharCode(t+65).toLowerCase()}function V(e,t,s){var n=e.substr(t,s);return L(n.slice(0,s/2))+L(n.slice(s/2))}function P(e){var t=e.input,s=e.field,n=s.name,r=s.type,i=s.numBits,o=
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 73 2c 61 3d 5b 5d 2c 64 3d 30 3b 64 3c 69 3b 64 2b 3d 31 29 7b 76 61 72 20 63 3d 4f 28 7b 69 6e 70 75 74 3a 65 2c 66 69 65 6c 64 73 3a 6e 2e 66 69 65 6c 64 73 2c 73 74 61 72 74 50 6f 73 69 74 69 6f 6e 3a 6f 7d 29 3b 6f 3d 63 2e 6e 65 77 50 6f 73 69 74 69 6f 6e 2c 61 2e 70 75 73 68 28 63 2e 64 65 63 6f 64 65 64 4f 62 6a 65 63 74 29 7d 72 65 74 75 72 6e 7b 66 69 65 6c 64 56 61 6c 75 65 3a 61 2c 6e 65 77 50 6f 73 69 74 69 6f 6e 3a 6f 7d 7d 28 74 2c 73 2c 6e 2c 72 2c 63 29 3b 63 61 73 65 22 6c 61 6e 67 75 61 67 65 22 3a 72 65 74 75 72 6e 7b 66 69 65 6c 64 56 61 6c 75 65 3a 56 28 74 2c 6e 2c 75 29 7d 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 20 2d 20 55 6e 6b 6e 6f 77 Data Ascii: var o=s,a=[],d=0;d<i;d+=1){var c=O({input:e,fields:n.fields,startPosition:o});o=c.newPosition,a.push(c.decodedObject)}return{fieldValue:a,newPosition:o}}(t,s,n,r,c);case"language":return{fieldValue:V(t,n,u)};default:throw new Error("ConsentString - Unknow
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 6e 22 31 22 3d 3d 3d 74 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 73 2b 31 29 26 26 65 2e 70 75 73 68 28 73 2b 31 29 2c 65 7d 29 2c 5b 5d 29 7d 2c 64 65 63 6f 64 65 42 69 74 73 54 6f 49 6e 74 3a 62 2c 64 65 63 6f 64 65 42 69 74 73 54 6f 44 61 74 65 3a 45 2c 64 65 63 6f 64 65 42 69 74 73 54 6f 42 6f 6f 6c 3a 77 2c 64 65 63 6f 64 65 42 69 74 73 54 6f 4c 61 6e 67 75 61 67 65 3a 56 2c 64 65 63 6f 64 65 42 69 74 73 54 6f 4c 65 74 74 65 72 3a 4c 2c 64 65 63 6f 64 65 46 72 6f 6d 42 61 73 65 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 73 3d 65 3b 73 2e 6c 65 6e 67 74 68 25 34 21 3d 30 3b 29 73 2b 3d 22 3d 22 3b 73 3d 73 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2f 22 Data Ascii: n"1"===t&&-1===e.indexOf(s+1)&&e.push(s+1),e}),[])},decodeBitsToInt:b,decodeBitsToDate:E,decodeBitsToBool:w,decodeBitsToLanguage:V,decodeBitsToLetter:L,decodeFromBase64:function(e,t){for(var s=e;s.length%4!=0;)s+="=";s=s.replace(/-/g,"+").replace(/_/g,"/"
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 2c 64 3d 73 2e 70 6f 70 28 29 3b 73 3d 5b 5d 2c 6e 2e 70 75 73 68 28 7b 69 73 52 61 6e 67 65 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 64 2c 73 74 61 72 74 56 65 6e 64 6f 72 49 64 3a 61 2c 65 6e 64 56 65 6e 64 6f 72 49 64 3a 64 7d 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3d 30 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 64 3e 74 26 26 28 74 3d 65 2e 69 64 29 7d 29 29 2c 74 7d 76 61 72 20 42 2c 24 3d 28 61 3d 7b 63 6f 6e 76 65 72 74 56 65 6e 64 6f 72 73 54 6f 52 61 6e 67 65 73 3a 78 2c 65 6e 63 6f 64 65 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 61 78 56 65 6e 64 6f 72 49 64 Data Ascii: ,d=s.pop();s=[],n.push({isRange:"number"==typeof d,startVendorId:a,endVendorId:d})}}return n}function k(e){var t=0;return e.forEach((function(e){e.id>t&&(t=e.id)})),t}var B,$=(a={convertVendorsToRanges:x,encodeConsentString:function(e){var t=e.maxVendorId
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 61 6e 67 65 2c 6e 3d 74 2e 73 74 61 72 74 56 65 6e 64 6f 72 49 64 2c 72 3d 74 2e 65 6e 64 56 65 6e 64 6f 72 49 64 2c 69 3d 73 3f 72 3a 6e 2c 6f 3d 6e 3b 6f 3c 3d 69 3b 6f 2b 3d 31 29 65 5b 6f 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 3b 6d 2e 61 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 49 64 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 49 3d 31 3b 49 3c 3d 6f 3b 49 2b 3d 31 29 28 75 26 26 21 76 5b 49 5d 7c 7c 21 75 26 26 76 5b 49 5d 29 26 26 2d 31 3d 3d 3d 6d 2e 61 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 49 64 73 2e 69 6e 64 65 78 4f 66 28 49 29 26 26 6d 2e 61 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 49 64 73 2e 70 75 73 68 28 49 29 7d 65 6c 73 65 20 6d 2e 61 6c 6c 6f 77 65 64 56 65 6e 64 6f 72 49 64 73 3d 48 28 6c 29 3b 72 65 74 75 72 6e 20 6d 7d 7d 29 2e 64 Data Ascii: ange,n=t.startVendorId,r=t.endVendorId,i=s?r:n,o=n;o<=i;o+=1)e[o]=!0;return e}),{});m.allowedVendorIds=[];for(var I=1;I<=o;I+=1)(u&&!v[I]\|\|!u&&v[I])&&-1===m.allowedVendorIds.indexOf(I)&&m.allowedVendorIds.push(I)}else m.allowedVendorIds=H(l);return m}}).d
2024-04-19 13:12:42 UTC	1369	IN	Data Raw: 74 53 63 72 65 65 6e 2c 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 3a 74 68 69 73 2e 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 2c 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 3a 74 68 69 73 2e 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 7d 29 2c 73 65 3d 74 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 4c 61 73 74 55 70 64 61 74 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 61 73 74 55 70 64 61 74 65 64 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 4c 61 73 74 55 70 64 61 74 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d Data Ascii: tScreen,consentLanguage:this.consentLanguage,vendorListVersion:this.vendorListVersion}),se=t}return t}},{key:"getLastUpdated",value:function(){return this.lastUpdated}},{key:"setLastUpdated",value:function(){var e=arguments.length>0&&void 0!==arguments[0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50009	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	2083	OUT	GET /api/sync/iframe/?cid=&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: sync.kueezrtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdzj1_be32264c=Wao15B8eChMpoPz3idC4ORoVIho5HgoiCRFTP2ECcQ8EdVovQF4xGQVdVnQAdgBTJVF9RFhyVhFfV3RQcglRdFEuQ1liSAJeByJXIwBVIl9vXE1mSFVcU3tVegAAIA1%2FRlxlGAVQBXMHdA1Hb0p7Q1gxTANZV3JVIQ5RcV95RFdmHAtQVHIWbhpTcF8sRl5jQgBaVHQDdwBXcFt8FVZmGwVLSGECcQ8EdVguFlszTlVbBXJWdQ4GdF0vRllyVhFfV3RVdwBUe1ksE1lkSARdUHsCJAsAJVtvXE1mSQQIUSZXJgtWc196RVdiSQBYAXtRJAxHb0p7Q1gxTAIPUHJVIQ5RcV95RFdmHAsMBiEWbhpTcF17El1iS1JZUSZScF5dd1ksR1hpQgtLSGECcQgDd1p%2FFF1nTFcLBiUDegxQIAp0SA1yJx9LByxBLExHeVhhUgg0CkFLXjhJbhoWJhs%2BGQA%2BWAlLUSIFdw0Ac1lgQg1hHB4LViUBbwEAe1pgFl1hQ1INXCUFIAhVYURvEwA%2BFFYKECpbLHEBYVJvRlpoSgdfByEMcwBcJVAsE181SQReBSIHYEU%3D; vdz_sync=5f2f51a7-e226-bbae-76c9-2d8714f31edc; vdzj1_a0c8efe3=2RI12ROiiFoxOeSyOKW0ZCDQbFioXIFt1CW1fWnEOTn0HY0guMXldW3FbTHdTNUB%2FZnhLRWRZS3gBY0h7ZXYKWnBdSn5SMBgsM3dZCHFNVG1TYR96ZXcIUX4KGypXZUp6MHlQCHZcTnpHf1t5YXgIX3ZfS34EME97YHhdXX5ZHndcY0htfm1fWnEOTn5Wa0p8YnheXH5dS3xUNkB5M3lLRWRZS3gEZUksNHsKXSBdGX4HZE8sZXoLX3BNVG1TYE4uZ3dYUXcOG3lRYU57ZndfD3UKHnxHf1t5YXgIXCMMHHxWY054Z3dbWnVeHXcANU1tfm1fWnEOTn4DZ0guMXldW3FbTHdTNUEqMC1LRWRZS3pTMUt9Yy5ZXCMJSildZ0guZXhQUX5NVG1TYEkpZn1bDXRYTisHMR94antcCiRWQC1Hf1t5YXgIX3VbHHsGZx99M34LXnAMT3lUN0Ftfm1fWnEOTSoDYk0sZilbCHcNT3kGZEx7NHlLNGpNGyAQPQ1taH9FSyELCD1HaQIyfm0aDDUcESALcUNtN3tfXHQJS31INUh%2FZWJYWnNfVX5RN0piYipRCiJWSHsBMk4scGNLCikBFioGJxAgPAYNS3xNTnpUYB0sYHkMC3YLTnpcZUsuZ3leCHBaWjI%3D
2024-04-19 13:12:42 UTC	1458	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=5f2f51a7-e226-bbae-76c9-2d8714f31edc; Domain=.kueezrtb.com; Path=/; Expires=Sun, 19 May 2024 13:12:42 GMT; Secure; SameSite=None set-cookie: vdzj1_a0c8efe3=3v313KF8Ajgy0IWA1NMGRIIBgTF1U7JGMLFWlwC3YLUUtSeWYgUnh%2FdA91Xl9PVnBndQZsZ2QOcl0DSQF9YHhSfX10CnBdBBhTKG9xUHlpahp3WAFMB3E2eQkrKCMKd1lSGwZwNnECeH5kFGNcVE5Rf2dxAn8qJQ51WFBNBHFhJwl3e3cabUhRSgcoYXACdnh1CHZdUkECemRwVHd9Jw5jRkVPA342dwEtLXJbdQxVGAErYHdSeX4kDndIS1sGemAgBHZ6fgkgCVFNAn5jdQl4LXVdJ1lFVRJ%2FZHZQey4lXHJZV04HfG9zAn16IwAkDFNbHGthcgYvfXdedVsGGgZ9ZXYFenNwXnkPBRsSZXV3Ant9JApzWwZJBSwxc1d2f3dZdl1eQQhre2MHfXsgDHNYA0sHfzMjUyh8fgx0CQVACCt1bRN4eHFZd1lTHQQqYycDL3okD3cJUE8BLW9jHWx9dQ8gXwIfAX00dVd8KndadlwETgV9MXcTE2dkWy4fCQ0Sc2dtEykvNkpjUBxbWToSFBN0LSdUMg9LW1ctJzMTdGl2Gm1IAB1AOxQuXz0uKExjUEVbHGsiMmE8IjBZIhNFQxJ4Dg9%2FbDZqGjIPFApZJjljC2wucg50WAFKAmQxcAF5ZncLdFpKSAQtZGwBK3MlXHhaUx1RfjRjHWwoKVYvDwQNWSY5CFVscWQOdFtUHVN7YSRTfi9wDXhcVRgFf2AgB3tpahooGS4fQig6JBN0PzRNJBc%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:42 GMT; Secure; SameSite=None content-type: text/html content-length: 3973 date: Fri, 19 Apr 2024 13:12:42 GMT keep-alive: timeout=5 connection: close
2024-04-19 13:12:42 UTC	3973	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 3d 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 76 61 72 20 73 79 6e 63 73 3d 5b 27 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 2e 73 6f 6e 6f 62 69 2e 63 6f 6d 2f 75 73 3f 6c 6f 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 6b 75 65 65 7a 72 74 62 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 63 6f 6f 6b 69 65 25 33 46 70 61 72 74 6e 65 72 49 64 25 33 Data Ascii: <html><head> <link rel="icon" href="data:;base64,iVBORw0KGgo="/></head><body style="margin: 0"><script type="text/javascript">(function (){var syncs=['<img src="https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50014	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	924	OUT	GET /cchain/0?gdpr=1&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2F84007c2a-d31f-425a-b5e3-a16088ed1608%3Fuid%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; sd_amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; __amc=2_1713532355_1713532355
2024-04-19 13:12:42 UTC	696	IN	HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate content-length: 0 date: Fri, 19 Apr 2024 13:12:42 GMT location: https://cs.ingage.tech/v1/sync/amx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid=&gdpr=1 server: envoy set-cookie: __amc=; path=/; domain=prebid.a-mo.net; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; secure; HttpOnly; SameSite=None set-cookie: amuid2=; path=/; domain=a-mo.net; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=; path=/; domain=prebid.a-mo.net; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 1 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50020	54.224.168.63	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	789	OUT	GET /usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:42 UTC	216	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2922 Connection: close Server: nginx ETag: "00ae3d2f415eb9dfac8f37ed4fd85ec2a" Timing-Allow-Origin: *
2024-04-19 13:12:42 UTC	2922	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 62 64 37 33 61 39 38 35 2d 33 65 66 37 2d 34 34 31 36 2d 61 36 37 39 2d 33 61 39 33 30 39 31 38 31 36 31 33 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_bd73a985-3ef7-4416-a679-3a9309181613

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50042	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	672	OUT	GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https://cs.ingage.tech/v1/sync/openx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50035	3.161.163.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	772	OUT	GET /sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dminutemedia.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1 Host: cs-tam.minutemedia-prebid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	851	IN	HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Fri, 19 Apr 2024 13:12:42 GMT access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: cs-tam.minutemedia-prebid.com set-cookie: wrvUserID=olBHBm7-Cp_mm; Path=/; Domain=.minutemedia-prebid.com; Expires=Sun, 19 May 2024 13:12:42 UTC; Max-Age=2592000; HttpOnly; SameSite=None; Secure x-envoy-upstream-service-time: 1 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 532a309337a742b782e48474131af65e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 X-Amz-Cf-Id: 21_ZXi9sDNEH2VNWsFxIaZ_-bRM8Df945pGJbYoLmPQQJUKa2dD61g==
2024-04-19 13:12:42 UTC	4426	IN	Data Raw: 31 31 34 32 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 75 74 69 6c 73 2f 78 61 70 69 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 6d 69 6e 75 74 65 5f 6d 65 64 69 61 26 65 6e 64 70 6f 69 6e 74 3d 75 73 2d 65 61 73 74 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 32 39 39 37 35 34 36 37 2d 36 66 31 62 2d 34 65 30 36 2d 62 35 34 Data Ascii: 1142<html><head><title></title></head><body><iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=minute_media&endpoint=us-east" style="display:none;"></iframe><img src="https://u.openx.net/w/1.0/cm?id=29975467-6f1b-4e06-b54
2024-04-19 13:12:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50032	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	770	OUT	GET /cs/usersync.php?type=iframe&ruid=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dtappx.com%26id%3D%7B%7BTPPXUID%7D%7D&gdpr=0 HTTP/1.1 Host: ssp.api.tappx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	553	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:42 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * access-control-allow-credentials: true set-cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; expires=Sun, 19-May-2024 13:12:42 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None set-cookie: TXCD=1713532362; expires=Sun, 19-May-2024 13:12:42 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None connection: close
2024-04-19 13:12:42 UTC	979	IN	Data Raw: 33 43 43 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 20 2f 3e 3c 73 74 79 6c 65 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 63 6f 6f 6b 69 65 3f 72 65 64 69 72 65 63 74 5f 75 72 6c 3d Data Ascii: 3CC<html><head><meta name='referrer' content='no-referrer' /><style> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://cm.adform.net/cookie?redirect_url=
2024-04-19 13:12:42 UTC	1543	IN	Data Raw: 36 30 30 0d 0a 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 38 31 31 31 26 75 73 65 72 49 64 4d 61 63 72 6f 3d 28 50 4d 5f 55 49 44 29 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 73 70 2e 61 70 69 2e 74 61 70 70 78 2e 63 6f 6d 25 32 46 63 73 25 32 46 75 73 79 6e 63 25 33 46 69 64 6d 6e 25 33 44 37 36 25 32 36 74 79 70 65 25 33 44 69 66 72 61 6d 65 25 32 36 69 64 25 33 44 25 32 38 50 4d 5f 55 49 44 25 32 39 25 32 36 61 75 78 75 69 64 25 33 44 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 Data Ascii: 600nheight="0" src="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=158111&userIdMacro=(PM_UID)&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D76%26type%3Diframe%26id%3D%28PM_UID%29%26auxuid%3D" sandbox="allow
2024-04-19 13:12:42 UTC	1543	IN	Data Raw: 36 30 30 0d 0a 64 74 68 3a 20 31 70 78 3b 68 65 69 67 68 74 3a 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 22 2f 3e 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 70 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 73 70 2e 61 70 69 2e 74 61 70 70 78 2e 63 6f 6d 25 32 46 63 73 25 32 46 75 73 79 6e 63 25 33 46 69 64 6d 6e 25 33 44 31 33 25 32 36 74 79 70 65 25 33 44 69 66 72 61 6d 65 25 Data Ascii: 600dth: 1px;height: 1px;position: fixed;"/><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D13%26type%3Diframe%
2024-04-19 13:12:42 UTC	1318	IN	Data Raw: 35 31 41 0d 0a 34 38 26 67 64 70 72 3d 30 26 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 56 41 43 59 7d 7d 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 77 69 64 74 68 3a 20 31 70 78 3b 68 65 69 67 68 74 3a 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 22 2f 3e 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2e 6e 65 78 74 6d 69 6c 6c 6d 65 64 69 61 2e 63 Data Ascii: 51A48&gdpr=0&consent=&us_privacy={{US_PRIVACY}}" width="1" height="1" style="visibility: hidden; width: 1px;height: 1px;position: fixed;"/><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://cookies.nextmillmedia.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50041	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	663	OUT	GET /v1/envelope?pid=0010b00002cG8kQAAS&gdpr=0&src=pbjs&ver=8.37.0&coppa=0&us_privacy=1YNN HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	367	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 49 via: 1.1 google date: Fri, 19 Apr 2024 13:12:42 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:42 UTC	49	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 75 6e 74 72 79 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"succeeded":false,"error":"Country not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	49999	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	623	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	113	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 33 36 33 7d 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 70 62 6a 73 5f 49 44 35 22 2c 22 74 79 70 65 22 3a 22 63 6f 6f 6b 69 65 22 2c 22 65 78 70 69 72 65 73 22 3a 33 30 7d 2c 22 70 6d 61 5f 69 64 22 3a 31 30 37 7d Data Ascii: {"name":"id5Id","params":{"partner":363},"storage":{"name":"pbjs_ID5","type":"cookie","expires":30},"pma_id":107}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50039	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	733	OUT	GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	287	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0
2024-04-19 13:12:42 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50036	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	791	OUT	GET /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	912	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:42 GMT;SameSite=None;Partitioned Location: /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint&reat=1 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=b98004473a01b4c2; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50019	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	766	OUT	GET /sync?us_privacy=1YNN& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906
2024-04-19 13:12:42 UTC	914	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1118 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Secure; SameSite=None; Partitioned; Cache-Control: no-cache, no-store, must-revalidate set-cookie: sync=CgoIoQEQqLzzs-8xCgoI5gEQqLzzs-8xCgoIhwIQqLzzs-8xCgoItwIQqLzzs-8xCgkIOhCovPOz7zEKCQgbEKi887PvMQoKCIwCEKi887PvMQoKCKwCEKi887PvMQoKCK0CEKi887PvMQoJCF8QqLzzs-8x; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Path=/sync; Domain=.3lift.com; Secure; SameSite=None set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-19 13:12:42 UTC	1118	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 35 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 26 67 70 70 5f 73 69 64 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 31 36 31 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 32 33 30 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e Data Ascii: <!DOCTYPE html><html><body><img id=58 src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid="><img id=161 src="https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent="><img id=230 src="https://cm.g.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50018	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	801	OUT	GET /getuid?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906
2024-04-19 13:12:42 UTC	674	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Length: 0 Connection: close Location: https://s.amazon-adsystem.com/ecm3?ex=3lift.com&id=3059573620546902553906 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50045	18.67.76.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	635	OUT	GET /c/?adExInit=aps&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	637	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 13:12:42 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=5a11a496f1; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMaps=5a11a496f1; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://s.amazon-adsystem.com/ecm3?ex=smaato.com&id=5a11a496f1 X-Cache: Miss from cloudfront Via: 1.1 1bd7d779bed244375679d82e1821cc3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: GFOicggIFrHIHmaY1cIP2cJofFGc3t2Lpz_pjYDSiOI2U9zcDFrjhQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50011	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	1029	OUT	GET /v1/syncPage/rubicon?userId=84007c2a-d31f-425a-b5e3-a16088ed1608&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1 Host: cs.ingage.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:42 UTC	142	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Origin
2024-04-19 13:12:42 UTC	1008	IN	Data Raw: 33 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 73 65 72 2d 53 79 6e 63 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 63 55 73 65 72 4b 65 79 20 3d 20 Data Ascii: 3e9<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <title>User-Sync</title></head><body><script type="text/javascript"> if (window.localStorage) { const lcUserKey =
2024-04-19 13:12:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50119	3.161.188.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	699	OUT	GET /auth/index.html HTTP/1.1 Host: auth.instiengage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 75 Connection: close Date: Fri, 19 Apr 2024 13:12:43 GMT Last-Modified: Wed, 03 Apr 2024 11:41:02 GMT ETag: "2e3d17ce9023be2c1313c02113f5c568" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: iPGHdZX0zAvLbeA_nhskHEjmxiytE2aL Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cce4f085bae54e809d81c3987bfe466e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: mE-BbcOsmv40flQ0b7J6EgWS0s98MZhQHbJoa-1BqVvj3BTe-oXSBQ==
2024-04-19 13:12:42 UTC	75	IN	Data Raw: 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 2e 2f 61 75 74 68 49 66 72 61 6d 65 2e 6a 73 3f 76 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><script async src="./authIframe.js?v=1"></script></head><body></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50029	54.164.246.52	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	753	OUT	GET /amazon/sync?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dogury.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: ms-cookie-sync.presage.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	287	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Origin: * Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate Date: Fri, 19 Apr 2024 13:12:42 GMT Expires: 0 Pragma: no-cache Surrogate-Control: no-store X-Powered-By: Express Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50047	35.208.249.213	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	642	OUT	GET /ju/cs/amazon?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	564	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://s.amazon-adsystem.com/ecm3?ex=baidu.com&id=22210ca737cf7b3c2itoor00lv6oxcmr Set-Cookie: __mguid_=22210ca737cf7b3c2itoor00lv6oxcmr; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:42 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50033	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	758	OUT	GET /jwumXNuB/v1/?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsharethrough.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	270	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Length: 703 Connection: close Set-Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd; Max-Age=2592000; Expires=Sun, 19 May 2024 13:12:42 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None
2024-04-19 13:12:42 UTC	703	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 26 69 64 3d 37 34 35 36 37 37 31 61 2d 34 39 65 65 2d 34 65 32 61 2d 62 30 31 33 2d 36 36 38 64 65 36 31 65 31 35 64 64 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://s.amazon-adsystem.com/ecm3?ex=sharethrough.com&id=7456771a-49ee-4e2a-b013-668de61e15dd"><img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50040	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	756	OUT	GET /sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drise.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1 Host: cs-tam.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: cs-tam.yellowblue.io set-cookie: wrvUserID=P2oHoy7zC; Path=/; Domain=.yellowblue.io; Expires=Sun, 19 May 2024 13:12:42 UTC; Max-Age=2592000; HttpOnly; SameSite=None; Secure x-envoy-upstream-service-time: 2 server: istio-envoy
2024-04-19 13:12:42 UTC	3266	IN	Data Raw: 63 62 62 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 75 74 69 6c 73 2f 78 61 70 69 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 72 69 73 65 5f 65 6e 67 61 67 65 26 65 6e 64 70 6f 69 6e 74 3d 75 73 2d 65 61 73 74 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 36 30 32 39 35 26 67 64 Data Ascii: cbb<html><head><title></title></head><body><iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east" style="display:none;"></iframe><img src="https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gd
2024-04-19 13:12:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50038	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	723	OUT	GET /getuid?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	1509	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fid%3D%2524UID%26ex%3Dappnexus.com%26gdpr%3D0 AN-X-Request-Uuid: 4fd0be2a-132d-40fb-90a2-454c7b4f13b1 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:42 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:42 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:42 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50082	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	617	OUT	GET /amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D?gdpr=0 HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	914	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=36A9D4BEDC8C49329C57B49CB04880F6; Path=/; domain=simpli.fi; Expires=Sun, 20-Apr-25 13:12:42 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=36A9D4BEDC8C49329C57B49CB04880F6; Path=/; domain=simpli.fi; Expires=Sun, 20-Apr-25 13:12:42 GMT; Secure; Location: https://s.amazon-adsystem.com/ecm3?id=36A9D4BEDC8C49329C57B49CB04880F6&ex=simpli.fi&status=ok Expires: Thu, 18 Apr 2024 13:12:42 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-19 13:12:42 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50085	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	651	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	636	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ew75cZqQhtpEcO-Pru61; Path=/; Domain=zemanta.com; Expires=Sat, 19 Apr 2025 13:12:42 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 13:12:42 UTC	145	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 61 6d 61 7a 6f 6e 5f 74 61 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 25 32 46 65 63 6d 33 25 33 46 65 78 25 33 44 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 25 32 36 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50079	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	645	OUT	GET /check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D?gdpr=0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	837	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D?gdpr=0 Set-Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; path=/; expires=Sat, 19-Apr-2025 13:12:42 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713532362; path=/; expires=Sat, 19-Apr-2025 13:12:42 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713532362; path=/; expires=Sat, 19-Apr-2025 13:12:42 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713532362; path=/; expires=Sat, 19-Apr-2025 13:12:42 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50108	52.20.181.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	558	OUT	GET /json/ HTTP/1.1 Host: geoip.instiengage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50021	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	753	OUT	GET /usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	1225	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:42 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fgdpr%3D0%26ex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1 CF-Ray: 876d25d039aa53b5-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2F7HFqgYane5WEuQAJtZDZ6AyHT907xhwcjb1Td62z9fQBQj9PtN3awM7zw0zWTUy%2FLFiKM8srHug8z1dpPjXl15XulvHnItzYyrSTKY2pcG%2BILKx5WtHrHu9PIYmZaquc3HJJwf9HpLgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50030	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	676	OUT	GET /uc.html?pubid=91e92b73fd&gdpr=0 HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	1734	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:42 GMT content-type: text/html content-length: 1755 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-197 x-xss-protection: 0 set-cookie: __uqc=1; expires=Fri, 19 Apr 2024 15:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; expires=Sun, 19 May 2024 13:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uin_ex=1; expires=Sat, 20 Apr 2024 13:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uir_ex=40997562; expires=Fri, 19 Apr 2024 22:48:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uin_a9=1; expires=Sat, 20 Apr 2024 13:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uir_a9=40997562; expires=Fri, 19 Apr 2024 22:48:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uin_cx=1; expires=Wed, 22 May 2024 01:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uir_cx=40997562; expires=Thu, 02 May 2024 13:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uin_z1=1; expires=Sat, 20 Apr 2024 13:12:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: __uir_z1=40997562; expires=Fri, 19 Apr 2024 22:48:42 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85197\|ZiJtz; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-04-19 13:12:42 UTC	1755	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 73 62 69 49 6d 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 77 2c 6e 77 6c 6b 29 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 6e 77 6c 6b 3b 7d 3b 73 62 69 49 6d 67 28 22 62 77 22 2c 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 6f 6e 6f 62 69 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 29 3b 73 62 69 49 6d 67 28 22 74 64 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 6f 6e 6f 62 69 26 74 74 64 5f 74 70 69 3d 31 26 74 74 64 5f 70 75 69 64 3d 39 31 65 39 32 62 37 33 66 64 26 67 64 70 72 3d 30 26 67 64 70 Data Ascii: <html><body><script>sbiImg=function(nw,nwlk){new Image().src=nwlk;};sbiImg("bw","https://x.bidswitch.net/sync?ssp=sonobi&gdpr=0&gdpr_consent=");sbiImg("td","https://match.adsrvr.org/track/cmf/generic?ttd_pid=sonobi&ttd_tpi=1&ttd_puid=91e92b73fd&gdpr=0&gdp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50044	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	651	OUT	GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	660	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://s.amazon-adsystem.com/ecm3?ex=media.net&id=3565339623115671000V10 Set-Cookie: visitor-id=3565339623115671000V10; Expires=Sat, 19 Apr 2025 13:12:42 GMT; domain=.media.net; Path=/; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Fri, 19 Apr 2024 13:12:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 13:12:42 GMT Connection: close
2024-04-19 13:12:42 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50109	18.67.66.39	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	671	OUT	GET /production/podcast_uploaded_episode400/36252507/36252507-1675129791406-55c48aea3e968.jpg HTTP/1.1 Host: d3t3ozftmdmh3i.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://castbox.fm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	554	IN	HTTP/1.1 200 OK Content-Type: image/jpg Content-Length: 88372 Connection: close Date: Fri, 19 Apr 2024 13:12:43 GMT Last-Modified: Tue, 31 Jan 2023 01:49:52 GMT ETag: "97c98d832cc27dc8fc7bde3140f66711" x-amz-server-side-encryption: AES256 x-amz-meta-content-type: image/jpg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5e1f849553b1d58615d0d8f7c044078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: lxvV-lv_Q7XYqiqFQaNamp50slFMl73E-MPe7XGjCNB4_T8oAJod0A== Cache-Control: max-age=2592000
2024-04-19 13:12:42 UTC	15830	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 90 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 01 00 0a ff c4 00 5c 10 00 01 03 02 04 04 04 03 05 05 04 06 03 0b 09 09 01 02 03 04 05 11 00 06 07 21 08 12 31 41 13 22 51 61 09 14 71 23 32 42 81 Data Ascii: JFIFCC\!1A"Qaq#2B
2024-04-19 13:12:42 UTC	11	IN	Data Raw: b4 16 13 ce a4 5e f6 f6 c4 3d 45 Data Ascii: ^=E
2024-04-19 13:12:42 UTC	16384	IN	Data Raw: 8e 45 ca a8 1c 40 70 93 06 a9 21 f5 0a 7a 4d c9 df 93 16 50 d4 6c 9a 73 55 6f ae f0 39 1d fa a7 33 74 a0 7c dd 91 ef 89 82 a5 01 75 35 68 97 04 d1 69 ed b2 f4 8a 62 52 00 1d 51 88 93 54 9b ec 9c 01 58 bc ab a5 d9 2f 21 43 4b af b2 d0 28 4e e5 40 62 1b 9e e7 23 49 99 fb 88 6c a7 93 63 2d 98 72 1b 05 23 6b 11 85 32 17 bc a1 70 17 e5 35 d6 9c 64 f2 b8 9b 63 7e 43 87 2a 3f 2b 9c 12 08 48 ae ba d3 83 c3 3d fe ef ae 0c 38 b7 74 08 05 38 1a a1 8a a5 3d c4 dc 36 7c 25 2d c0 4e ea 01 24 ff 00 86 2a b1 a9 4f dd 6e de 54 aa 28 b5 48 41 48 11 e1 78 90 16 ef 84 1b 6d f5 86 d1 63 d4 27 73 6f cb 6c 63 ae 15 8b 9b 70 be 5b cc a2 40 8d 10 05 34 84 6f 7d ed ea 7f ad be b8 17 05 36 77 4c aa fe 60 72 54 c7 9a 8c 90 84 97 09 51 48 e8 07 40 0e 12 5d bd 93 44 1b a2 54 e7 52 dc Data Ascii: E@p!zMPlsUo93t\|u5hibRQTX/!CK(N@b#Ilc-r#k2p5dc~C?+H=8t8=6\|%-N$OnT(HAHxmc'solcp[@4o}6wL`rTQH@]DTR
2024-04-19 13:12:42 UTC	16384	IN	Data Raw: 58 d8 da fd 71 55 31 b8 b0 2a ce 16 82 78 49 2f d3 50 cb 2d 38 da 3c 34 15 00 84 24 77 b9 ed db eb 88 ad 73 c0 b2 94 0a 2b 26 22 5c 65 09 4b 01 40 79 95 7e 89 bf a5 ff 00 cd f0 09 20 a3 16 e4 a6 96 64 b5 3c 15 84 a5 7c ea 3e 67 14 08 1d b7 f4 1d 7a 61 0f 75 c2 95 19 b9 4c fa f1 4f 21 79 c6 db 08 51 48 b2 45 b9 48 f4 1d f0 ce bb a9 57 01 45 8b af 69 4b 79 8a a7 95 33 55 48 47 a8 db 9b c5 4a 54 6c 48 3e 45 10 39 77 1d 8f ae 35 f8 0c 35 ce 61 74 43 63 6e 56 2f 34 d4 e0 ef 78 65 41 b3 ed b7 a2 85 b5 7a 9d 54 6e aa 9a dd 12 2a 1d a3 cb 96 94 ac 14 8e 52 a0 d7 98 24 27 ef 00 92 2f 6d 81 03 1b 43 24 0d 75 9f f1 00 b9 8f 73 38 1a e2 24 b0 dd 36 ea 1a d5 9a f2 8d 19 59 33 4d 28 f1 1d a5 b2 0b 95 29 52 18 f1 15 2c 9e aa b8 b7 28 03 61 df 61 f4 c6 43 31 e0 f4 38 ad Data Ascii: XqU1xI/P-8<4$ws+&"\eK@y~ d<\|>gzauLO!yQHEHWEiKy3UHGJTlH>E9w55atCcnV/4xeAzTnR$'/mC$us8$6Y3M()R,(aaC18
2024-04-19 13:12:42 UTC	2048	IN	Data Raw: 8e 9f 35 16 90 92 d3 2a 4f a2 ec 6e bf f7 89 c4 b8 f3 56 59 cb bf f7 6d 3e b9 07 f5 bb 77 7c bc be 48 3a aa 86 92 fa 0d d3 e3 23 fc 39 f4 43 2b c1 47 ce 64 b8 b5 07 40 1e 79 cc 87 0f e9 8a 5a fe d1 33 4d 69 2e 64 8e 6b 7d 36 55 f2 63 a4 9f 0e c9 ca ef 04 3a 0a eb 5e 1b da 55 45 69 3f c6 dc 40 82 3f 34 da d8 80 cc db 9b c1 04 54 3f 7f 33 75 18 e3 33 13 b3 93 4b 30 70 cd c1 6e 54 94 23 e6 5c cd 46 a4 ba b5 10 86 64 d7 1b 6d 67 e8 95 ae f8 d1 e1 d8 be 77 c4 22 73 d8 5c 43 7c 98 4f e4 13 ec c5 71 13 c3 55 b4 cd b5 68 b1 92 c3 e9 64 78 89 57 88 a2 a1 74 a1 1c aa f3 0b f5 bd f1 f4 ad a0 70 b1 1a 7c 3b ac b9 f8 8b eb 8c ed 44 af e6 aa c1 42 97 90 f4 fe 41 0b 5c 82 af 02 a9 5c 09 36 27 6d d2 c7 29 00 6e 0b a4 f7 48 b5 8d 3c 44 d9 a0 a8 d3 3c 46 db 95 8c 59 fe a9 Data Ascii: 5*OnVYm>w\|H:#9C+Gd@yZ3Mi.dk}6Uc:^UEi?@?4T?3u3K0pnT#\Fdmgw"s\C\|OqUhdxWtp\|;DBA\\6'm)nH<D<FY
2024-04-19 13:12:42 UTC	16384	IN	Data Raw: 53 45 de 5b 93 d3 eb c2 aa fb ac b2 0d 4e 36 1e 68 eb b2 33 2e 61 a6 ba cd 06 a7 16 88 f8 f2 b8 a9 d1 0b cf 35 7e 87 c3 04 26 fe 97 24 63 4b 83 d1 4b 57 23 8c d6 68 61 dc 0e 4f d4 71 f2 51 a4 8e 9e 1b 13 77 5f 8b 70 98 19 93 84 da 76 a0 3e a7 35 07 58 73 8d 79 0b 5d fe 53 f7 ba a2 45 48 f6 6a 30 42 7f 5b e3 a0 52 86 47 18 65 33 18 c2 3a e8 0e 3f 57 5c fd 2c 9e 66 24 e8 7e 06 00 89 42 f8 79 f0 ab 1d 09 4c 8d 16 a3 4c 50 1f da 4f 60 be b2 7d 79 97 72 71 63 f7 8c 66 db d4 c8 3d 9e 5a 3e 83 64 0e 35 52 ee bf 80 52 27 14 f9 fa 66 95 69 2d 5f 30 d0 a2 21 ea e3 ad 18 94 06 5e dd 2f 4d 90 b4 b2 ca 48 ee 90 55 7f f6 50 71 ef 86 32 ef ba ac 60 d4 2e b1 cb e2 f1 a8 4c e8 d6 93 50 b8 4f a2 4c 79 d9 72 d6 2a 35 e9 77 b7 cc 9b 85 a9 6a f5 5a dd 51 51 f4 29 3e b8 b6 a0 Data Ascii: SE[N6h3.a5~&$cKKW#haOqQw_pv>5Xsy]SEHj0B[RGe3:?W\,f$~ByLLPO`}yrqcf=Z>d5RR'fi-_0!^/MHUPq2`.LPOLyr*5wjZQQ)>
2024-04-19 13:12:42 UTC	16384	IN	Data Raw: 85 98 14 25 a3 d9 3c c6 0d d4 aa 83 c6 7b aa 02 8d c0 bf 5f fb 7a e3 61 8e 57 6a bc 71 ec 15 f4 af 70 f0 8e 14 ed 40 82 2a 0e c7 a6 36 49 49 1c ce 5c 74 48 df f9 9d b1 cf e5 76 92 e7 95 55 37 84 dd 4c 39 72 2b 31 a9 ed a1 b6 ca 40 1f d3 09 84 f8 6c b3 d5 2e 26 4d d1 e7 dd 43 69 24 0d ec 76 f5 c4 f8 21 d6 f0 a3 01 74 9f 01 93 51 ab aa 72 8f d9 23 66 8f bf 42 7f cf a6 2f 65 1f 77 8e fe 7c 25 bc e8 68 09 4a 5b 49 3c bc ad 93 63 bd b1 58 cb 5e e9 00 d8 ec 92 68 11 55 3a b4 e4 db ac b6 c9 29 07 fb c7 fe 5f d7 16 f1 0d 14 a5 c3 93 b2 7a 47 e9 65 91 a5 3d f3 b5 95 a0 d8 a1 9e bb dc 5f 15 98 84 cc a7 8c 30 94 41 a1 b1 05 eb 76 9b 5a 4b 89 50 28 8c 9b 58 74 2a 3d 4f e4 36 c5 55 3b 3b c7 eb fe 94 bd 99 09 1d 4a 53 99 49 62 a0 52 a5 a9 e4 14 a4 a4 f8 4f 14 73 24 fe Data Ascii: %<{_zaWjqp@6II\tHvU7L9r+1@l.&MCi$v!tQr#fB/ew\|%hJ[I<cX^hU:)_zGe=_0AvZKP(Xt=O6U;;JSIbROs$
2024-04-19 13:12:42 UTC	4947	IN	Data Raw: 56 7e 07 d9 e4 b8 8d 4d 51 76 22 c6 ea ee da e6 36 1b 92 00 69 73 ed c0 bd dd 70 09 e1 15 ac 71 11 f1 a3 cb d3 95 4c af f1 25 ad 50 64 a5 21 4a 8f 33 3d cb 69 60 1e 87 95 4f 03 be 28 30 cc 1e 8f 1a a5 15 58 7b 63 9a 23 70 1d 1b 98 f6 92 39 1a 9a 48 b8 eb be cb 89 d2 f6 15 da d5 74 5d ed 3e 1c 5e df 36 c9 11 1f 50 fb 26 3e a7 d4 3e 21 3c 43 54 28 c9 d7 3d 4d ce d9 9c d2 25 f8 94 89 19 9f 35 39 2c 53 9c 51 4f 33 8d 95 ba a2 d9 f2 a4 92 91 7f 28 f4 c5 bc 39 5a be 37 59 90 06 df 63 c5 be 76 56 14 9f 67 6e d8 2a ea e3 8a 4c 35 cc 0e 20 17 39 f1 d9 a0 f5 36 71 36 1d 6c 09 f4 52 0e ba e6 7f 89 ee 7e ca f5 2c 9f ff 00 74 16 ae e7 8c 8d 26 0b 6c d7 05 4f 35 c9 91 05 c5 1b 15 32 f2 54 e7 27 2d c2 48 0a 1b ed 88 78 9e 15 83 e1 98 cc 54 11 be 31 3c 82 ec 61 73 1b 23 Data Ascii: V~MQv"6ispqL%Pd!J3=i`O(0X{c#p9Ht]>^6P&>>!<CT(=M%59,SQO3(9Z7YcvVgn*L5 96q6lR~,t&lO52T'-HxT1<as#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50037	45.76.249.237	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	1311	OUT	GET /api/user/html/65354ca311421d643073bbdb?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dvidazoo.com%26id%3D%24%7BvdzUserSyncMacro%7D&gdpr=0 HTTP/1.1 Host: syncaps.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=R8615it8y0YaQPszR6coElZIGEItDzQiAFhobUFaD0cNSlVrWTVnR05jVVNfWENcGlVuAjNyX1hkAgIODRAAG1FqBTNoRRwzV1IOXk1ZT1J7TXNlFUk3AlNXUBdaTgc4V2FgQk0xVVdaDUAaVRJvUmU1SkJiAgENWhdcT1M8BWNgEEllAwFNRVYNHwNsUjQ2RR5lAldeCkQISAc9AjRnEB5wGkFZXUMOSQhpVDM2RktgV1QMD00OTwBqVGByX1hkBVFeC0QBTwdoUGlkRkIxB1peXRUNTAV7PH1yEBUnWBdNU0QUW1c9ESNySQEvGkEcDAdLEF83Q2tyS0liV1VdX0AVTwY7WXxhRBwxG1AKDEUVQAE7BzRpQU02BQdeS1gaGl83DzQzBxM9WCoLS04aTwQ7AjQ2QUliVQULWU0BTlVhB2FlQ09lFB4%3D
2024-04-19 13:12:42 UTC	576	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; Domain=.cootlogix.com; Path=/; Expires=Sun, 19 May 2024 13:12:42 GMT; Secure; SameSite=None content-type: text/html content-length: 5147 date: Fri, 19 Apr 2024 13:12:42 GMT keep-alive: timeout=5 connection: close
2024-04-19 13:12:42 UTC	817	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 76 69 64 61 7a 6f 6f 2e 63 6f 6d 26 69 64 3d 61 32 63 66 66 66 30 38 2d 65 33 61 31 2d 64 34 39 66 2d 64 63 63 64 2d 38 36 64 66 37 36 63 64 66 38 30 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 63 6f 6f 74 6c 6f 67 69 78 2e 63 Data Ascii: <html><head><title>Pixels</title></head><body> <img src="https://s.amazon-adsystem.com/ecm3?ex=vidazoo.com&id=a2cfff08-e3a1-d49f-dccd-86df76cdf804"> <img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.cootlogix.c
2024-04-19 13:12:42 UTC	4194	IN	Data Raw: 0a 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 6b 75 65 65 7a 72 74 62 2e 63 6f 6d 2f 61 70 69 2f 75 73 65 72 2f 68 74 6d 6c 2f 36 32 63 65 37 39 65 37 64 64 31 35 30 39 39 35 33 34 61 65 35 65 30 34 3f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 63 2e 63 6f 6f 74 6c 6f 67 69 78 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 75 73 65 72 25 33 46 70 61 72 74 6e 65 72 49 64 25 33 44 6b 75 65 65 7a 25 32 36 75 73 65 72 49 64 25 33 44 25 32 34 25 37 42 76 64 7a 55 73 65 72 53 79 6e 63 4d 61 63 72 6f 25 37 44 25 32 36 67 64 70 72 25 33 44 25 32 34 25 37 42 75 73 65 72 2e 67 64 70 72 25 37 44 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 34 25 37 42 75 73 65 72 2e 63 6f 6e 73 65 6e 74 53 Data Ascii: <iframe src="https://sync.kueezrtb.com/api/user/html/62ce79e7dd15099534ae5e04?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dkueez%26userId%3D%24%7BvdzUserSyncMacro%7D%26gdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentS
2024-04-19 13:12:42 UTC	136	IN	Data Raw: 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 70 78 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: rginheight="0" marginwidth="0" frameborder="0" width="1px" height="1px" style="display: none" ></iframe> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50031	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	681	OUT	GET /api/sync?callerId=2&gdpr=0 HTTP/1.1 Host: ssbsync-us.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:42 UTC	348	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 19 Apr 2024 13:12:41 GMT location: https://s.amazon-adsystem.com/ecm3?ex=smart.com&id=1845939505169848484&gdpr=0&gdpr_consent= set-cookie: pid=1845939505169848484; expires=Tue, 20 May 2025 13:11:42 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50092	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	3730	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=3333872983477502&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Crail%2Chome%2C2%2C1%2C3%2Ctop&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F8%2F4&prev_iu_szs=320x50%7C300x600%7C300x250%7C160x600%2C320x50%7C300x250%2C320x50%7C160x600%7C300x250%7C300x600%2C728x90&fluid=height%2Cheight%2Cheight%2C0&ifi=3&didk=4152496204~1812581917~2418314740~3894687449&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532354753&lmt=1713532038&adxs=812%2C812%2C812%2C268&adys=1511%2C564%2C3374%2C365&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=3%7C0%7C4%7C0&ucis=3%7C4%7C5%7C6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x800%7C300x403%7C300x600%7C1000x184&msz=300x800%7C300x250%7C300x600%7C728x90&fws=4%2C4%2C4%2C0&ohw=300%2C300%2C300%2C0&psts=AOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYo97ys-8xSABSAghkEhsKDDMzYWNyb3NzLmNvbRih3vKz7zFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Yo97ys-8xSABSAghkEhQKBW9wZW54GKDe8rPvMUgAUgIIZA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dhome_Mid_Right_300xFlex_InnerRail%26pos%3Dhome_Mid_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_Right_300x250_InnerRail%26pos%3Dhome_Top_Right_300x250_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%26hb_format_rubicon%3Dbanner%26hb_size_rubicon%3D300x250%26hb_pb_rubicon%3D0.06%26hb_adid_rubicon%3D7038d15946e9bf6%26hb_bidder_rubicon%3Drubicon%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.06%26hb_adid%3D7038d15946e9bf6%26hb_bidder%3Drubicon%7CdivID%3Dhome_Bot_Right_300xFlex_InnerRail%26pos%3Dhome_Bot_Right_300xFlex_InnerRail%26refresh_count%3D0%26amznbid%3D2%26amznp%3D2%7CdivID%3Dhome_Top_728x90%26pos%3Dhome_Top_728x90%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes&adks=2076731111%2C4110530880%2C3132801048%2C629776701&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:42 UTC	881	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: 6530590001,6530590001,6218455564,6218455564 Google-Creative-Id: 138467780849,138467781365,138446193591,138446226677 Google-MediationGroup-Id: -2,-2,-2,-2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:42 UTC	374	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 72 61 69 6c 2f 68 6f 6d 65 2f 32 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 36 37 37 38 30 38 34 39 5d 2c 5b 36 35 33 30 35 39 30 30 30 31 5d 2c 5b 34 38 38 38 32 33 35 34 36 34 5d 2c 5b 32 38 35 38 32 38 32 38 33 35 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 69 74 42 6b 57 63 30 75 77 55 64 54 42 36 51 4c 6d 50 Data Ascii: 8000{"/21854935662/justjared/desktop/rail/home/2":["html",1,null,null,1,250,300,0,0,null,null,null,1,null,[138467780849],[6530590001],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslitBkWc0uwUdTB6QLmP
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 41 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 7d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 69 6e 44 61 70 49 46 3d 74 72 75 65 2c 69 6e 47 70 74 49 46 3d 74 72 75 65 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e Data Ascii: A",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head>
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 78 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 45 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 45 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 78 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 65 61 3d 7b 7d 2c 46 3d 6e 75 6c 6c 3b 76 61 72 20 47 3d 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 Data Ascii: x("Silk")};function E(a){E[" "](a);return a}E[" "]=function(){};!x("Android")\|\|D();D();x("Safari")&&(D()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera"));var ea={},F=null;var G=Symbol();var
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 20 72 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 28 61 5b 47 5d 7c 30 29 26 32 3f 61 3a 73 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 48 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 72 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 47 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 Data Ascii: ction ra(a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=K(a,void 0,0)?void 0:e&&(a[G]\|0)&2?a:sa(a,b,c,void 0!==d,e);else if(H(a)){const f={};for(let g in a)f[g]=ra(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function sa(a,b,c,d,e){const f=d\|\|c?a[G]\|0:0;d=d?!!
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 68 69 73 2c 73 61 28 74 68 69 73 2e 6c 2c 74 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 2c 21 30 29 7d 7d 3b 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 61 3b 20 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 43 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6c 3a 62 29 5b 47 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 48 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b Data Ascii: his,sa(this.l,ta,void 0,void 0,!1),!0)}};O.prototype.A=fa; O.prototype.toString=function(){return ua(this,this.l,!1).toString()}; function ua(a,b,c){var d=ca?void 0:a.constructor.C;const e=(c?a.l:b)[G];a=b.length;if(!a)return b;let f,g;if(H(c=b[a-1])){a:{
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 64 65 78 4f 66 28 63 2c 62 29 29 26 26 62 3c 64 3b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 3d 3d 66 7c 7c 36 33 3d 3d 66 29 69 66 28 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 65 29 2c 21 66 7c 7c 36 31 3d 3d 66 7c 7c 33 38 3d 3d 66 7c 7c 33 35 3d 3d 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 3d 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 44 61 3d 2f 23 7c 24 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 65 61 72 63 68 28 44 61 29 2c 63 3d 43 61 28 61 2c 30 2c 22 61 73 65 22 2c 62 29 3b 69 66 28 30 3e 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 63 29 3b 69 66 28 30 3e 64 7c 7c 64 3e 62 29 64 3d 62 3b Data Ascii: dexOf(c,b))&&b<d;){var f=a.charCodeAt(b-1);if(38==f\|\|63==f)if(f=a.charCodeAt(b+e),!f\|\|61==f\|\|38==f\|\|35==f)return b;b+=e+1}return-1}var Da=/#\|$/; function Ea(a){var b=a.search(Da),c=Ca(a,0,"ase",b);if(0>c)return null;var d=a.indexOf("&",c);if(0>d\|\|d>b)d=b;
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 26 26 62 28 65 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 3b 41 61 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 41 61 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 63 2e 73 72 63 3d 61 3b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 63 29 7d 3b 6c 65 74 20 51 61 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 62 26 26 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: &&b(e);c.removeEventListener&&c.removeEventListener("load",d,!1);c.removeEventListener&&c.removeEventListener("error",d,!1)};Aa(c,"load",d);Aa(c,"error",d)}c.src=a;u.google_image_requests.push(c)};let Qa=0;function Ra(a,b=null){return b&&b.getAttribute("d
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 75 6c 6c 7d 7d 3b 6c 65 74 20 54 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 26 26 61 2e 74 69 6d 69 6e 67 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6e 6f 77 28 29 2b 61 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 3f 61 2e 6e 6f 77 28 29 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 76 61 72 20 63 3d 24 61 28 29 7c 7c 5a 61 28 29 3b 74 68 69 73 2e 6c 61 Data Ascii: ull}};let T=null;function Za(){const a=u.performance;return a&&a.now&&a.timing?Math.floor(a.now()+a.timing.navigationStart):Date.now()}function $a(){const a=u.performance;return a&&a.now?a.now():null};var ab=class{constructor(a,b){var c=$a()\|\|Za();this.la
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 61 28 29 7c 7c 5a 61 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 21 74 68 69 73 2e 67 7c 7c 32 30 34 38 3c 20 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 69 2e 70 75 73 68 28 61 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 66 75 6e 63 74 69 6f 6e 20 65 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 49 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 70 29 7b 28 67 3d 66 62 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 70 2b 22 3d 22 Data Ascii: a()\|\|Za())-a.value;var b=`goog_${a.label}_${a.uniqueId}_end`;U&&V()&&U.mark(b);!this.g\|\|2048< this.i.length\|\|this.i.push(a)}}};function W(a,b){const c={};c[a]=b;return[c]}function eb(a,b,c,d,e){const f=[];Ia(a,function(g,p){(g=fb(g,b,c,d,e))&&f.push(p+"="
2024-04-19 13:12:42 UTC	1255	IN	Data Raw: 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 5c 5c 64 2b 28 3f 3a 2e 7c 5c 5c 6e 29 2a 29 5c 5c 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 5c 6e 20 Data Ascii: =": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\\\d+(?:.\|\\n)*)\\\\2"),"$1");b=a.replace(RegExp("\\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50120	52.20.181.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:42 UTC	558	OUT	GET /json/ HTTP/1.1 Host: geoip.instiengage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:43 UTC	286	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:43 GMT Content-Type: application/json Content-Length: 214 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin X-Database-Date: Thu, 18 Apr 2024 18:42:54 GMT
2024-04-19 13:12:43 UTC	214	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 22 2c 22 63 69 74 79 22 3a 22 22 2c 22 7a 69 70 5f 63 6f 64 65 22 3a 22 22 2c 22 74 69 6d 65 5f 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 37 2e 37 35 31 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 37 2e 38 32 32 2c 22 6d 65 74 72 6f 5f 63 6f 64 65 22 3a 30 7d 0a Data Ascii: {"ip":"81.181.57.52","country_code":"US","country_name":"United States","region_code":"","region_name":"","city":"","zip_code":"","time_zone":"America/Chicago","latitude":37.751,"longitude":-97.822,"metro_code":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50067	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:43 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-04-19 13:12:43 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50043	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	745	OUT	GET /sync?ssp=triplelift&user_id=3059573620546902553906&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
2024-04-19 13:12:44 UTC	296	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //r.bidswitch.net/sync?bidswitch_ssp_id=triplelift&bsw_custom_parameter=58637582-4b7e-42fe-b59a-889f13122ef7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50134	34.120.135.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	660	OUT	GET /esp?url=https%3A%2F%2Fwww.justjared.com%2F&rid=esp&cc=1 HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:44 UTC	391	IN	HTTP/1.1 200 OK X-Powered-By: Express Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-pQPPYSOW1SFchjWARQO+NppwmKs" Date: Fri, 19 Apr 2024 13:12:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:44 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 56 58 5a 71 51 33 42 58 61 48 70 52 54 31 64 56 55 7a 67 72 56 58 68 42 54 55 39 56 55 54 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 55 76 6a 43 70 57 68 7a 51 4f 57 55 53 38 2b 55 78 41 4d 4f 55 51 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoiVXZqQ3BXaHpRT1dVUzgrVXhBTU9VUT09In0=","i":"UvjCpWhzQOWUS8+UxAMOUQ=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50131	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	1339	OUT	GET /pcs/view?xai=AKAOjsvuSMVtDXu38TnSbwkJgKTkrIOiIeT0ZQpdSqoBNfyNjtgTtUT3CmcL0eKCDplQDkkjxNZldv7nTke4z0_BLe7q2EPKvNbGRUOmmzr_isrJXXJcENpx0TpRdx9gupp5Dg_bKKsZVSkrbT00eFDKmpzT50CrvUUPmf-6hrLfFRSa8JoLyAsyNHDJC4KBEVAYPdPyIzDcI5vHYeMTVL_U3MjqBfMVPwXlg69KUUqL0lM9ghKO-fK2fBlB65OR4x7ovpH2WOnRd-UloVEDH9nKVtz9sWl1vnqGavMWrqx9YtZps8v34fmWGABE6hOU2C0GYcnt1IhiJkQADqwtDNipJNK4JdzNho9DGnOWWKoBW9FblIeT5K1zBRtBUZ4pomRuFRvCBfB-HPhebIiFtaEnkN-sEsqnij8C&sai=AMfl-YQ5wZ5vRgsnlTVsgkP2PM-HECGBckr-1wceku4Sd71tMRUaWZbauwKUla0bHXayoYU4hvIjNfWu8RyoH4CC8heQtm0VTeIElZZiNiMcDddLLr7Upx2M65ZEgqxjaq8&sig=Cg0ArKJSzP4QoyRuNtWfEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:44 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:44 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50135	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	1485	OUT	GET /pcs/view?xai=AKAOjstDmDtUufBTIj2KqpckLilY7hhp4nUho-6vBiM6DLgWgSGzRoxxGjagfLvwtVUkkhQQoRPQsNw97EU-nJ9dFT1TO0pkE-Co8GRyjHoN_JRyeQg8Kmo-lDt4rbDC02LIh_ZkVmZ4Z3L6w8G00b3W2IvOz4ekOar4Vcqh3cVa7SVMii8cXrRr4CpfyaTv9AuTS2lBS9fs_bktoAPrbalYSDMnA0Uoh3xZyZcd3kKvx9twabJhfDbJUotvJocSanVlksO_SzQnmDkWnZeV3glz9qW2-P6hKzDAGweCQMSVnUaGd-PII7-3Hbogth3w3z4a147K_hZ2GvouSx2KqRGCVwKPuvXQMJqfQxYIe5DzNLnvgl_IVQDICWQC5DreIO13cp49jbE-xceMV4op5l0VLA&sai=AMfl-YTTp31p25LwAy1y6HXiexm_8qqLem_ik1Et7zxJNtFeZLxOqFekMz2ZaUCucU7ltVDH7Jt2PsHbMP4WpwBflqx6s67JnqcK2jgDAAY2Q-X4o2W9MH9WKPcu8VcKwsA&sig=Cg0ArKJSzEdhBQzSN4XyEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:44 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:44 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:44 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50130	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	1051	OUT	GET /p.png?visit=page&arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6&ed={%22p%22:%22https://www.justjared.com/%22,%22r%22:%22%22,%22tpc%22:1,%22sid%22:%221hrr7pjae0b8e05b36b8ff4%22,%22loc%22:{},%22cbd%22:%2220240419%22,%22ids%22:%22%22,%22sess%22:%22td6j94gqythzzq9bmno6rf%22,%22grp%22:23,%22cohorts%22:[%22avM7hHWe%22,%228FWC3Bns%22]}&cb=1713532360462 HTTP/1.1 Host: silo40.p7cloud.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://silo40.p7cloud.net/if.html?gdpr=false&gdprConsent=false&tpd=false&md=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _t=777; arcid=9bbbe62e-7780-49ac-a0a8-6829acbc35e6; cohorts={}
2024-04-19 13:12:44 UTC	650	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 70 Connection: close Date: Fri, 19 Apr 2024 13:12:45 GMT Last-Modified: Mon, 06 Mar 2023 16:26:59 GMT ETag: "35800716e266902e4fe68ab558d981fb" x-amz-server-side-encryption: AES256 x-amz-meta-s3cmd-attrs: atime:1677083553/ctime:1649182186/gid:20/gname:staff/md5:35800716e266902e4fe68ab558d981fb/mode:33188/mtime:1642119937/uid:501/uname:balajirao Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ef4d1d652a04133dcc01bb4f66ae886a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: SiMh-ket_uq78q7G3X4XIOiLVQVOmIMkBvFNxMwJU_p7KlS4vBUCbQ==
2024-04-19 13:12:44 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50132	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	1177	OUT	GET /pcs/view?xai=AKAOjsvkuUY5zRKwdmMMlKdNwx9nfkDCogBThn2K07lcyzABgaO-Lc3HVFHZ3yypOF2sqH6wrrfUiWliPQYgbZVRNJfNe6NQKRCR93TGj34cCO5pOJmog6qgAWS1VPdi_c3HjLbFD_GXB5j8kwNoBewPLIoJ4PT6UcQVs523W0bRMUGvgiUa3lmGRSzeOFBv6R5--cDSvYOe90sI6TreTkZ55IIfS4ebEohlZfx1uvbE7PUiLuSHQ-vSanQCsjyAuGsm0gQc8_z6uQgutq_wRGMuBUmavjbOERAMFJxxBswWgWlPJNY8y90w9BTdl7GvffjohNlQ8A9_mGf8dcgZPk30eu8ryCpxr4jVQwhzzhuLe-H3hzExAvjiugLlUKMycXdZxS8EejktM1riQXmTAU83JiII2iYBgwkkYgpsPPxxA2W8Lg&sai=AMfl-YSoC8ABPPkz30SA3fxlyCD0rt-HCxK7mC4SMkZd1LJkVo8patGS5HtSzAWTDN96sc0k6VFfY1vM-K3iV8muYRDZ36THj_O0XvATLJEU44EYQ7g0e3479YtpqXoTKiI&sig=Cg0ArKJSzBusx6ZbMrSDEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:44 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:44 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50133	54.224.168.63	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	937	OUT	GET /usync/jp?r=https%3A%2F%2Fmatch.justpremium.com%2Fmatch%2Fgg%3Fjp_uid%3Dr-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319%26ex_uid%3D%5BUID%5D&gdpr=1&gdpr_consent=&us_privacy=1YNN&limit=16 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pre.ads.justpremium.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:44 UTC	214	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 55 Connection: close Server: nginx ETag: "0656d408e84feebb88e950b10efb49503" Timing-Allow-Origin: *
2024-04-19 13:12:44 UTC	55	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title></title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50049	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	777	OUT	GET /usersync/gumgum/?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ew75cZqQhtpEcO-Pru61
2024-04-19 13:12:44 UTC	594	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 103 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=Ew75cZqQhtpEcO-Pru61&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ew75cZqQhtpEcO-Pru61; Path=/; Domain=zemanta.com; Expires=Sat, 19 Apr 2025 13:12:44 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 13:12:44 UTC	103	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 45 77 37 35 63 5a 71 51 68 74 70 45 63 4f 2d 50 72 75 36 31 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=Ew75cZqQhtpEcO-Pru61&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50072	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	860	OUT	GET /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint&reat=1 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2
2024-04-19 13:12:44 UTC	665	IN	HTTP/1.1 200 OK Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Content-Type: text/html;charset=iso-8859-1 Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:44 GMT;Max-Age=0;SameSite=None Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000
2024-04-19 13:12:44 UTC	27	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50074	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	943	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fs.amazon-adsystem.com%252Fecm3%253Fid%3D%2524UID%26ex%3Dappnexus.com%26gdpr%3D0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:44 UTC	1443	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://s.amazon-adsystem.com/ecm3?id=187107314970053313&ex=appnexus.com&gdpr=0 AN-X-Request-Uuid: 65bae735-a068-47fb-82c4-b2297bc92cdd Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:44 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:44 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:44 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50144	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	823	OUT	GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:44 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/xuid?mid=5989&xuid=CAESECw9N3KIDhZWBlzPE3OBQLs&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 Date: Fri, 19 Apr 2024 13:12:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 332 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:44 UTC	332	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 35 39 38 39 26 61 6d 70 3b 78 75 69 64 3d 43 41 45 53 45 43 77 39 4e 33 4b 49 44 68 5a 57 42 6c 7a 50 45 33 4f 42 51 4c 73 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 63 36 32 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/xuid?mid=5989&xuid=CAESECw9N3KIDhZWBlzPE3OBQLs&dongle=c62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50145	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	723	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1YNN& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:45 UTC	729	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:44 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:44 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50143	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	900	OUT	GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1YNN& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQqLzzs-8xCgoI5gEQqLzzs-8xCgoIhwIQqLzzs-8xCgoItwIQqLzzs-8xCgkIOhCovPOz7zEKCQgbEKi887PvMQoKCIwCEKi887PvMQoKCKwCEKi887PvMQoKCK0CEKi887PvMQoJCF8QqLzzs-8x; receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:45 UTC	737	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:44 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:44 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50142	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	651	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:45 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:45 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50146	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:44 UTC	905	OUT	GET /v1/sync/amx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid=&gdpr=1 HTTP/1.1 Host: cs.ingage.tech Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:44 UTC	150	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 13:12:44 GMT Content-Type: application/json Content-Length: 53 Connection: close Vary: Origin
2024-04-19 13:12:44 UTC	53	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 7d Data Ascii: {"message":"Bad Request","statusCode":0,"error":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50155	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	744	OUT	GET /ecm3?ex=3lift.com&id=3059573620546902553906 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:45 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: MVVJW4417MVAKVZR6AWJ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50156	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	756	OUT	GET /sync?ssp=gumgum2&user_id=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
2024-04-19 13:12:45 UTC	315	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //beacon.lynx.cognitivlabs.com/bidSwitch.gif?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=58637582-4b7e-42fe-b59a-889f13122ef7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50165	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	1038	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV9iZDczYTk4NS0zZWY3LTQ0MTYtYTY3OS0zYTkzMDkxODE2MTM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:46 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50176	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	863	OUT	GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https://cs.ingage.tech/v1/sync/openx/84007c2a-d31f-425a-b5e3-a16088ed1608?uid= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:45 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50166	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	740	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:45 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:45 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50137	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	546	OUT	OPTIONS /v1/event?event_name=event_adunit-load HTTP/1.1 Host: event.insticator.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50136	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	546	OUT	OPTIONS /v1/event?event_name=event_adunit-load HTTP/1.1 Host: event.insticator.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50139	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	543	OUT	OPTIONS /v1/event?event_name=event_pageview HTTP/1.1 Host: event.insticator.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50150	152.195.50.49	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	584	OUT	GET /pubapi/3.0/1/911237.3/0/0/ADTECH;v=2;cmd=bid;cors=yes HTTP/1.1 Host: adserver.adtech.advertising.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	103	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:46 GMT Server: awselb/2.0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50147	23.22.93.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	557	OUT	GET /json/ HTTP/1.1 Host: geoip.insticator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	286	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Type: application/json Content-Length: 214 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin X-Database-Date: Thu, 18 Apr 2024 15:24:11 GMT
2024-04-19 13:12:46 UTC	214	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 22 2c 22 63 69 74 79 22 3a 22 22 2c 22 7a 69 70 5f 63 6f 64 65 22 3a 22 22 2c 22 74 69 6d 65 5f 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 37 2e 37 35 31 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 37 2e 38 32 32 2c 22 6d 65 74 72 6f 5f 63 6f 64 65 22 3a 30 7d 0a Data Ascii: {"ip":"81.181.57.52","country_code":"US","country_name":"United States","region_code":"","region_name":"","city":"","zip_code":"","time_zone":"America/Chicago","latitude":37.751,"longitude":-97.822,"metro_code":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50152	34.232.139.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	609	OUT	GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 13:12:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50158	34.232.139.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	635	OUT	GET /sync/triplelift/3059573620546902553906?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 13:12:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50098	3.161.188.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	562	OUT	GET /auth/authIframe.js?v=1 HTTP/1.1 Host: auth.instiengage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.instiengage.com/auth/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	617	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 67620 Connection: close Date: Fri, 19 Apr 2024 13:12:47 GMT Last-Modified: Wed, 03 Apr 2024 11:40:58 GMT ETag: "a67e1c66da733d115b8b1dea66ef33d4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: FwKBUNI6JwO502KX.DBqknq1ER7eCJUe Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2a12383606d26ed635a7073850d56f12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: 6Vk2SuIIrE2qlPcDe7vghiEXNyLLRNPV8DjOgqXiGCKpzg5P0Cu82w==
2024-04-19 13:12:46 UTC	15770	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 33 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 69 2c 61 29 7b 74 72 79 7b 76 61 72 20 75 3d 74 5b 69 5d 28 61 29 2c 63 3d 75 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 74 29 7d 75 2e 64 6f 6e 65 3f 65 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 72 2c 6f 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 76 Data Ascii: !function(){var t={8357:function(t){function e(t,e,n,r,o,i,a){try{var u=t[i](a),c=u.value}catch(t){return void n(t)}u.done?e(c):Promise.resolve(c).then(r,o)}t.exports=function(t){return function(){var n=this,r=arguments;return new Promise((function(o,i){v
2024-04-19 13:12:46 UTC	16384	IN	Data Raw: 72 20 72 3d 6e 28 37 37 30 33 29 2c 6f 3d 6e 28 39 31 34 36 29 2c 69 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 61 3d 72 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 75 3d 6f 28 69 2c 22 6e 61 6d 65 22 29 2c 63 3d 75 26 26 22 73 6f 6d 65 74 68 69 6e 67 22 3d 3d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 6e 61 6d 65 2c 73 3d 75 26 26 28 21 72 7c 7c 72 26 26 61 28 69 2c 22 6e 61 6d 65 22 29 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 45 58 49 53 54 53 3a 75 2c 50 52 4f 50 45 52 3a 63 2c 43 4f 4e 46 49 47 55 52 41 42 4c 45 3a 73 7d 7d 2c 37 35 38 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 38 39 33 29 2c 6f 3d 46 75 Data Ascii: r r=n(7703),o=n(9146),i=Function.prototype,a=r&&Object.getOwnPropertyDescriptor,u=o(i,"name"),c=u&&"something"===function(){}.name,s=u&&(!r\|\|r&&a(i,"name").configurable);t.exports={EXISTS:u,PROPER:c,CONFIGURABLE:s}},7585:function(t,e,n){var r=n(4893),o=Fu
2024-04-19 13:12:46 UTC	16384	IN	Data Raw: 72 20 74 3d 6f 28 22 61 22 2c 22 79 22 29 3b 72 65 74 75 72 6e 20 74 2e 6c 61 73 74 49 6e 64 65 78 3d 32 2c 6e 75 6c 6c 21 3d 74 2e 65 78 65 63 28 22 61 62 63 64 22 29 7d 29 29 2c 61 3d 69 7c 7c 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 6f 28 22 61 22 2c 22 79 22 29 2e 73 74 69 63 6b 79 7d 29 29 2c 75 3d 69 7c 7c 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 28 22 5e 72 22 2c 22 67 79 22 29 3b 72 65 74 75 72 6e 20 74 2e 6c 61 73 74 49 6e 64 65 78 3d 32 2c 6e 75 6c 6c 21 3d 74 2e 65 78 65 63 28 22 73 74 72 22 29 7d 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 42 52 4f 4b 45 4e 5f 43 41 52 45 54 3a 75 2c 4d 49 53 53 45 44 5f 53 54 49 43 4b 59 3a 61 2c 55 4e 53 55 50 50 4f 52 54 45 44 5f 59 3a 69 7d 7d 2c 34 37 35 30 3a 66 Data Ascii: r t=o("a","y");return t.lastIndex=2,null!=t.exec("abcd")})),a=i\|\|r((function(){return!o("a","y").sticky})),u=i\|\|r((function(){var t=o("^r","gy");return t.lastIndex=2,null!=t.exec("str")}));t.exports={BROKEN_CARET:u,MISSED_STICKY:a,UNSUPPORTED_Y:i}},4750:f
2024-04-19 13:12:46 UTC	13848	IN	Data Raw: 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 25 28 32 5b 33 34 36 42 5d 7c 35 45 7c 36 30 7c 37 43 29 2f 67 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 2e 72 65 70 6c 61 63 65 28 2f 5b 28 29 5d 2f 67 2c 65 73 63 61 70 65 29 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 69 29 69 5b 75 5d 26 26 28 61 2b 3d 22 3b 20 22 2b 75 2c 21 30 21 3d 3d 69 5b 75 5d 26 26 28 61 2b 3d 22 3d 22 2b 69 5b 75 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 29 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 6e 2e 77 72 69 74 65 28 6f 2c 65 29 2b 61 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 7b 73 65 74 3a 6f 2c 67 65 74 3a 66 Data Ascii: ncodeURIComponent(e).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var a="";for(var u in i)i[u]&&(a+="; "+u,!0!==i[u]&&(a+="="+i[u].split(";")[0]));return document.cookie=e+"="+n.write(o,e)+a}}return Object.create({set:o,get:f
2024-04-19 13:12:46 UTC	5234	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 69 3d 74 2e 61 70 70 6c 79 28 65 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 6c 28 69 2c 72 2c 6f 2c 61 2c 75 2c 22 6e 65 78 74 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 6c 28 69 2c 72 2c 6f 2c 61 2c 75 2c 22 74 68 72 6f 77 22 2c 74 29 7d 61 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 28 30 2c 63 2e 72 65 71 75 65 73 74 29 28 22 67 65 74 54 72 61 63 6b 69 6e 67 44 61 74 61 22 29 2e 68 61 6e 64 6c 65 28 70 28 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 3b 29 73 77 Data Ascii: ((function(r,o){var i=t.apply(e,n);function a(t){l(i,r,o,a,u,"next",t)}function u(t){l(i,r,o,a,u,"throw",t)}a(void 0)}))}}(0,c.request)("getTrackingData").handle(p(regeneratorRuntime.mark((function t(){return regeneratorRuntime.wrap((function(t){for(;;)sw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50138	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	546	OUT	OPTIONS /v1/event?event_name=event_adunit-load HTTP/1.1 Host: event.insticator.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.justjared.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50154	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	612	OUT	GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1337	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:46 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-574b2083-e644-55af-4eb8-953600e21e55$ip$81.181.57.52 Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgT_4VcH.WRQjJX7dXKKhYfbGzWg2sq4W4S886c9UQILxuGBOT88; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgT_4VcH.WRQjJX7dXKKhYfbGzWg2sq4W4S886c9UQILxuGBOT88; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 126 Connection: Close
2024-04-19 13:12:46 UTC	126	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 35 37 34 62 32 30 38 33 2d 65 36 34 34 2d 35 35 61 66 2d 34 65 62 38 2d 39 35 33 36 30 30 65 32 31 65 35 35 24 69 70 24 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-574b2083-e644-55af-4eb8-953600e21e55$ip$81.181.57.52">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50157	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:45 UTC	626	OUT	GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1357	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:46 GMT Location: https://eb2.3lift.com/xuid?mid=2319&xuid=0-574b2083-e644-55af-4eb8-953600e21e55$ip$81.181.57.52&dongle=4430 Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgQCRAoo.v5Mp%2B07c%2BpE2GkD%2B8FcWFWmV1Ash4wImUBs5lvV3EO4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgQCRAoo.v5Mp%2B07c%2BpE2GkD%2B8FcWFWmV1Ash4wImUBs5lvV3EO4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 138 Connection: Close
2024-04-19 13:12:46 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 33 31 39 26 61 6d 70 3b 78 75 69 64 3d 30 2d 35 37 34 62 32 30 38 33 2d 65 36 34 34 2d 35 35 61 66 2d 34 65 62 38 2d 39 35 33 36 30 30 65 32 31 65 35 35 24 69 70 24 38 31 2e 31 38 31 2e 35 37 2e 35 32 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 34 34 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2319&xuid=0-574b2083-e644-55af-4eb8-953600e21e55$ip$81.181.57.52&dongle=4430">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50163	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	792	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:46 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; Version=1; Expires=Sat, 19-Apr-2025 13:12:46 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=7669598c-e9e1-4744-a9e6-179168743cea Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50162	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	816	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:46 UTC	1427	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=187107314970053313 AN-X-Request-Uuid: 081ff778-5325-4faa-8a14-ab911805b7e3 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50161	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	929	OUT	GET /getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:46 UTC	1504	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.cootlogix.com/api/cookie?partnerId=appnexus&userId=187107314970053313&gdpr=0&gdpr_consent=&us_privacy=1YNN&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 65860e7a-82c4-46c6-bb0b-6ede58ba3e0f Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50164	54.145.3.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	763	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:46 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e Set-Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119; Path=/; Domain=ipredictive.com; Expires=Sat, 19 Apr 2025 13:12:46 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 25bc18ce-38a5-4c97-95a0-a0bc954220ad Content-Length: 108 Connection: Close
2024-04-19 13:12:46 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 64 31 64 65 35 61 38 62 2d 39 65 30 31 2d 34 62 36 31 2d 62 65 34 31 2d 63 61 33 37 66 38 65 35 65 36 32 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50178	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	778	OUT	POST /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Content-Length: 1129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:46 UTC	1129	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 63 62 37 62 33 65 62 32 66 63 63 37 61 22 2c 22 74 6d 61 78 22 3a 34 30 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 66 64 22 3a 31 2c 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 69 6e 73 74 69 63 61 74 6f 72 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 62 64 34 35 61 33 36 37 2d 64 35 66 61 2d 34 32 30 37 2d 39 61 65 63 2d 31 61 63 62 61 38 65 63 35 32 65 62 22 2c 22 68 70 22 3a 31 2c 22 72 69 64 22 3a 22 33 63 62 37 62 33 65 62 32 66 63 63 37 61 22 7d 5d 7d 7d 7d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 Data Ascii: {"id":"3cb7b3eb2fcc7a","tmax":4000,"source":{"fd":1,"ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"insticator.com","sid":"bd45a367-d5fa-4207-9aec-1acba8ec52eb","hp":1,"rid":"3cb7b3eb2fcc7a"}]}}},"site":{"domain":"www.justjared.com","page":"htt
2024-04-19 13:12:46 UTC	329	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 856 Connection: close vary: Origin access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d25e84fbd12ed-ATL
2024-04-19 13:12:46 UTC	856	IN	Data Raw: 7b 22 69 64 22 3a 22 33 63 62 37 62 33 65 62 32 66 63 63 37 61 22 2c 22 62 69 64 69 64 22 3a 22 30 31 48 56 56 37 53 56 4b 41 51 4e 30 54 32 56 42 41 35 4b 37 33 38 39 45 33 22 2c 22 6e 62 72 22 3a 30 2c 22 65 78 74 22 3a 7b 22 73 79 6e 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 72 75 62 69 63 6f 6e 3f 75 73 65 72 49 64 3d 64 34 32 30 61 36 31 33 2d 38 33 39 35 2d 34 32 33 34 2d 38 33 66 64 2d 32 61 38 39 66 64 33 38 37 66 37 65 26 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 25 32 46 75 74 69 6c 73 25 32 46 78 Data Ascii: {"id":"3cb7b3eb2fcc7a","bidid":"01HVV7SVKAQN0T2VBA5K7389E3","nbr":0,"ext":{"sync":[{"type":"iframe","url":"https://cs.ingage.tech/v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50181	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	859	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:46 UTC	585	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 36 34 31 36 2d 36 35 36 31 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 34 30 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 38 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 36 34 33 36 32 2c 22 74 74 66 62 22 3a 30 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 34 35 35 35 35 33 38 32 33 35 39 38 34 37 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 22 73 75 70 70 6c 79 54 79 70 65 73 22 3a 5b 22 64 69 73 Data Ascii: {"url":"https://www.justjared.com/","publisherToken":"6416-6561-01","cmp":false,"timeout":4000,"version":"8.38.0","connectionType":"fixed","auctionStart":1713532364362,"ttfb":0,"bidRequests":[{"id":"245555382359847","sizes":[[300,250]],"supplyTypes":["dis
2024-04-19 13:12:46 UTC	564	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Vary: X-HTTP-Method-Override Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50180	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	852	OUT	POST /cdb?profileId=207&av=36&wv=8.38.0&cb=48547317408&lsavail=1&bundle=r2dEhF82MGEweVgzWll2Z1YlMkJlc3FvY3lzVDcwTFNCNTQlMkJNNkw1T09pckVYUlhWaUNyUUdpeWJhNWYwRENqZElOUiUyRjdTMjZ3cXQ5WGxrTFdWVzZ3MFdvJTJCSEEzYW11ejZOWnBXcXBuY1ZVdVFlNkVlT2VGS1V0cXpyd3locndRT2NrQWdT HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 1203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1203	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 34 33 38 32 64 63 34 2d 64 34 33 30 2d 34 36 39 39 2d 61 34 32 32 2d 30 65 39 64 61 34 39 64 30 31 31 31 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 22 31 31 38 31 36 22 7d 2c 22 72 65 67 73 22 3a 7b 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 32 30 33 62 64 35 66 33 63 66 31 31 33 62 66 22 2c 22 69 6d 70 69 64 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 7d 7d 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 Data Ascii: {"id":"94382dc4-d430-4699-a422-0e9da49d0111","publisher":{"url":"https://www.justjared.com/","networkid":"11816"},"regs":{},"slots":[{"slotid":"203bd5f3cf113bf","impid":"div-insticator-ad-3","ext":{"data":{"pbadslot":"div-insticator-ad-3"}},"sizes":["300x
2024-04-19 13:12:46 UTC	309	IN	HTTP/1.1 204 No Content date: Fri, 19 Apr 2024 13:12:45 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50182	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	762	OUT	GET /ecm3?ex=smart.com&id=1845939505169848484&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:46 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 749KQEKBEJ50S6KA28CH Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50183	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	599	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 1564 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1564	OUT	Data Raw: 7b 22 61 22 3a 22 61 63 31 63 66 36 62 64 2d 36 37 63 32 2d 34 32 32 39 2d 39 37 66 34 2d 31 66 39 38 32 62 64 31 31 62 34 39 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 33 38 2e 30 22 2c 22 76 67 22 3a 22 69 6e 73 74 42 69 64 22 2c 22 69 22 3a 22 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a 7b 22 67 70 70 53 74 Data Ascii: {"a":"ac1cf6bd-67c2-4229-97f4-1f982bd11b49","B":0,"b":"www.justjared.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.38.0","vg":"instBid","i":"anVzdGphcmVkLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":{"gppSt
2024-04-19 13:12:46 UTC	892	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, private, must-revalidate content-length: 969 content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:45 GMT server: envoy vary: origin, Accept-Encoding set-cookie: __amc=1_1713532366_1713532366; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:46 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: amuid2=093ddb0b-bc0b-4b05-b271-5e35cafecafa; path=/; domain=a-mo.net; expires=Sat, 19 Apr 2025 13:12:46 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=093ddb0b-bc0b-4b05-b271-5e35cafecafa; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:46 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 257 connection: close
2024-04-19 13:12:46 UTC	969	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 73 41 42 53 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 56 49 4c 59 57 46 7a 4c 57 51 34 4e 54 51 31 5a 47 4e 61 43 48 42 69 59 54 45 75 4d 79 34 30 61 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 66 6f 42 42 6a 67 75 4d 7a 67 75 4d 4f 67 43 41 59 67 44 7a 74 75 4a 73 51 61 6f 41 30 66 71 41 79 52 68 59 7a 46 6a 5a 6a 5a 69 5a 43 30 32 4e 32 4d 79 4c 54 51 79 4d 6a 6b 74 4f 54 64 6d 4e 43 30 78 5a 6a 6b 34 4d 6d 4a 6b 4d Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyRhYzFjZjZiZC02N2MyLTQyMjktOTdmNC0xZjk4MmJkM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50179	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1140 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1140	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 33 35 33 32 33 36 34 34 33 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 32 65 38 34 38 61 65 31 36 36 61 63 62 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 30 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a Data Ascii: {"id":"1713532364438","at":1,"cur":["USD"],"imp":[{"id":"12e848ae166acb1","secure":1,"ext":{"data":{"pbadslot":"div-insticator-ad-3"}},"bidfloorcur":"USD","banner":{"w":300,"h":250,"pos":0,"topframe":0}}],"site":{"page":"https://www.justjared.com/","ref":
2024-04-19 13:12:46 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 19 Apr 2024 13:12:46 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50187	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	830	OUT	GET /usermatch?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fgdpr%3D0%26ex%3Dindex.com%26id%3D%24UID&gdpr=0&s=192259&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:46 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 876d25e92d2612e3-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z6cPin9SHNkZATowBP3XEe7pzVvQzF7uU6h2KzKmisChMxOJI5Q6ORw5jYakDqnMZjPFo9%2FBKznJOJFVtr4mQOOvPRwBc1cLaRj1eWpQZzEPUVx18H9dar333JtZPKL%2FC2xeycnVDj3JRA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:46 UTC	379	IN	Data Raw: 37 39 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 64 63 6d 3f 70 69 64 3d 37 38 61 66 39 31 34 63 2d 65 37 35 35 2d 34 62 39 30 2d 62 64 65 64 2d 31 62 31 37 32 61 65 64 63 37 36 33 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 64 3d 5a 69 4a 74 79 73 41 6f 49 70 30 41 41 43 54 7a 41 73 42 65 4f 41 41 41 43 68 67 41 41 41 41 42 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f Data Ascii: 798<html><head><title></title></head><body><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=0&gdpr_consent=&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gpp=&gpp_sid=" style="display:no
2024-04-19 13:12:46 UTC	1369	IN	Data Raw: 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 31 26 61 6d 70 3b 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 61 6d 70 3b 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 25 32 46 70 69 78 65 6c 25 33 46 67 6f 6f 67 6c 65 5f 6e 69 64 25 33 44 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 62 6d 25 32 36 67 6f 6f 67 6c 65 5f 63 6d 25 32 36 67 6f 6f 67 6c 65 5f 73 63 25 32 36 67 6f 6f 67 6c 65 5f 68 6d 25 33 44 26 61 6d 70 3b 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 Data Ascii: " width="0" height="0" alt="" border="0" /><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gdpr=0" style="
2024-04-19 13:12:46 UTC	203	IN	Data Raw: 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 67 64 70 72 3d 30 26 61 6d 70 3b 65 78 3d 69 6e 64 65 78 2e 63 6f 6d 26 61 6d 70 3b 69 64 3d 5a 69 4a 74 79 73 41 6f 49 70 30 41 41 43 54 7a 41 73 42 65 4f 41 41 41 43 68 67 41 41 41 41 42 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: " border="0" /><img src="https://s.amazon-adsystem.com/ecm3?gdpr=0&ex=index.com&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB" style="display:none" width="0" height="0" alt="" border="0" /></body></html>
2024-04-19 13:12:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50188	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	626	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1219	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 19 Apr 2024 13:12:46 GMT Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgRf70Sd.%2B9nx%2B0khQY%2FL3jx1bkJ8WcEX0IBPZSApMJ77EWzWqBI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgRf70Sd.%2B9nx%2B0khQY%2FL3jx1bkJ8WcEX0IBPZSApMJ77EWzWqBI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 43 Connection: Close
2024-04-19 13:12:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50192	34.202.246.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	624	OUT	POST /rtb/bid?src=prebid_prebid_8.38.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 608 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	608	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 31 65 37 62 33 39 35 38 31 38 65 64 66 38 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 2c 22 69 64 22 3a 22 31 38 37 37 34 35 62 31 61 38 35 33 63 30 64 22 2c 22 74 61 67 69 64 22 3a 22 31 30 39 34 35 37 34 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 7d 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 Data Ascii: {"id":"31e7b395818edf8","imp":[{"adunitcode":"div-insticator-ad-3","id":"187745b1a853c0d","tagid":"1094574","bidfloor":"","banner":{"format":[{"w":300,"h":250}],"w":1,"h":1},"ext":{"data":{"pbadslot":"div-insticator-ad-3"}}}],"site":{"domain":"www.justjar
2024-04-19 13:12:46 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json Content-Length: 94 Connection: close Set-Cookie: ljt_reader=IhHYABZHLsfeeoSHTr-ol2IW;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-04-19 13:12:46 UTC	94	IN	Data Raw: 7b 22 69 64 22 3a 22 33 31 65 37 62 33 39 35 38 31 38 65 64 66 38 22 2c 22 62 69 64 69 64 22 3a 22 34 61 33 38 31 30 37 65 2d 30 30 62 30 2d 34 62 62 31 2d 39 61 34 35 2d 62 36 36 63 38 63 32 33 39 39 32 61 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 33 34 30 36 37 31 35 7d 7d Data Ascii: {"id":"31e7b395818edf8","bidid":"4a38107e-00b0-4bb1-9a45-b66c8c23992a","ext":{"iid":13406715}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50199	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	765	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:46 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50171	169.197.150.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	677	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_9ac5c5704fa24c0696323; Max-Age=47260800; SameSite=None; Expires=Sat, 18 Oct 2025 13:12:46 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240419%22%7D; Max-Age=47260800; SameSite=None; Expires=Sat, 18 Oct 2025 13:12:46 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Fri, 19 Apr 2024 13:12:46 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50200	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	757	OUT	GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzA1OTU3MzYyMDU0NjkwMjU1MzkwNg%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:46 UTC	617	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent= Date: Fri, 19 Apr 2024 13:12:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 248 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	248	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50196	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	798	OUT	GET /usersync?b=adf&i=1045438816811072924&gdpr=0&gdpr_consent= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:46 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50175	52.85.132.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	951	OUT	GET /js/usersync.html?partnerid=59&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dundertonenew%26userId%3D%24%7BUIDENC%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D%26us_privacy%3D%24%7Bus_privacy%7D HTTP/1.1 Host: cdn.undertone.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 12849 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 13 Dec 2023 14:37:07 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: FpPUYNzys4ObbGRuHL8tOpxgUSayXD44 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 09:00:18 GMT ETag: "c0ad5bceb34dc473809dd23603a31cec" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 09028890675e48687e2855f3bdad98ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 X-Amz-Cf-Id: iEo0WG3Wi2lhnbanmeenWPF2h36gYN2JvpbILSCMuoLCD5HjzNfzUg== Age: 15149
2024-04-19 13:12:46 UTC	12849	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 66 75 6e 63 74 69 6f 6e 20 67 65 74 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 6e 61 6d 65 2c 20 75 72 6c 29 20 7b 0a 09 09 76 61 72 20 75 72 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 09 09 76 61 72 20 6e 61 6d 65 20 3d 20 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5c 5d 5d 2f 67 2c 20 27 5c 5c 24 26 27 29 3b 0a 09 09 76 61 72 20 72 65 67 65 78 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 27 5b 3f 26 5d 27 20 2b 20 6e 61 6d 65 20 2b 20 27 28 3d 28 5b 5e 26 23 5d 2a 29 7c 26 7c 23 7c 24 29 27 29 2c 0a 09 09 09 72 65 73 75 6c 74 73 20 3d 20 72 65 67 65 78 2e 65 78 65 63 Data Ascii: <html><body><script type="text/javascript">function getParameterByName(name, url) {var url = window.location.href;var name = name.replace(/[\[\]]/g, '\\$&');var regex = new RegExp('[?&]' + name + '(=([^&#]*)\|&\|#\|$)'),results = regex.exec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50197	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	750	OUT	GET /ecm3?id=187107314970053313&ex=appnexus.com&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:46 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9RJ5W6HVWQPWY6NP30PF Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50177	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	674	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87101066&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:45 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50169	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	695	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	742	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:46 GMT vary: Accept-Encoding set-cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322;Path=/;Domain=.creativecdn.com;Expires=Sat, 19-Apr-2025 13:12:46 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1713532366;Path=/;Domain=.creativecdn.com;Expires=Sat, 19-Apr-2025 13:12:46 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 19 Apr 2024 13:12:46 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50191	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	790	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 743 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:46 UTC	743	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 36 62 33 37 63 39 35 37 62 33 38 36 66 33 22 2c 22 69 64 22 3a 32 30 30 34 33 35 38 36 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 67 70 69 64 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"16b37c957b386f3","id":20043586,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"gpid":"div-insticator-
2024-04-19 13:12:46 UTC	1382	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 139 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 47ebe2a5-caa3-4025-b261-420e6ea60c3f Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 13:12:46 UTC	139	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 36 62 33 37 63 39 35 37 62 33 38 36 66 33 22 2c 22 74 61 67 5f 69 64 22 3a 32 30 30 34 33 35 38 36 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 31 35 31 30 35 37 30 35 32 33 39 32 36 30 38 36 38 38 37 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"16b37c957b386f3","tag_id":20043586,"auction_id":"1510570523926086887","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50203	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	658	OUT	POST /v1/event?event_name=event_adunit-load HTTP/1.1 Host: event.insticator.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	685	OUT	Data Raw: 7b 22 61 64 55 6e 69 74 73 22 3a 5b 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 31 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 32 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 33 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 34 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 35 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 36 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 63 6d 74 5f 31 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 63 6d Data Ascii: {"adUnits":["justjared.com_Web_300x250_1","justjared.com_Web_300x250_2","justjared.com_Web_300x250_3","justjared.com_Web_300x250_4","justjared.com_Web_300x250_5","justjared.com_Web_300x250_6","justjared.com_Web_300x250_cmt_1","justjared.com_Web_300x250_cm
2024-04-19 13:12:46 UTC	209	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50205	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	658	OUT	POST /v1/event?event_name=event_adunit-load HTTP/1.1 Host: event.insticator.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	685	OUT	Data Raw: 7b 22 61 64 55 6e 69 74 73 22 3a 5b 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 31 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 32 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 33 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 34 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 35 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 36 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 63 6d 74 5f 31 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 63 6d Data Ascii: {"adUnits":["justjared.com_Web_300x250_1","justjared.com_Web_300x250_2","justjared.com_Web_300x250_3","justjared.com_Web_300x250_4","justjared.com_Web_300x250_5","justjared.com_Web_300x250_6","justjared.com_Web_300x250_cmt_1","justjared.com_Web_300x250_cm
2024-04-19 13:12:46 UTC	209	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50206	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	655	OUT	POST /v1/event?event_name=event_pageview HTTP/1.1 Host: event.insticator.com Connection: keep-alive Content-Length: 663 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	663	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 34 31 2e 31 36 33 5a 22 2c 22 75 73 65 72 5f 64 61 74 61 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 64 65 74 61 69 6c 73 22 3a 7b 22 69 64 22 3a 22 37 62 35 61 31 37 35 64 2d 37 30 36 36 2d 34 34 63 62 2d 62 39 64 32 2d 64 62 32 38 63 35 30 38 32 30 30 63 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 63 61 6d 70 61 69 67 6e 22 3a 7b 22 73 6f 75 72 63 65 22 3a 6e 75 6c 6c 2c 22 6d 65 64 69 75 6d 22 3a 6e 75 6c 6c 2c 22 63 61 6d 70 61 69 67 6e 22 3a 6e 75 6c 6c 2c 22 74 65 72 6d 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 7d 7d 7d 2c 22 65 6d 62 65 64 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 73 69 74 65 Data Ascii: {"timestamp":"2024-04-19T13:12:41.163Z","user_data":{"session_details":{"id":"7b5a175d-7066-44cb-b9d2-db28c508200c","referrer":"www.justjared.com","campaign":{"source":null,"medium":null,"campaign":null,"term":null,"content":null}}},"embed_context":{"site
2024-04-19 13:12:46 UTC	209	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50185	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	670	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 1073 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:46 UTC	1073	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 7d 2c 22 64 69 76 69 64 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 33 22 7d 2c 22 69 64 22 3a 22 36 66 32 62 61 32 65 32 36 31 64 35 38 31 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 35 34 30 38 33 36 30 30 32 22 7d 5d 2c 22 73 6f 75 72 63 65 22 3a 7b 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 Data Ascii: {"imp":[{"ext":{"data":{"pbadslot":"div-insticator-ad-3"},"divid":"div-insticator-ad-3"},"id":"6f2ba2e261d581","banner":{"topframe":0,"format":[{"w":300,"h":250}]},"tagid":"540836002"}],"source":{"ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"
2024-04-19 13:12:46 UTC	305	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Content-Type: text/plain Vary: Origin Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 31 33 36 31 34 65 33 36 2d 62 38 33 65 2d 34 31 31 63 2d 62 32 35 35 2d 33 61 65 39 38 32 31 38 66 64 31 31 22 2c 22 6e 62 72 22 3a 31 7d Data Ascii: {"id":"13614e36-b83e-411c-b255-3ae98218fd11","nbr":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50184	18.154.227.93	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	634	OUT	POST /hb-multi HTTP/1.1 Host: hb.yellowblue.io Connection: keep-alive Content-Length: 1213 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:46 UTC	1213	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 69 6e 73 74 42 69 64 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 38 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 36 34 33 37 38 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 36 31 32 34 63 61 65 64 39 63 37 61 64 62 30 30 30 31 63 30 32 38 64 38 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"instBid","wrapper_version":"8.38.0","adapter_version":"6.0.0","auction_start":1713532364378,"publisher_id":"6124caed9c7adb0001c028d8","publisher_name":"www.justjared.com","site_domain":"www.justjared.
2024-04-19 13:12:46 UTC	716	IN	HTTP/1.1 408 Request Timeout Content-Type: application/json Content-Length: 0 Connection: close Date: Fri, 19 Apr 2024 13:12:46 GMT access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://www.justjared.com x-reason: read incoming payload timeout x-envoy-upstream-service-time: 1 server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 b97ecc65af57f73e17a5596e8dc5a2d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: p7cSQgEzSk9T_EQnnETxG-tsyknSruq3Hw9-meTgUyYjpoX4I_quQQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50172	124.146.153.160	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	696	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	829	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=ZiJtzsCo8X8AAFvXhEgAAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=ZiJtzsCo8X8AAFvXhEgAAAAA; path=/; expires=Sun, 19-Apr-26 13:12:46 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 268 X-SO-HostName: a-ad40287.dc2p.scaleout.jp X-SO-LB-Hostname: m-tgng27.dc4p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"81.181.57.52","key":"ZiJtzsCo8X8AAFvXhEgAAAAA","privacy_sensitive":false,"uid":"","upstream_id":"a-ad40287"} X-SO-Key: ZiJtzsCo8X8AAFvXhEgAAAAA X-SO-IP: 81.181.57.52 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40287

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50190	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	684	OUT	POST /openrtb/pbjs?s=926424 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1250 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:46 UTC	1250	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 33 61 63 38 36 64 65 39 64 63 33 38 66 35 22 2c 22 73 69 74 65 22 3a 7b 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 31 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 Data Ascii: {"id":"13ac86de9dc38f5","site":{"ref":"https://www.justjared.com/","page":"https://www.justjared.com/","domain":"justjared.com","publisher":{"domain":"justjared.com"}},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":1,"iu":0,"nu":0,"ou":0,"allu"
2024-04-19 13:12:46 UTC	716	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 876d25ea0f1e06e6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q8XyMHLnTRo5NHE8kyT8XKc6JA4zC%2FyAOn1lkCNGbwF5ayU6oky7il4kvtF0NbJOv15hL3U%2B3L7jiuL5mdlvFT5JP9k0autC5jLDo90Z0mZknJ%2BVP%2Bcm6e7kIEL0AQodnFm89WzK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:46 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 33 61 63 38 36 64 65 39 64 63 33 38 66 35 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"13ac86de9dc38f5","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50194	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	633	OUT	POST /api/v1/hb?guid=blT_xWDBar6yooaKlId8sQ HTTP/1.1 Host: ssc.33across.com Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	909	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 32 34 64 66 30 36 33 30 33 38 31 36 63 34 22 2c 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 70 72 6f 64 22 3a 22 73 69 61 62 22 7d 7d 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 76 69 65 77 61 62 69 6c 69 74 79 22 3a 7b 22 61 6d 6f 75 6e 74 22 3a 22 6e 6d 22 7d 7d 7d 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 62 6c 54 5f 78 57 44 42 61 72 36 79 6f 6f 61 4b 6c 49 64 38 73 51 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 77 22 3a 31 32 Data Ascii: {"imp":[{"id":"224df06303816c4","ext":{"ttx":{"prod":"siab"}},"banner":{"format":[{"w":300,"h":250}],"ext":{"ttx":{"viewability":{"amount":"nm"}}}}}],"site":{"id":"blT_xWDBar6yooaKlId8sQ","page":"https://www.justjared.com/"},"device":{"ext":{"ttx":{"w":12
2024-04-19 13:12:46 UTC	390	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 118 Vary: Accept-Encoding Vary: Origin Status: 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Date: Fri, 19 Apr 2024 13:12:46 GMT X-Powered-By: 33Across Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	118	IN	Data Raw: 7b 22 69 64 22 3a 22 32 31 66 37 65 35 34 30 63 65 35 30 39 35 65 22 2c 22 63 75 72 22 3a 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 74 61 63 74 69 63 22 3a 22 68 62 22 2c 22 64 65 76 69 63 65 74 79 70 65 22 3a 32 2c 22 69 73 6f 2d 33 31 36 36 2d 61 6c 70 68 61 2d 32 22 3a 22 55 53 22 7d 7d 7d Data Ascii: {"id":"21f7e540ce5095e","cur":"USD","seatbid":[],"ext":{"ttx":{"tactic":"hb","devicetype":2,"iso-3166-alpha-2":"US"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50195	172.64.153.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	597	OUT	POST /prebid HTTP/1.1 Host: mp.4dex.io Connection: keep-alive Content-Length: 1332 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1332	OUT	Data Raw: 7b 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 22 3a 22 31 33 37 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 64 65 76 69 63 65 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 64 6e 74 22 3a 30 2c 22 67 65 6f 22 3a 7b 7d 2c 22 6a 73 22 3a 31 7d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 Data Ascii: {"organizationId":"1376","secure":1,"device":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","language":"en-US","dnt":0,"geo":{},"js":1},"site":{"domain":"www.justjared.com","p
2024-04-19 13:12:46 UTC	843	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1129 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Set-Cookie: uids=eyJ1aWRzIjp7ImFkYWdpbyI6eyJ1aWQiOiIyZDhkZDUyYS1iYzQ5LTRmZDAtODBiOC1kYjk3N2QzNzFkNTMiLCJleHBpcmVzIjoiMjAyNC0wNi0xOFQxMzoxMjo0Ni41NDI0OTYxNjlaIn19LCJiZGF5IjoiMjAyNC0wNC0xOVQxMzoxMjo0Ni41NDI0NTA5NDhaIn0=; Path=/; Domain=4dex.io; Expires=Tue, 18 Jun 2024 13:12:46 GMT; Secure; SameSite=None Vary: Origin Vary: Accept-Encoding X-Err: Shapings: no adunits with size and seat and mapping X-Version: 3.0.0-gcp-las Via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d25ea099b4503-ATL
2024-04-19 13:12:46 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 5f 73 79 6e 63 73 22 3a 5b 7b 22 68 74 6d 6c 22 3a 22 5c 75 30 30 33 63 69 66 72 61 6d 65 20 69 64 3d 27 61 64 67 2d 30 2d 73 79 6e 63 27 20 68 65 69 67 68 74 3d 27 30 27 20 77 69 64 74 68 3d 27 30 27 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 27 30 27 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 27 30 27 20 73 63 72 6f 6c 6c 69 6e 67 3d 27 6e 6f 27 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 27 30 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 75 74 69 6c 73 2f 78 61 70 69 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 6f 6e 66 6f 63 75 73 5c 75 30 30 32 36 65 6e 64 70 6f 69 6e 74 3d 75 73 2d 77 65 73 74 27 20 73 74 79 Data Ascii: {"data":{"user_syncs":[{"html":"\u003ciframe id='adg-0-sync' height='0' width='0' marginwidth='0' marginheight='0' scrolling='no' frameborder='0' src='https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=onfocus\u0026endpoint=us-west' sty
2024-04-19 13:12:46 UTC	603	IN	Data Raw: 41 25 32 46 25 32 46 75 2e 34 64 65 78 2e 69 6f 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 75 69 64 25 33 44 28 50 4d 5f 55 49 44 29 27 20 73 74 79 6c 65 3d 27 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 27 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 69 66 72 61 6d 65 5c 75 30 30 33 65 22 7d 2c 7b 22 68 74 6d 6c 22 3a 22 5c 75 30 30 33 63 69 6d 67 20 69 64 3d 27 61 64 67 2d 32 2d 73 79 6e 63 27 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 68 65 69 67 68 74 3a 30 3b 20 77 69 64 74 68 3a 30 3b 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 69 63 65 2e 33 36 30 79 69 65 6c 64 2e 63 6f 6d 2f 73 65 72 Data Ascii: A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dpubmatic%26uid%3D(PM_UID)' style='border: 0px; display: none;'\u003e\u003c/iframe\u003e"},{"html":"\u003cimg id='adg-2-sync' style='position:absolute; display:none; height:0; width:0;' src='https://ice.360yield.com/ser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50208	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	682	OUT	GET /usersync?b=zem&i=Ew75cZqQhtpEcO-Pru61&gdpr=0 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:46 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50209	23.22.93.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	557	OUT	GET /json/ HTTP/1.1 Host: geoip.insticator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	286	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json Content-Length: 214 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin X-Database-Date: Thu, 18 Apr 2024 18:43:21 GMT
2024-04-19 13:12:46 UTC	214	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 22 2c 22 63 69 74 79 22 3a 22 22 2c 22 7a 69 70 5f 63 6f 64 65 22 3a 22 22 2c 22 74 69 6d 65 5f 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 37 2e 37 35 31 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 37 2e 38 32 32 2c 22 6d 65 74 72 6f 5f 63 6f 64 65 22 3a 30 7d 0a Data Ascii: {"ip":"81.181.57.52","country_code":"US","country_name":"United States","region_code":"","region_name":"","city":"","zip_code":"","time_zone":"America/Chicago","latitude":37.751,"longitude":-97.822,"metro_code":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50193	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	733	OUT	GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	579	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:46 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50210	3.218.114.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	658	OUT	POST /v1/event?event_name=event_adunit-load HTTP/1.1 Host: event.insticator.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json; charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	685	OUT	Data Raw: 7b 22 61 64 55 6e 69 74 73 22 3a 5b 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 31 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 32 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 33 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 34 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 35 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 36 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 63 6d 74 5f 31 22 2c 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 63 6d Data Ascii: {"adUnits":["justjared.com_Web_300x250_1","justjared.com_Web_300x250_2","justjared.com_Web_300x250_3","justjared.com_Web_300x250_4","justjared.com_Web_300x250_5","justjared.com_Web_300x250_6","justjared.com_Web_300x250_cmt_1","justjared.com_Web_300x250_cm
2024-04-19 13:12:46 UTC	209	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50198	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	2353	OUT	GET /trinity.json?key_maker=%7B%22309a673c375b1f8%22%3A%227ae64792559ccec02f40%7C300x250%7Cgpid%3Ddiv-insticator-ad-3%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.justjared.com%2F&s=354c41da-5925-4862-bf2e-734a4ff4c737&pv=d0bdcf95-ea8f-4ed4-9bbc-9c3074fd511d&vp=mobile&lib_name=prebid&lib_v=8.38.0&us=50&iqid=%7B%22pcid%22%3A%22d1fa2879-9319-40e4-9b46-403bde911876%22%2C%22pcidDate%22%3A1713532364487%7D&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22justjared.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22justjared.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22insticator.com%22%2C%22sid%22%3A%22bd45a367-d5fa-4207-9aec-1acba8ec52eb%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1 Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJtz
2024-04-19 13:12:46 UTC	919	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:46 GMT content-type: application/json content-length: 95 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-197 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com set-cookie: __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; expires=Sun, 19 May 2024 13:12:46 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: _usd_justjared.com=d0bdcf95-ea8f-4ed4-9bbc-9c3074fd511d; expires=Sat, 20 Apr 2024 13:12:46 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85197\|ZiJt0; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-04-19 13:12:46 UTC	95	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 33 30 39 61 36 37 33 63 33 37 35 62 31 66 38 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 64 30 62 64 63 66 39 35 2d 65 61 38 66 2d 34 65 64 34 2d 39 62 62 63 2d 39 63 33 30 37 34 66 64 35 31 31 64 22 7d 0a Data Ascii: {"slots":{"309a673c375b1f8":{}},"sbi_dc":"iad-2-","pv":"d0bdcf95-ea8f-4ed4-9bbc-9c3074fd511d"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50189	52.22.142.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	650	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=olBHBm7-Cp_mm
2024-04-19 13:12:46 UTC	1221	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 69 6e 73 74 42 69 64 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 38 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 36 34 34 33 36 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 61 72 67 39 36 63 38 38 62 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a 30 Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"instBid","wrapper_version":"8.38.0","adapter_version":"6.0.0","auction_start":1713532364436,"publisher_id":"01garg96c88b","publisher_name":"www.justjared.com","site_domain":"www.justjared.com","dnt":0
2024-04-19 13:12:46 UTC	518	IN	HTTP/1.1 408 Request Timeout Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://www.justjared.com x-reason: read incoming payload timeout x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50201	35.211.118.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	749	OUT	GET /sync?bidswitch_ssp_id=triplelift&bsw_custom_parameter=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1 Host: r.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
2024-04-19 13:12:46 UTC	495	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 19 Apr 2024 13:12:46 GMT Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=58637582-4b7e-42fe-b59a-889f13122ef7&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dtriplelift%26bsw_param%3D58637582-4b7e-42fe-b59a-889f13122ef7 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	49875	18.165.116.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	541	OUT	GET /lt/c/16589/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 39827 Connection: close Date: Thu, 18 Apr 2024 16:42:53 GMT Last-Modified: Wed, 14 Feb 2024 17:39:57 GMT ETag: "21f8671135afbd2e874c42d3dc478afa" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bcd2cde1724433323cdd9d3cb59cc652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: BWWZJ4WegFH1k2NuKf5yPhm8oi9PefanhLwRnaxjygF715rWD1hZ_g== Age: 73794
2024-04-19 13:12:46 UTC	15820	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-04-19 13:12:46 UTC	16384	IN	Data Raw: 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 Data Ascii: bject"!=typeof a&&(b=!1,sync16589_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16589_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16589_.error("tagInput.data.thirdParty.value is not defi
2024-04-19 13:12:46 UTC	7623	IN	Data Raw: 76 6f 69 64 20 30 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 38 39 5f 47 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 73 79 6e 63 31 36 35 38 39 5f 45 3a 63 3b 62 26 26 73 79 6e 63 31 36 35 38 39 5f 77 28 62 29 26 26 21 73 79 6e 63 31 36 35 38 39 5f 44 28 62 29 26 26 21 62 2e 75 28 29 26 26 73 79 6e 63 31 36 35 38 39 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 73 79 6e 63 31 36 35 38 39 5f 48 61 28 61 2c 62 2c 64 29 3b 73 79 6e 63 31 36 35 38 39 5f 37 28 61 2c 73 79 6e 63 31 36 35 38 39 5f 30 28 64 29 2c 73 79 6e 63 31 36 35 38 39 5f 38 28 61 2c 64 29 2c 22 64 61 74 61 22 2c 63 29 7d 29 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 38 39 5f 49 61 28 61 2c 62 2c 63 29 7b 63 3d 76 Data Ascii: void 0} function sync16589_Ga(a,b){var c=void 0===c?sync16589_E:c;b&&sync16589_w(b)&&!sync16589_D(b)&&!b.u()&&sync16589_9(a).then(function(d){d=sync16589_Ha(a,b,d);sync16589_7(a,sync16589_0(d),sync16589_8(a,d),"data",c)})} function sync16589_Ia(a,b,c){c=v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50212	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	781	OUT	GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2
2024-04-19 13:12:46 UTC	1083	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:46 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev_part=3-1qw8\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 19-Apr-2025 13:12:46 GMT;SameSite=None;Partitioned Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:46 GMT;Max-Age=0;SameSite=None Location: https://rtb.gumgum.com/usersync?b=pln&i=part_d3pYBt4hoB3q&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50213	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	627	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1215	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 19 Apr 2024 13:12:46 GMT Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 43 Connection: Close
2024-04-19 13:12:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50173	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	761	OUT	GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322; ts=1713532366
2024-04-19 13:12:46 UTC	402	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:46 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 19 Apr 2024 13:12:46 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50215	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	706	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.justjared.com&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:46 UTC	507	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 3217 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Fri, 19 Apr 2024 13:10:42 GMT Server: Server X-Cache: Hit from cloudfront Via: 1.1 8eaa38f96dd1cf2c24fe9323b624b766.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C1 X-Amz-Cf-Id: M3tg9MokuHquZbbi6AZafRIKRW2OW-GPeTiEenDIkgEpsw3iSuxymg== Age: 124
2024-04-19 13:12:46 UTC	3217	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 62 63 69 64 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50214	13.33.4.96	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	628	OUT	GET /configs/70fb13d1-ab65-42ac-a7ca-0b4e680d5c92 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:46 UTC	389	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 563 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 13:10:43 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 0df880fcc0eaaf2d73df10e0f110cabe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 X-Amz-Cf-Id: Au6didiq3iUVufamROjkh3-rrESLBFWBpy3zlzDcSBiDJIXZc7lPvw== Age: 123
2024-04-19 13:12:46 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 37 30 66 62 31 33 64 31 2d 61 62 36 35 2d 34 32 61 63 2d 61 37 63 61 2d 30 62 34 65 36 38 30 64 35 63 39 32 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "70fb13d1-ab65-42ac-a7ca-0b4e680d5c92";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50216	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	762	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:46 UTC	246	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: text/html Content-Length: 199 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	199	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	49912	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	1812	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=MsG0RONB99OMG&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-3%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_3%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_3%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:46 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 764 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:46 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 2c87bc2888ef60a43faafef8499a8c5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 6NoSePkZfHVbrcuVr-hFCBobSQt-QYT-y9JGjcXG1MC6yHodWzmU-g==
2024-04-19 13:12:46 UTC	764	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 44 5a 41 43 31 6f 59 43 6b 37 58 52 4c 75 47 33 33 38 45 6d 37 6b 41 41 41 47 4f 39 6e 7a 76 35 41 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 44 2d 33 4c 41 45 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 32 35 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JDZAC1oYCk7XRLuG338Em7kAAAGO9nzv5AEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD-3LAE","size":"300x250","meta":["slotID","mediaType","siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50219	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	670	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 1073 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:46 UTC	1073	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 7d 2c 22 64 69 76 69 64 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 7d 2c 22 69 64 22 3a 22 34 37 35 34 39 34 38 65 32 66 34 61 31 37 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 35 34 30 38 33 36 30 30 32 22 7d 5d 2c 22 73 6f 75 72 63 65 22 3a 7b 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 Data Ascii: {"imp":[{"ext":{"data":{"pbadslot":"div-insticator-ad-5"},"divid":"div-insticator-ad-5"},"id":"4754948e2f4a17","banner":{"topframe":0,"format":[{"w":300,"h":250}]},"tagid":"540836002"}],"source":{"ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"
2024-04-19 13:12:46 UTC	305	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Content-Type: text/plain Vary: Origin Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:46 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 66 31 37 66 34 66 65 33 2d 65 36 38 31 2d 34 36 31 31 2d 38 64 38 35 2d 66 39 33 34 33 65 65 63 30 35 35 35 22 2c 22 6e 62 72 22 3a 31 7d Data Ascii: {"id":"f17f4fe3-e681-4611-8d85-f9343eec0555","nbr":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50211	107.22.164.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	682	OUT	GET /bidSwitch.gif?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	601	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://x.bidswitch.net/sync?dsp_id=425&user_group=1&expires=365&user_id=930e97dd-c462-4cd2-a2b2-6b9aa73b2220&ssp=gumgum2&bsw_param=58637582-4b7e-42fe-b59a-889f13122ef7 Set-Cookie: UID=930e97dd-c462-4cd2-a2b2-6b9aa73b2220; expires=Sat, 19 Apr 2025 13:12:46 GMT; path=/; secure; samesite=none Set-Cookie: ss=KqEOmIaCUGaTb5fG%2F8jiahq6X7hsDqwZ%2B3IE55wdbYFiz7NYS3JFyojpUoieVnoZhUUsu2EfX32ZXYWBBEiUAA%3D%3D; expires=Sat, 19 Apr 2025 13:12:46 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50223	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	778	OUT	POST /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Content-Length: 1128 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:46 UTC	1128	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 62 34 62 65 31 66 35 64 61 63 39 33 22 2c 22 74 6d 61 78 22 3a 34 30 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 66 64 22 3a 31 2c 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 69 6e 73 74 69 63 61 74 6f 72 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 62 64 34 35 61 33 36 37 2d 64 35 66 61 2d 34 32 30 37 2d 39 61 65 63 2d 31 61 63 62 61 38 65 63 35 32 65 62 22 2c 22 68 70 22 3a 31 2c 22 72 69 64 22 3a 22 39 62 34 62 65 31 66 35 64 61 63 39 33 22 7d 5d 7d 7d 7d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 Data Ascii: {"id":"9b4be1f5dac93","tmax":4000,"source":{"fd":1,"ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"insticator.com","sid":"bd45a367-d5fa-4207-9aec-1acba8ec52eb","hp":1,"rid":"9b4be1f5dac93"}]}}},"site":{"domain":"www.justjared.com","page":"https
2024-04-19 13:12:47 UTC	329	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 855 Connection: close vary: Origin access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d25ebfdd878c8-ATL
2024-04-19 13:12:47 UTC	855	IN	Data Raw: 7b 22 69 64 22 3a 22 39 62 34 62 65 31 66 35 64 61 63 39 33 22 2c 22 62 69 64 69 64 22 3a 22 30 31 48 56 56 37 53 57 37 31 31 5a 59 44 46 44 41 34 46 4d 35 31 45 33 4a 4a 22 2c 22 6e 62 72 22 3a 30 2c 22 65 78 74 22 3a 7b 22 73 79 6e 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 72 75 62 69 63 6f 6e 3f 75 73 65 72 49 64 3d 64 34 32 30 61 36 31 33 2d 38 33 39 35 2d 34 32 33 34 2d 38 33 66 64 2d 32 61 38 39 66 64 33 38 37 66 37 65 26 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 25 32 46 75 74 69 6c 73 25 32 46 78 61 Data Ascii: {"id":"9b4be1f5dac93","bidid":"01HVV7SW711ZYDFDA4FM51E3JJ","nbr":0,"ext":{"sync":[{"type":"iframe","url":"https://cs.ingage.tech/v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50221	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	599	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 1564 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1564	OUT	Data Raw: 7b 22 61 22 3a 22 35 30 37 32 35 64 38 33 2d 31 61 65 39 2d 34 64 61 39 2d 62 38 35 62 2d 37 62 62 34 37 30 37 62 39 62 62 32 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 33 38 2e 30 22 2c 22 76 67 22 3a 22 69 6e 73 74 42 69 64 22 2c 22 69 22 3a 22 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 22 22 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a 7b 22 67 70 70 53 74 Data Ascii: {"a":"50725d83-1ae9-4da9-b85b-7bb4707b9bb2","B":0,"b":"www.justjared.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.38.0","vg":"instBid","i":"anVzdGphcmVkLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":"","gc":"","gpp":{"gppSt
2024-04-19 13:12:47 UTC	892	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, private, must-revalidate content-length: 969 content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:47 GMT server: envoy vary: origin, Accept-Encoding set-cookie: __amc=1_1713532366_1713532366; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:47 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; path=/; domain=a-mo.net; expires=Sat, 19 Apr 2025 13:12:47 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:47 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 301 connection: close
2024-04-19 13:12:47 UTC	969	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 5f 65 3d 43 73 41 42 53 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 56 49 4c 59 57 46 7a 4c 57 51 34 4e 54 51 31 5a 47 4e 61 43 48 42 69 59 54 45 75 4d 79 34 30 61 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 66 6f 42 42 6a 67 75 4d 7a 67 75 4d 4f 67 43 41 59 67 44 7a 74 75 4a 73 51 61 6f 41 30 66 71 41 79 51 31 4d 44 63 79 4e 57 51 34 4d 79 30 78 59 57 55 35 4c 54 52 6b 59 54 6b 74 59 6a 67 31 59 69 30 33 59 6d 49 30 4e 7a 41 33 59 Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyQ1MDcyNWQ4My0xYWU5LTRkYTktYjg1Yi03YmI0NzA3Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50220	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	749	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=1845939505169848484
2024-04-19 13:12:46 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 19 Apr 2024 13:12:46 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=1845939505169848484 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50222	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	2352	OUT	GET /trinity.json?key_maker=%7B%2288db99055de143%22%3A%2221855274bc2de6152cb9%7C300x250%7Cgpid%3Ddiv-insticator-ad-5%2Cc%3Dd%2C%22%7D&ref=https%3A%2F%2Fwww.justjared.com%2F&s=145f5a0e-3c81-490b-ba9b-be9333b307b0&pv=1df90e2f-8482-4a03-a221-2cb3848e46db&vp=mobile&lib_name=prebid&lib_v=8.38.0&us=50&iqid=%7B%22pcid%22%3A%22d1fa2879-9319-40e4-9b46-403bde911876%22%2C%22pcidDate%22%3A1713532364487%7D&fpd=%7B%22source%22%3A%7B%7D%2C%22site%22%3A%7B%22domain%22%3A%22justjared.com%22%2C%22publisher%22%3A%7B%22domain%22%3A%22justjared.com%22%7D%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%7D%2C%22device%22%3A%7B%22w%22%3A1280%2C%22h%22%3A907%2C%22dnt%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36%22%2C%22language%22%3A%22en%22%2C%22sua%22%3A%7B%22source%22%3A1%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%5D%7D%5D%2C%22mobile%22%3A0%7D%7D%7D&ius=1&schain=%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22insticator.com%22%2C%22sid%22%3A%22bd45a367-d5fa-4207-9aec-1acba8ec52eb%22%2C%22hp%22%3A1%7D%5D%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%2C%22atype%22%3A1%7D%5D%7D%5D&coppa=0 HTTP/1.1 Host: apex.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJtz
2024-04-19 13:12:46 UTC	919	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:46 GMT content-type: application/json content-length: 94 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-197 x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com set-cookie: __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; expires=Sun, 19 May 2024 13:12:46 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: _usd_justjared.com=1df90e2f-8482-4a03-a221-2cb3848e46db; expires=Sat, 20 Apr 2024 13:12:46 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85197\|ZiJt0; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close
2024-04-19 13:12:46 UTC	94	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 7b 22 38 38 64 62 39 39 30 35 35 64 65 31 34 33 22 3a 7b 7d 7d 2c 22 73 62 69 5f 64 63 22 3a 22 69 61 64 2d 32 2d 22 2c 22 70 76 22 3a 22 31 64 66 39 30 65 32 66 2d 38 34 38 32 2d 34 61 30 33 2d 61 32 32 31 2d 32 63 62 33 38 34 38 65 34 36 64 62 22 7d 0a Data Ascii: {"slots":{"88db99055de143":{}},"sbi_dc":"iad-2-","pv":"1df90e2f-8482-4a03-a221-2cb3848e46db"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50218	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	790	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 742 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:46 UTC	742	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 32 39 30 35 38 61 64 65 31 34 38 62 66 62 22 2c 22 69 64 22 3a 32 30 30 34 33 35 39 30 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 67 70 69 64 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"29058ade148bfb","id":20043590,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"gpid":"div-insticator-a
2024-04-19 13:12:46 UTC	1382	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 138 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: ae0174a1-309e-4efa-9472-869dcf72761c Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:46 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 13:12:46 UTC	138	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 32 39 30 35 38 61 64 65 31 34 38 62 66 62 22 2c 22 74 61 67 5f 69 64 22 3a 32 30 30 34 33 35 39 30 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 36 30 33 34 36 39 30 34 38 31 37 39 31 36 34 31 35 38 39 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 30 7d 5d 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"29058ade148bfb","tag_id":20043590,"auction_id":"6034690481791641589","nobid":true,"ad_profile_id":0}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50229	172.64.153.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	597	OUT	POST /prebid HTTP/1.1 Host: mp.4dex.io Connection: keep-alive Content-Length: 1331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1331	OUT	Data Raw: 7b 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 49 64 22 3a 22 31 33 37 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 64 65 76 69 63 65 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 64 6e 74 22 3a 30 2c 22 67 65 6f 22 3a 7b 7d 2c 22 6a 73 22 3a 31 7d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 Data Ascii: {"organizationId":"1376","secure":1,"device":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","language":"en-US","dnt":0,"geo":{},"js":1},"site":{"domain":"www.justjared.com","p
2024-04-19 13:12:47 UTC	843	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1129 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Set-Cookie: uids=eyJ1aWRzIjp7ImFkYWdpbyI6eyJ1aWQiOiIxOGQ3Y2UwMy1mMmYyLTQ1NjAtYmIwYS03NzNhYWQyMjQyNTciLCJleHBpcmVzIjoiMjAyNC0wNi0xOFQxMzoxMjo0Ni45NjY5MTY2MloifX0sImJkYXkiOiIyMDI0LTA0LTE5VDEzOjEyOjQ2Ljk2Njg2NDQxNVoifQ==; Path=/; Domain=4dex.io; Expires=Tue, 18 Jun 2024 13:12:46 GMT; Secure; SameSite=None Vary: Origin Vary: Accept-Encoding X-Err: Shapings: no adunits with size and seat and mapping X-Version: 3.0.0-gcp-las Via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d25ecdc6453ab-ATL
2024-04-19 13:12:47 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 5f 73 79 6e 63 73 22 3a 5b 7b 22 68 74 6d 6c 22 3a 22 5c 75 30 30 33 63 69 66 72 61 6d 65 20 69 64 3d 27 61 64 67 2d 30 2d 73 79 6e 63 27 20 68 65 69 67 68 74 3d 27 30 27 20 77 69 64 74 68 3d 27 30 27 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 27 30 27 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 27 30 27 20 73 63 72 6f 6c 6c 69 6e 67 3d 27 6e 6f 27 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 27 30 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 75 74 69 6c 73 2f 78 61 70 69 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 6f 6e 66 6f 63 75 73 5c 75 30 30 32 36 65 6e 64 70 6f 69 6e 74 3d 75 73 2d 77 65 73 74 27 20 73 74 79 Data Ascii: {"data":{"user_syncs":[{"html":"\u003ciframe id='adg-0-sync' height='0' width='0' marginwidth='0' marginheight='0' scrolling='no' frameborder='0' src='https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=onfocus\u0026endpoint=us-west' sty
2024-04-19 13:12:47 UTC	603	IN	Data Raw: 41 25 32 46 25 32 46 75 2e 34 64 65 78 2e 69 6f 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 70 75 62 6d 61 74 69 63 25 32 36 75 69 64 25 33 44 28 50 4d 5f 55 49 44 29 27 20 73 74 79 6c 65 3d 27 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 27 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 69 66 72 61 6d 65 5c 75 30 30 33 65 22 7d 2c 7b 22 68 74 6d 6c 22 3a 22 5c 75 30 30 33 63 69 6d 67 20 69 64 3d 27 61 64 67 2d 32 2d 73 79 6e 63 27 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 68 65 69 67 68 74 3a 30 3b 20 77 69 64 74 68 3a 30 3b 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 69 63 65 2e 33 36 30 79 69 65 6c 64 2e 63 6f 6d 2f 73 65 72 Data Ascii: A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dpubmatic%26uid%3D(PM_UID)' style='border: 0px; display: none;'\u003e\u003c/iframe\u003e"},{"html":"\u003cimg id='adg-2-sync' style='position:absolute; display:none; height:0; width:0;' src='https://ice.360yield.com/ser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50228	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	859	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:46 UTC	585	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 36 34 31 36 2d 36 35 36 31 2d 30 31 22 2c 22 63 6d 70 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 34 30 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 38 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 36 35 32 35 38 2c 22 74 74 66 62 22 3a 30 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 32 30 32 34 39 39 33 63 30 30 30 64 38 64 62 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 22 73 75 70 70 6c 79 54 79 70 65 73 22 3a 5b 22 64 69 73 Data Ascii: {"url":"https://www.justjared.com/","publisherToken":"6416-6561-01","cmp":false,"timeout":4000,"version":"8.38.0","connectionType":"fixed","auctionStart":1713532365258,"ttfb":0,"bidRequests":[{"id":"2024993c000d8db","sizes":[[300,250]],"supplyTypes":["dis
2024-04-19 13:12:47 UTC	564	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 11 Vary: X-HTTP-Method-Override Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:47 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50230	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	633	OUT	POST /api/v1/hb?guid=bN3RE0DBar6ykeaKkGJozW HTTP/1.1 Host: ssc.33across.com Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	909	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 34 33 36 35 38 39 34 36 37 63 36 34 39 39 22 2c 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 70 72 6f 64 22 3a 22 73 69 61 62 22 7d 7d 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 76 69 65 77 61 62 69 6c 69 74 79 22 3a 7b 22 61 6d 6f 75 6e 74 22 3a 22 6e 6d 22 7d 7d 7d 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 69 64 22 3a 22 62 4e 33 52 45 30 44 42 61 72 36 79 6b 65 61 4b 6b 47 4a 6f 7a 57 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 77 22 3a 31 32 Data Ascii: {"imp":[{"id":"2436589467c6499","ext":{"ttx":{"prod":"siab"}},"banner":{"format":[{"w":300,"h":250}],"ext":{"ttx":{"viewability":{"amount":"nm"}}}}}],"site":{"id":"bN3RE0DBar6ykeaKkGJozW","page":"https://www.justjared.com/"},"device":{"ext":{"ttx":{"w":12
2024-04-19 13:12:47 UTC	390	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 118 Vary: Accept-Encoding Vary: Origin Status: 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Date: Fri, 19 Apr 2024 13:12:46 GMT X-Powered-By: 33Across Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:47 UTC	118	IN	Data Raw: 7b 22 69 64 22 3a 22 32 33 31 64 33 34 32 39 62 31 63 37 30 33 35 22 2c 22 63 75 72 22 3a 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 74 74 78 22 3a 7b 22 74 61 63 74 69 63 22 3a 22 68 62 22 2c 22 64 65 76 69 63 65 74 79 70 65 22 3a 32 2c 22 69 73 6f 2d 33 31 36 36 2d 61 6c 70 68 61 2d 32 22 3a 22 55 53 22 7d 7d 7d Data Ascii: {"id":"231d3429b1c7035","cur":"USD","seatbid":[],"ext":{"ttx":{"tactic":"hb","devicetype":2,"iso-3166-alpha-2":"US"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50232	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	684	OUT	POST /openrtb/pbjs?s=926424 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1250 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:46 UTC	1250	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 37 32 38 30 31 36 62 61 38 63 35 61 35 61 22 2c 22 73 69 74 65 22 3a 7b 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 31 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 Data Ascii: {"id":"2728016ba8c5a5a","site":{"ref":"https://www.justjared.com/","page":"https://www.justjared.com/","domain":"justjared.com","publisher":{"domain":"justjared.com"}},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":1,"iu":0,"nu":0,"ou":0,"allu"
2024-04-19 13:12:47 UTC	712	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 876d25ece80607ca-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hOfKNjbTraUodTGIy16stieqkIXWaSbVi9sN4o2MsjDI5ifhrWshfuWQ3npZ8%2FMNKtXDXU5Xy8WVBX9xk4rAWVfyRSY9dIYIUxPfmoWOwDcFe3Il9sdYips8m40khI0UHtxj8%2F9b"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:47 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 32 37 32 38 30 31 36 62 61 38 63 35 61 35 61 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"2728016ba8c5a5a","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50224	52.22.142.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	650	OUT	POST /hb-mm-multi HTTP/1.1 Host: hb.minutemedia-prebid.com Connection: keep-alive Content-Length: 1223 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=olBHBm7-Cp_mm
2024-04-19 13:12:46 UTC	1223	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 69 6e 73 74 42 69 64 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 38 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 36 35 32 37 36 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 30 31 67 61 72 67 39 36 63 38 38 62 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 64 6e 74 22 3a 30 Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"instBid","wrapper_version":"8.38.0","adapter_version":"6.0.0","auction_start":1713532365276,"publisher_id":"01garg96c88b","publisher_name":"www.justjared.com","site_domain":"www.justjared.com","dnt":0
2024-04-19 13:12:46 UTC	501	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json Content-Length: 84 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://www.justjared.com x-reason: maxmind hosting provider x-envoy-upstream-service-time: 2 server: istio-envoy
2024-04-19 13:12:46 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 33 33 32 30 65 65 66 66 38 32 61 32 39 66 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 32 66 38 66 35 33 38 64 31 65 66 35 64 30 30 30 31 65 65 62 61 35 39 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"13320eeff82a29f","publisherId":"62f8f538d1ef5d0001eeba59"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	49876	44.196.251.236	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	616	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 35 38 39 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16589,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-04-19 13:12:47 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: application/json;charset=utf-8 Content-Length: 235 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.14.94 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=2647d031a51b7a31cc96fbee0c73c78c;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Server: Jetty(9.4.38.v20210224)
2024-04-19 13:12:47 UTC	235	IN	Data Raw: 7b 22 70 69 64 22 3a 22 32 36 34 37 64 30 33 31 61 35 31 62 37 61 33 31 63 63 39 36 66 62 65 65 30 63 37 33 63 37 38 63 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 32 36 34 37 64 30 33 31 61 35 31 62 37 61 33 31 63 63 39 36 66 62 65 65 30 63 37 33 63 37 38 63 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 69 22 3a 22 64 36 36 38 33 33 34 34 65 62 33 63 35 39 65 36 35 37 38 65 38 39 61 35 31 35 31 30 31 38 35 63 61 30 32 63 65 34 37 34 65 39 36 31 30 62 62 62 39 35 64 61 38 34 63 63 39 32 63 61 61 32 62 34 22 2c 22 74 22 3a 22 63 22 2c 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 31 34 31 33 37 31 36 37 30 34 31 22 7d 5d 7d Data Ascii: {"pid":"2647d031a51b7a31cc96fbee0c73c78c","c":[{"k":"_cc_id","v":"2647d031a51b7a31cc96fbee0c73c78c","e":23328000}],"ids":[{"i":"d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4","t":"c","c":"core","e":"1714137167041"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50231	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	852	OUT	POST /cdb?profileId=207&av=36&wv=8.38.0&cb=95041256928&lsavail=1&bundle=r2dEhF82MGEweVgzWll2Z1YlMkJlc3FvY3lzVDcwTFNCNTQlMkJNNkw1T09pckVYUlhWaUNyUUdpeWJhNWYwRENqZElOUiUyRjdTMjZ3cXQ5WGxrTFdWVzZ3MFdvJTJCSEEzYW11ejZOWnBXcXBuY1ZVdVFlNkVlT2VGS1V0cXpyd3locndRT2NrQWdT HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 1203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1203	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 35 66 34 33 39 38 66 2d 30 65 66 32 2d 34 34 36 32 2d 62 34 30 38 2d 38 37 30 65 38 36 35 64 64 38 61 62 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 22 31 31 38 31 36 22 7d 2c 22 72 65 67 73 22 3a 7b 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 32 36 61 64 62 36 30 33 39 34 37 36 63 31 61 22 2c 22 69 6d 70 69 64 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 7d 7d 2c 22 73 69 7a 65 73 22 3a 5b 22 33 30 30 78 Data Ascii: {"id":"85f4398f-0ef2-4462-b408-870e865dd8ab","publisher":{"url":"https://www.justjared.com/","networkid":"11816"},"regs":{},"slots":[{"slotid":"26adb6039476c1a","impid":"div-insticator-ad-5","ext":{"data":{"pbadslot":"div-insticator-ad-5"}},"sizes":["300x
2024-04-19 13:12:47 UTC	309	IN	HTTP/1.1 204 No Content date: Fri, 19 Apr 2024 13:12:46 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50226	34.202.246.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	669	OUT	POST /rtb/bid?src=prebid_prebid_8.38.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 608 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYABZHLsfeeoSHTr-ol2IW
2024-04-19 13:12:46 UTC	608	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 31 61 36 35 39 35 37 61 64 34 30 33 38 62 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 2c 22 69 64 22 3a 22 31 36 32 35 34 63 65 37 66 37 38 33 31 66 37 22 2c 22 74 61 67 69 64 22 3a 22 31 30 39 34 35 37 36 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 7d 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 Data Ascii: {"id":"31a65957ad4038b","imp":[{"adunitcode":"div-insticator-ad-5","id":"16254ce7f7831f7","tagid":"1094576","bidfloor":"","banner":{"format":[{"w":300,"h":250}],"w":1,"h":1},"ext":{"data":{"pbadslot":"div-insticator-ad-5"}}}],"site":{"domain":"www.justjar
2024-04-19 13:12:47 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:46 GMT Content-Type: application/json Content-Length: 94 Connection: close Set-Cookie: ljt_reader=IhHYABZHLsfeeoSHTr-ol2IW;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-04-19 13:12:47 UTC	94	IN	Data Raw: 7b 22 69 64 22 3a 22 33 31 61 36 35 39 35 37 61 64 34 30 33 38 62 22 2c 22 62 69 64 69 64 22 3a 22 33 63 32 30 64 61 38 33 2d 37 39 39 38 2d 34 38 35 31 2d 61 37 30 31 2d 33 65 36 37 34 32 39 35 39 62 66 62 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 33 34 30 36 37 31 35 7d 7d Data Ascii: {"id":"31a65957ad4038b","bidid":"3c20da83-7998-4851-a701-3e6742959bfb","ext":{"iid":13406715}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50227	18.154.227.93	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	634	OUT	POST /hb-multi HTTP/1.1 Host: hb.yellowblue.io Connection: keep-alive Content-Length: 1216 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:46 UTC	1216	OUT	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 77 72 61 70 70 65 72 5f 74 79 70 65 22 3a 22 70 72 65 62 69 64 6a 73 22 2c 22 77 72 61 70 70 65 72 5f 76 65 6e 64 6f 72 22 3a 22 69 6e 73 74 42 69 64 22 2c 22 77 72 61 70 70 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 38 2e 30 22 2c 22 61 64 61 70 74 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 36 2e 30 2e 30 22 2c 22 61 75 63 74 69 6f 6e 5f 73 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 36 35 32 37 38 2c 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 36 31 32 34 63 61 65 64 39 63 37 61 64 62 30 30 30 31 63 30 32 38 64 38 22 2c 22 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 73 69 74 65 5f 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e Data Ascii: {"params":{"wrapper_type":"prebidjs","wrapper_vendor":"instBid","wrapper_version":"8.38.0","adapter_version":"6.0.0","auction_start":1713532365278,"publisher_id":"6124caed9c7adb0001c028d8","publisher_name":"www.justjared.com","site_domain":"www.justjared.
2024-04-19 13:12:47 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 84 Connection: close Date: Fri, 19 Apr 2024 13:12:46 GMT access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://www.justjared.com x-reason: maxmind hosting provider x-envoy-upstream-service-time: 28 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 bfc4676044fcc4c0c8e705c71ca51fea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: wNZCYTjqtKkLdxl3s5oSbLagGmXi4PF9wwgSoShPp3KQKRnz0EtO-Q==
2024-04-19 13:12:47 UTC	84	IN	Data Raw: 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 37 37 38 38 34 36 63 66 30 36 63 38 31 31 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 31 32 34 63 61 65 64 39 63 37 61 64 62 30 30 30 31 63 30 32 38 64 38 22 7d 7d 0a Data Ascii: {"params":{"sessionId":"1778846cf06c811","publisherId":"6124caed9c7adb0001c028d8"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50233	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1140 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:46 UTC	1140	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 33 35 33 32 33 36 35 32 39 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 30 35 65 38 39 39 39 66 35 66 36 65 63 32 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 69 6e 73 74 69 63 61 74 6f 72 2d 61 64 2d 35 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 30 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a Data Ascii: {"id":"1713532365292","at":1,"cur":["USD"],"imp":[{"id":"305e8999f5f6ec2","secure":1,"ext":{"data":{"pbadslot":"div-insticator-ad-5"}},"bidfloorcur":"USD","banner":{"w":300,"h":250,"pos":0,"topframe":0}}],"site":{"page":"https://www.justjared.com/","ref":
2024-04-19 13:12:47 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 19 Apr 2024 13:12:46 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50236	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	784	OUT	GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:47 UTC	699	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: text/html Content-Length: 1339 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:47 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:47 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-04-19 13:12:47 UTC	1339	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 36 20 53 65 6e 74 20 2f 20 35 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 70 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (6 Sent / 5 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='https

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50240	23.22.93.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	557	OUT	GET /json/ HTTP/1.1 Host: geoip.insticator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	286	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: application/json Content-Length: 214 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin X-Database-Date: Thu, 18 Apr 2024 18:43:21 GMT
2024-04-19 13:12:47 UTC	214	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 22 2c 22 63 69 74 79 22 3a 22 22 2c 22 7a 69 70 5f 63 6f 64 65 22 3a 22 22 2c 22 74 69 6d 65 5f 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 37 2e 37 35 31 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 37 2e 38 32 32 2c 22 6d 65 74 72 6f 5f 63 6f 64 65 22 3a 30 7d 0a Data Ascii: {"ip":"81.181.57.52","country_code":"US","country_name":"United States","region_code":"","region_name":"","city":"","zip_code":"","time_zone":"America/Chicago","latitude":37.751,"longitude":-97.822,"metro_code":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50239	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	688	OUT	GET /ecm3?ex=gg.com&id=u_bd73a985-3ef7-4416-a679-3a9309181613 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VPNHPDNE6SWYGAV7TR3M Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50238	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	543	OUT	GET /js/ld/publishertag.ids.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	483	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:47 GMT content-type: text/javascript content-length: 42433 last-modified: Tue, 09 Apr 2024 12:20:57 GMT etag: "661532a9-a5c1" expires: Sat, 20 Apr 2024 13:12:47 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:47 UTC	15901	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 52 3d 72 3d 72 7c 7c 7b 7d 29 5b 52 2e 45 72 72 6f 72 3d 30 5d 3d 22 45 72 72 6f 72 22 2c 52 5b 52 2e 57 61 72 6e 69 6e 67 3d 31 5d 3d 22 57 61 72 6e 69 6e 67 22 2c 52 5b 52 2e 44 65 62 75 67 3d 32 5d 3d 22 44 65 62 75 67 22 3b 76 61 72 20 72 2c 4c 3d 5b 22 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 38 66 31 63 3b 22 2c 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 64 3d 28 6e 2e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f Data Ascii: !function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o
2024-04-19 13:12:47 UTC	16319	IN	Data Raw: 74 63 68 28 65 29 7b 7d 7d 65 6c 73 65 20 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 65 2c 74 2c 63 2c 76 6f 69 64 20 30 2c 69 29 3b 72 65 74 75 72 6e 20 73 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 21 31 3a 6f 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 6e 3d 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 6f 3c 6e 2e Data Ascii: tch(e){}}else this.setCookieString(e,t,c,void 0,i);return s},h.prototype.deleteCookie=function(e,t,o){this.setCookie(e,"",0,t,o=void 0===o?!1:o)},h.prototype.getCookie=function(e,t){if(this.cookiesEnabled)for(var o=0,n=(t\|\|document).cookie.split(";");o<n.
2024-04-19 13:12:47 UTC	3547	IN	Data Raw: 3d 6e 65 77 20 4f 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 28 29 2c 65 7d 2c 4f 2e 43 72 65 61 74 65 57 69 74 68 53 74 61 72 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 4f 28 21 31 29 3b 72 65 74 75 72 6e 20 74 2e 73 74 61 72 74 54 69 6d 65 3d 65 2c 74 7d 2c 4f 2e 54 69 6d 65 53 69 6e 63 65 50 61 67 65 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f Data Ascii: =new O;return e.start(),e},O.CreateWithStartTime=function(e){var t=new O(!1);return t.startTime=e,t},O.TimeSincePageLoad=function(){if(window.performance){if(window.performance.now)return window.performance.now();if(window.performance.timing&&window.perfo
2024-04-19 13:12:47 UTC	6666	IN	Data Raw: 6e 4f 62 73 65 72 76 65 72 7c 7c 69 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 70 72 6f 63 65 73 73 29 2c 75 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 3b 66 75 6e 63 Data Ascii: nObserver\|\|i.WebKitMutationObserver,a="undefined"==typeof self&&"undefined"!=typeof process&&"[object process]"==={}.toString.call(process),u="undefined"!=typeof Uint8ClampedArray&&"undefined"!=typeof importScripts&&"undefined"!=typeof MessageChannel;func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50242	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:46 UTC	1812	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=bUAiigz35TDj7&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-4%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_4%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_4%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 764 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:46 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 a2ade9286d51430f6469764a392ad476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: mdrHbdKWeUZlm93BYifxoMvvh8YKOyK5VZnjwB03jfQAdX3BKOvhog==
2024-04-19 13:12:47 UTC	764	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 42 77 6b 4a 37 46 69 5a 50 45 66 4b 38 31 4a 53 6f 78 2d 75 42 55 41 41 41 47 4f 39 6e 7a 78 67 41 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 41 76 42 69 45 44 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 32 35 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JBwkJ7FiZPEfK81JSox-uBUAAAGO9nzxgAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAvBiED","size":"300x250","meta":["slotID","mediaType","siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50243	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	1812	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=NC48x6hCLCCbC&cb=0&ws=0x0&v=24.305.1002&t=3000&slots=%5B%7B%22sd%22%3A%22div-insticator-ad-5%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F2507246%2Fjustjared.com_Web_300x250_5%22%2C%22kv%22%3A%7B%22gpid%22%3A%22%2F2507246%2C22973718026%2Fjustjared.com_Web_5%22%7D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!insticator.com%2Cbd45a367-d5fa-4207-9aec-1acba8ec52eb%2C1%2C%2C%2C&sm=4ed2f418-22cd-4c9e-adf6-01aaf0fd3552&pubid=70fb13d1-ab65-42ac-a7ca-0b4e680d5c92&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%2C%22cmpTimeout%22%3A1000%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 764 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:46 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 4ea27cdf8ff7ba5bd5923d3dc2371c3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: aNoobuKRKrnAUeojUQpls7skDStPgyIuyRk9ITOc9n-zIRg9H3Ebvw==
2024-04-19 13:12:47 UTC	764	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 42 62 30 46 48 75 64 6b 30 47 36 53 6f 76 62 65 2d 35 44 2d 67 67 41 41 41 47 4f 39 6e 7a 79 66 41 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 41 35 64 50 73 64 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 32 35 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JBb0FHudk0G6Sovbe-5D-ggAAAGO9nzyfAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICA5dPsd","size":"300x250","meta":["slotID","mediaType","siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50247	18.165.116.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	541	OUT	GET /lt/c/16576/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 39773 Connection: close Date: Thu, 18 Apr 2024 21:06:19 GMT Last-Modified: Wed, 14 Feb 2024 17:39:34 GMT ETag: "0f107a0e7753aa69cd07ded21852408c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f1aa35d541505b036ee79df2dfbe98da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: 1UhijKAj9jIfwqzGcxAN8ScfHdgKSHbUpp_gRucvmSUbZ828_VcE4w== Age: 57989
2024-04-19 13:12:47 UTC	15820	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-04-19 13:12:47 UTC	16384	IN	Data Raw: 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 37 36 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 2e 6e 61 6d 65 73 70 61 63 65 26 26 28 62 3d 21 Data Ascii: a.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16576_.error("tagInput.data.thirdParty.value is not defined"));a.namespace&&"string"!=typeof a.namespace&&(b=!
2024-04-19 13:12:47 UTC	7569	IN	Data Raw: 6e 63 31 36 35 37 36 5f 45 3a 63 3b 62 26 26 73 79 6e 63 31 36 35 37 36 5f 77 28 62 29 26 26 21 73 79 6e 63 31 36 35 37 36 5f 44 28 62 29 26 26 21 62 2e 75 28 29 26 26 73 79 6e 63 31 36 35 37 36 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 73 79 6e 63 31 36 35 37 36 5f 48 61 28 61 2c 62 2c 64 29 3b 73 79 6e 63 31 36 35 37 36 5f 37 28 61 2c 73 79 6e 63 31 36 35 37 36 5f 30 28 64 29 2c 73 79 6e 63 31 36 35 37 36 5f 38 28 61 2c 64 29 2c 22 64 61 74 61 22 2c 63 29 7d 29 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 37 36 5f 49 61 28 61 2c 62 2c 63 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 73 79 6e 63 31 36 35 37 36 5f 45 3a 63 3b 73 79 6e 63 31 36 35 37 36 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: nc16576_E:c;b&&sync16576_w(b)&&!sync16576_D(b)&&!b.u()&&sync16576_9(a).then(function(d){d=sync16576_Ha(a,b,d);sync16576_7(a,sync16576_0(d),sync16576_8(a,d),"data",c)})} function sync16576_Ia(a,b,c){c=void 0===c?sync16576_E:c;sync16576_9(a).then(function(d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50245	18.165.116.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	538	OUT	GET /lt/c/9234/lt.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 59716 Connection: close Date: Fri, 19 Apr 2024 12:26:31 GMT Last-Modified: Wed, 14 Feb 2024 16:27:53 GMT ETag: "cfb114a94dba422a0ce3fa77bec050b5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9991dee74df517ccd6f97b8bb475fe4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 X-Amz-Cf-Id: vBhA9iiXcMWVjZTAsTdXnIxfFzvd32SfFmzFdOpzbkPLV4TMD6HN-A== Age: 2776
2024-04-19 13:12:47 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-04-19 13:12:47 UTC	16384	IN	Data Raw: 21 3d 61 2e 74 79 70 65 7c 7c 6c 74 39 32 33 34 5f 6f 61 2e 74 65 73 74 28 61 2e 69 64 29 3f 62 3d 21 30 3a 6c 74 39 32 33 34 5f 2e 65 72 72 6f 72 28 22 73 75 70 70 6c 69 65 64 20 69 64 20 6d 75 73 74 20 62 65 20 76 61 6c 69 64 20 73 68 61 32 35 36 20 68 61 73 68 2c 20 77 61 73 20 27 22 2b 20 61 2e 69 64 2b 22 27 22 29 3a 6c 74 39 32 33 34 5f 2e 65 72 72 6f 72 28 22 73 75 70 70 6c 69 65 64 20 69 64 20 6d 75 73 74 20 62 65 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2c 20 77 61 73 20 27 22 2b 61 2e 69 64 2b 22 27 22 29 3a 6c 74 39 32 33 34 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 74 79 70 65 20 6d 75 73 74 20 6f 6e 65 20 6f 66 20 22 2b 6c 74 39 32 33 34 5f 71 2e 6a 6f 69 6e 28 29 2b 22 2c 20 66 6f 75 6e 64 20 27 22 2b 61 2e Data Ascii: !=a.type\|\|lt9234_oa.test(a.id)?b=!0:lt9234_.error("supplied id must be valid sha256 hash, was '"+ a.id+"'"):lt9234_.error("supplied id must be valid email address, was '"+a.id+"'"):lt9234_.error("id object type must one of "+lt9234_q.join()+", found '"+a.
2024-04-19 13:12:47 UTC	16384	IN	Data Raw: 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 31 3a 62 3d 22 41 70 70 72 6f 70 72 69 61 74 65 20 63 6f 6e 73 65 6e 74 20 66 6f 72 20 61 75 64 69 65 6e 63 65 20 65 78 74 72 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 32 3a 62 3d 22 44 61 74 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 33 3a 62 3d 22 49 64 20 73 79 6e 63 69 6e 67 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 34 3a 62 3d 22 44 61 74 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 63 6c 69 65 6e 74 20 69 64 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 Data Ascii: .";break;case 101:b="Appropriate consent for audience extraction is not present.";break;case 102:b="Data collection is not enabled.";break;case 103:b="Id syncing is not enabled.";break;case 104:b="Data collection client id validation failed.";break;case 1
2024-04-19 13:12:47 UTC	10564	IN	Data Raw: 70 28 67 2e 6c 6f 63 61 74 69 6f 6e 29 29 2e 74 65 73 74 28 65 29 29 69 66 28 67 2e 65 6c 65 6d 65 6e 74 26 26 67 2e 65 76 65 6e 74 29 7b 76 61 72 20 66 3d 6c 74 39 32 33 34 5f 74 62 28 6c 74 39 32 33 34 5f 38 28 68 2e 5a 2c 5b 67 2e 53 61 5d 29 29 3b 30 3e 3d 66 2e 6c 65 6e 67 74 68 26 26 22 63 6c 69 63 6b 22 3d 3d 3d 67 2e 65 76 65 6e 74 26 26 66 2e 70 75 73 68 28 68 2e 6c 61 29 3b 6c 74 39 32 33 34 5f 48 62 28 61 2e 77 61 2c 67 2c 66 2c 68 2e 5a 29 7d 65 6c 73 65 20 61 2e 66 62 2e 61 64 64 28 6c 74 39 32 33 34 5f 76 62 28 68 2e 5a 2c 67 29 29 7d 7d 28 64 29 29 2c 64 3d 7b 5a 3a 64 2e 5a 2c 6c 61 3a 64 2e 6c 61 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 74 39 32 33 34 5f 54 62 28 61 29 7b 61 2e 77 61 2e 63 61 63 68 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 Data Ascii: p(g.location)).test(e))if(g.element&&g.event){var f=lt9234_tb(lt9234_8(h.Z,[g.Sa]));0>=f.length&&"click"===g.event&&f.push(h.la);lt9234_Hb(a.wa,g,f,h.Z)}else a.fb.add(lt9234_vb(h.Z,g))}}(d)),d={Z:d.Z,la:d.la}} function lt9234_Tb(a){a.wa.cache.forEach(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50244	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	816	OUT	GET /usersync?b=rth&i=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=gumgum&tc=1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:47 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50077	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	669	OUT	GET /v1/envelope?pid=0010b00002cG8kQAAS&src=esp&ver=1.9.0&us_privacy=1YNN HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	367	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 49 via: 1.1 google date: Fri, 19 Apr 2024 13:12:46 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:47 UTC	49	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 75 6e 74 72 79 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"succeeded":false,"error":"Country not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50248	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	782	OUT	GET /usersync?b=sus&i=ZiJtzsCo8X8AAFvXhEgAAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:47 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50252	104.22.53.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	576	OUT	GET /hadron.js?url=about%3Asrcdoc&ref=&_it=amazon&partner_id=450 HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	546	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: application/javascript Content-Length: 56077 Connection: close Cf-Bgj: minify ETag: "4f8d7eccb8b77bff110a91871ebadcc0" Last-Modified: Thu, 07 Mar 2024 15:57:22 GMT x-amz-id-2: wVIO1wrs31x1jKRIz3dKPn3IKJaxmFZdB4TaOgRyJwNYeBol3+8I/Y1HD2dEOHBU8sCH74De62g= x-amz-request-id: GPA71GZPJYF3GMCR CF-Cache-Status: HIT Age: 25 Expires: Fri, 19 Apr 2024 14:12:47 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d25f059827bb2-ATL
2024-04-19 13:12:47 UTC	823	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 69 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 49 2c 69 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 63 6f 6e 73 74 20 65 3d 28 49 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 64 61 74 61 3a 5b 5d 2c 61 64 64 44 61 74 61 3a 28 49 2c 69 29 3d 3e 7b 65 2e 64 61 74 61 2e 70 75 73 68 28 7b 6b 65 79 3a 49 2c 76 61 6c 75 65 3a 69 7d 29 2c 65 2e 61 64 64 65 64 5b 49 5d 3d 21 30 7d 2c 61 64 64 65 64 3a 7b 7d 7d 3b 6c 65 74 20 4a 3d 2d 31 3b 63 6f 6e 73 74 20 73 3d 6a 3d 3e 7b 69 66 28 4a Data Ascii: i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e.data.push({key:I,value:i}),e.added[I]=!0},added:{}};let J=-1;const s=j=>{if(J
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 22 2f 22 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 3d 49 7d 7d 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 2b 49 7d 63 6f 6e 73 74 20 4d 3d 5b 22 30 31 22 2c 22 31 34 22 2c 22 32 37 22 2c 22 33 61 22 2c 22 34 64 22 2c 22 35 67 22 2c 22 36 6a 22 2c 22 37 6d 22 2c 22 38 70 22 2c 22 39 73 22 2c 22 61 76 22 2c 22 62 79 22 2c 22 63 31 22 2c 22 64 34 22 2c 22 65 37 22 2c 22 66 61 22 2c 22 67 64 22 2c 22 68 67 22 2c 22 69 6a 22 2c 22 6a 6d 22 2c 22 6b 70 22 2c 22 6c 73 22 2c 22 6d 76 22 2c 22 6e 79 22 2c 22 6f 31 22 2c 22 70 34 22 2c 22 71 37 22 2c 22 72 61 22 2c 22 73 64 22 2c 22 74 67 22 5d 3b 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a Data Ascii: "/"))}catch(n){i=I}}var n;return i+I}const M=["01","14","27","3a","4d","5g","6j","7m","8p","9s","av","by","c1","d4","e7","fa","gd","hg","ij","jm","kp","ls","mv","ny","o1","p4","q7","ra","sd","tg"];(Object.create(null),"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 4a 35 49 6e 31 39 66 58 31 39 4c 43 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 70 74 49 6e 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 64 47 63 69 66 53 77 69 65 43 49 36 65 79 4a 76 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 69 49 36 65 79 49 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6f 5a 79 4a 39 66 58 31 39 66 58 30 73 49 6d 73 69 4f 6e 73 69 62 53 49 36 65 79 4a 6e 49 6a 70 37 49 Data Ascii: p7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImJ5In19fX19LCJpIjp7Im8iOnsidCI6eyJrIjp7InkiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImptIn19fX19fSwidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoidGcifSwieCI6eyJvIjp7ImsiOnsieiI6eyI0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJoZyJ9fX19fX0sImsiOnsibSI6eyJnIjp7I
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 72 49 6a 70 37 49 6d 34 69 4f 6e 73 69 64 53 49 36 65 79 49 77 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 6b 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 70 49 6a 70 37 49 6d 34 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 4c 43 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 69 77 69 65 53 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 Data Ascii: rIjp7Im4iOnsidSI6eyIwIjp7InkiOnsibyI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjRkIn19fX19fX19fSwieiI6eyJpIjp7Im4iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19LCJrIjp7IngiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIiwieSI6eyJxIjp7Im8iOnsibyI6eyJ0Ijp7Im0iOnsiXH
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 62 79 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 73 63 79 4a 39 66 58 31 39 66 58 31 39 4c 43 49 30 49 6a 70 37 49 6e 55 69 4f 6e 73 69 4d 43 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 55 33 49 6e 31 39 66 58 31 39 4c 43 49 31 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 53 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 Data Ascii: bSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwibyI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJscyJ9fX19fX19LCI0Ijp7InUiOnsiMCI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6ImU3In19fX19LCI1Ijp7InUiOnsidSI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX1
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 4c 43 4a 6e 49 6a 70 37 49 6d 6f 69 4f 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 6f 69 4f 6e 73 69 4d 43 49 36 65 79 4a 79 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 53 77 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 Data Ascii: yJcdTAwMDAiOnt9LCJtZXRhIjoiMTQiLCJnIjp7ImoiOnsiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX19fX19fX19fX0sImoiOnsiMCI6eyJyIjp7InoiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fSwiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJc
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 49 36 65 79 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 64 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 49 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 4d 69 4f 6e 73 69 4d 43 49 36 65 79 4a 35 49 6a 70 37 49 6d 73 69 4f 6e 73 69 63 79 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 54 63 69 66 58 31 39 66 58 31 39 66 53 77 69 61 79 49 36 65 79 4a 34 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 Data Ascii: I6eyJrIjp7IngiOnsidCI6eyJnIjp7InoiOnsibyI6eyIxIjp7ImsiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fX19fX19fX0sInMiOnsiMCI6eyJ5Ijp7ImsiOnsicyI6eyJrIjp7InQiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoicTcifX19fX19fSwiayI6eyJ4Ijp7Im8iOnsiaSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwib
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 69 49 36 65 79 4a 76 49 6a 70 37 49 6e 59 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 32 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 63 69 4f 6e 73 69 4d 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 49 77 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 44 51 69 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 7a 45 69 4c 43 4a 76 49 6a 70 37 49 6d 77 69 4f 6e 73 69 62 79 49 36 65 79 Data Ascii: 6eyJrIjp7InkiOnsibiI6eyJvIjp7InYiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoic2QifX19fX19fX19fX19fX0sInciOnsiMCI6eyJnIjp7IngiOnsibyI6eyIwIjp7InMiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZDQifX19fX19fX0sIngiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibzEiLCJvIjp7ImwiOnsibyI6ey
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 4c 43 4a 78 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 32 61 69 4a 39 66 53 77 69 61 69 49 36 65 79 4a 7a 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 63 53 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 6e 6b 69 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a Data Ascii: LCJxIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI2aiJ9fSwiaiI6eyJzIjp7Im8iOnsidCI6eyJ6Ijp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwicSI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibnkifX19fSwidCI6eyJxIjp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50253	104.22.53.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	596	OUT	GET /hadron.js?url=https%3A%2F%2Fwww.justjared.com%2F&ref=&_it=amazon&partner_id=628 HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	546	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: application/javascript Content-Length: 56077 Connection: close Cf-Bgj: minify ETag: "4f8d7eccb8b77bff110a91871ebadcc0" Last-Modified: Thu, 07 Mar 2024 15:57:22 GMT x-amz-id-2: wVIO1wrs31x1jKRIz3dKPn3IKJaxmFZdB4TaOgRyJwNYeBol3+8I/Y1HD2dEOHBU8sCH74De62g= x-amz-request-id: GPA71GZPJYF3GMCR CF-Cache-Status: HIT Age: 27 Expires: Fri, 19 Apr 2024 14:12:47 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d25f06e5b53f8-ATL
2024-04-19 13:12:47 UTC	823	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 69 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 49 2c 69 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 63 6f 6e 73 74 20 65 3d 28 49 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 64 61 74 61 3a 5b 5d 2c 61 64 64 44 61 74 61 3a 28 49 2c 69 29 3d 3e 7b 65 2e 64 61 74 61 2e 70 75 73 68 28 7b 6b 65 79 3a 49 2c 76 61 6c 75 65 3a 69 7d 29 2c 65 2e 61 64 64 65 64 5b 49 5d 3d 21 30 7d 2c 61 64 64 65 64 3a 7b 7d 7d 3b 6c 65 74 20 4a 3d 2d 31 3b 63 6f 6e 73 74 20 73 3d 6a 3d 3e 7b 69 66 28 4a Data Ascii: i},n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e.data.push({key:I,value:i}),e.added[I]=!0},added:{}};let J=-1;const s=j=>{if(J
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 22 2f 22 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 3d 49 7d 7d 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 2b 49 7d 63 6f 6e 73 74 20 4d 3d 5b 22 30 31 22 2c 22 31 34 22 2c 22 32 37 22 2c 22 33 61 22 2c 22 34 64 22 2c 22 35 67 22 2c 22 36 6a 22 2c 22 37 6d 22 2c 22 38 70 22 2c 22 39 73 22 2c 22 61 76 22 2c 22 62 79 22 2c 22 63 31 22 2c 22 64 34 22 2c 22 65 37 22 2c 22 66 61 22 2c 22 67 64 22 2c 22 68 67 22 2c 22 69 6a 22 2c 22 6a 6d 22 2c 22 6b 70 22 2c 22 6c 73 22 2c 22 6d 76 22 2c 22 6e 79 22 2c 22 6f 31 22 2c 22 70 34 22 2c 22 71 37 22 2c 22 72 61 22 2c 22 73 64 22 2c 22 74 67 22 5d 3b 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a Data Ascii: "/"))}catch(n){i=I}}var n;return i+I}const M=["01","14","27","3a","4d","5g","6j","7m","8p","9s","av","by","c1","d4","e7","fa","gd","hg","ij","jm","kp","ls","mv","ny","o1","p4","q7","ra","sd","tg"];(Object.create(null),"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 4a 35 49 6e 31 39 66 58 31 39 4c 43 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 70 74 49 6e 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 64 47 63 69 66 53 77 69 65 43 49 36 65 79 4a 76 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 69 49 36 65 79 49 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6f 5a 79 4a 39 66 58 31 39 66 58 30 73 49 6d 73 69 4f 6e 73 69 62 53 49 36 65 79 4a 6e 49 6a 70 37 49 Data Ascii: p7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImJ5In19fX19LCJpIjp7Im8iOnsidCI6eyJrIjp7InkiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImptIn19fX19fSwidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoidGcifSwieCI6eyJvIjp7ImsiOnsieiI6eyI0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJoZyJ9fX19fX0sImsiOnsibSI6eyJnIjp7I
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 72 49 6a 70 37 49 6d 34 69 4f 6e 73 69 64 53 49 36 65 79 49 77 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 6b 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 70 49 6a 70 37 49 6d 34 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 4c 43 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 69 77 69 65 53 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 Data Ascii: rIjp7Im4iOnsidSI6eyIwIjp7InkiOnsibyI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjRkIn19fX19fX19fSwieiI6eyJpIjp7Im4iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19LCJrIjp7IngiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIiwieSI6eyJxIjp7Im8iOnsibyI6eyJ0Ijp7Im0iOnsiXH
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 62 79 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 73 63 79 4a 39 66 58 31 39 66 58 31 39 4c 43 49 30 49 6a 70 37 49 6e 55 69 4f 6e 73 69 4d 43 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 55 33 49 6e 31 39 66 58 31 39 4c 43 49 31 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 53 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 Data Ascii: bSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwibyI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJscyJ9fX19fX19LCI0Ijp7InUiOnsiMCI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6ImU3In19fX19LCI1Ijp7InUiOnsidSI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX1
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 4c 43 4a 6e 49 6a 70 37 49 6d 6f 69 4f 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 6f 69 4f 6e 73 69 4d 43 49 36 65 79 4a 79 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 53 77 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 Data Ascii: yJcdTAwMDAiOnt9LCJtZXRhIjoiMTQiLCJnIjp7ImoiOnsiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX19fX19fX19fX0sImoiOnsiMCI6eyJyIjp7InoiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fSwiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJc
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 49 36 65 79 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 64 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 49 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 4d 69 4f 6e 73 69 4d 43 49 36 65 79 4a 35 49 6a 70 37 49 6d 73 69 4f 6e 73 69 63 79 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 54 63 69 66 58 31 39 66 58 31 39 66 53 77 69 61 79 49 36 65 79 4a 34 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 Data Ascii: I6eyJrIjp7IngiOnsidCI6eyJnIjp7InoiOnsibyI6eyIxIjp7ImsiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fX19fX19fX0sInMiOnsiMCI6eyJ5Ijp7ImsiOnsicyI6eyJrIjp7InQiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoicTcifX19fX19fSwiayI6eyJ4Ijp7Im8iOnsiaSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwib
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 69 49 36 65 79 4a 76 49 6a 70 37 49 6e 59 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 32 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 63 69 4f 6e 73 69 4d 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 49 77 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 44 51 69 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 7a 45 69 4c 43 4a 76 49 6a 70 37 49 6d 77 69 4f 6e 73 69 62 79 49 36 65 79 Data Ascii: 6eyJrIjp7InkiOnsibiI6eyJvIjp7InYiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoic2QifX19fX19fX19fX19fX0sInciOnsiMCI6eyJnIjp7IngiOnsibyI6eyIwIjp7InMiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZDQifX19fX19fX0sIngiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibzEiLCJvIjp7ImwiOnsibyI6ey
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 4c 43 4a 78 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 32 61 69 4a 39 66 53 77 69 61 69 49 36 65 79 4a 7a 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 63 53 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 6e 6b 69 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a Data Ascii: LCJxIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI2aiJ9fSwiaiI6eyJzIjp7Im8iOnsidCI6eyJ6Ijp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwicSI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibnkifX19fSwidCI6eyJxIjp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50254	104.22.53.86	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	535	OUT	GET /api/1.0/id5-api.js HTTP/1.1 Host: cdn.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	647	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: text/javascript;charset=utf-8 Content-Length: 94098 Connection: close x-amz-id-2: 4uQ6tBBn5Xe9QoM6ldZIeVw2oo0ArydxbLK6Gv0QDpanpG99bnzw1WxOKbUy50COsVbD72m9yr4= x-amz-request-id: R858X1NNN75M4ZJX Last-Modified: Wed, 20 Mar 2024 11:38:58 GMT ETag: "f162f0b97c89da6502a32c3c1206d74e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 CF-Cache-Status: HIT Age: 3 Expires: Fri, 19 Apr 2024 14:12:47 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 876d25f05a5d4517-ATL
2024-04-19 13:12:47 UTC	722	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 36 33 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 76 61 72 20 72 2c 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 2c 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f Data Ascii: /** * @id5io/id5-api.js * @version v1.0.63 * @link https://id5.io/ * @license Apache-2.0 */!function(){"use strict";function i(t,e){var r,i=Object.keys(t);return Object.getOwnPropertySymbols&&(r=Object.getOwnPropertySymbols(t),e&&(r=r.filter(functio
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 61 3d 65 5b 6e 5d 28 6f 29 2c 63 3d 61 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 65 29 7d 61 2e 64 6f 6e 65 3f 74 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 69 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 69 3d 61 2e 61 70 70 6c 79 28 65 2c 6f 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 63 28 69 2c 74 2c 72 2c 73 2c 6e 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 63 28 69 2c 74 2c 72 2c 73 2c 6e Data Ascii: a=e[n](o),c=a.value}catch(e){return void r(e)}a.done?t(c):Promise.resolve(c).then(i,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,r){var i=a.apply(e,o);function s(e){c(i,t,r,s,n,"next",e)}function n(e){c(i,t,r,s,n
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 3d 3d 65 3f 6e 75 6c 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 75 6c 6c 21 3d 72 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 6f 2c 61 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 3b 74 72 79 7b 69 66 28 6e 3d 28 72 3d 72 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 29 21 3d 3d 72 29 72 65 74 75 72 6e 3b 63 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 63 3d 28 69 3d 6e 2e 63 61 6c 6c 28 72 29 29 2e 64 6f 6e 65 29 26 26 28 Data Ascii: y(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var i,s,n,o,a=[],c=!0,l=!1;try{if(n=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;c=!1}else for(;!(c=(i=n.call(r)).done)&&(
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 73 2c 6e 3d 21 30 2c 6f 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 72 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 21 30 2c 73 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 72 2e 72 65 74 75 72 6e 7c 7c 72 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f Data Ascii: to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var s,n=!0,o=!1;return{s:function(){r=r.call(e)},n:function(){var e=r.next();return n=e.done,e},e:function(e){o=!0,s=e},f:function(){try{n\|\|null==r.return\|\|r.return()}finally{if(o
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 65 2c 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 53 65 71 4e 62 3d 30 7d 63 72 65 61 74 65 42 72 6f 61 64 63 61 73 74 4d 65 73 73 61 67 65 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6e 65 77 20 76 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 5f 73 65 6e 64 65 72 49 64 2c 5f 2c 2b 2b 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 53 65 71 4e 62 2c 65 2c 74 7c 7c 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 7d 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: e,this._messageSeqNb=0}createBroadcastMessage(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:e.constructor.name;return new v(Date.now(),this._senderId,_,++this._messageSeqNb,e,t\|\|e.constructor.name)}createResponse(e,t){var r=2<arguments.l
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 65 5d 3d 74 2c 74 68 69 73 7d 5f 68 61 6e 64 6c 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 74 2e 74 61 72 67 65 74 5d 3b 69 66 28 65 29 74 72 79 7b 65 5b 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 5d 28 2e 2e 2e 74 2e 6d 65 74 68 6f 64 41 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 65 29 7b 74 68 69 73 2e 5f 6c 6f 67 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 69 6c 65 20 68 61 6e 64 6c 69 6e 67 20 6d 65 74 68 6f 64 20 63 61 6c 6c 20 22 2c 74 2c 65 29 7d 7d 7d 63 6c 61 73 73 20 49 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: urn this._targets[e]=t,this}_handle(t){const e=this._targets[t.target];if(e)try{e[t.methodName](...t.methodArguments)}catch(e){this._log.error("Error while handling method call ",t,e)}}}class I{constructor(e,t){var r=2<arguments.length&&void 0!==arguments
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 73 73 61 67 65 46 61 63 74 6f 72 79 2e 63 72 65 61 74 65 42 72 6f 61 64 63 61 73 74 4d 65 73 73 61 67 65 28 65 2c 74 29 29 7d 73 65 6e 64 52 65 73 70 6f 6e 73 65 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 74 68 69 73 2e 5f 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 22 2c 65 2c 72 2c 74 29 2c 74 68 69 73 2e 5f 70 6f 73 74 4d 65 73 73 61 67 65 28 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 46 61 63 74 6f 72 79 2e 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 2c Data Ascii: ssageFactory.createBroadcastMessage(e,t))}sendResponseMessage(e,t){var r=2<arguments.length&&void 0!==arguments[2]?arguments[2]:t.constructor.name;this._log.debug("Sending response message",e,r,t),this._postMessage(this._messageFactory.createResponse(e,t,
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 65 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 45 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 44 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4e 75 6d 62 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 72 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 31 3b Data Ascii: e)==="[object "+t+"]"}function P(e){return A(e,E)}function O(e){return A(e,D)}function R(e){return A(e,b)}function x(e){return A(e,"Number")}function U(e){return A(e,"Object")}function L(e){return void 0!==e}function N(t,r){if(!function(e){if(!e)return 1;
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 26 22 29 3a 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 72 5b 74 5d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 29 29 3a 22 22 29 2b 28 65 2e 68 61 73 68 3f 22 23 22 2e 63 6f 6e 63 61 74 28 65 2e 68 61 73 68 29 3a 22 22 29 3b 76 61 72 20 72 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 72 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 50 28 4d 61 74 68 2e 69 6d 75 6c 29 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 69 6d 75 6c 28 65 2c 74 29 3b 76 61 72 20 72 3d 28 34 31 39 34 33 30 33 26 65 29 2a 28 74 7c 3d 30 29 3b 72 65 74 75 72 6e 20 34 32 39 30 37 37 32 39 39 32 26 65 26 26 28 72 2b 3d 28 34 32 39 30 37 37 32 39 39 32 26 65 29 2a 74 7c 30 29 2c 30 7c 72 7d 65 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 Data Ascii: &"):"".concat(t,"=").concat(r[t])).join("&"))):"")+(e.hash?"#".concat(e.hash):"");var r}function j(r,e){function i(e,t){if(P(Math.imul))return Math.imul(e,t);var r=(4194303&e)(t\|=0);return 4290772992&e&&(r+=(4290772992&e)t\|0),0\|r}e=1<arguments.length&&v
2024-04-19 13:12:47 UTC	1369	IN	Data Raw: 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 3a 21 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 36 29 7c 7c 21 28 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 30 29 26 26 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 2d 31 29 26 26 30 21 3d 3d 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 7c 7c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f Data Ascii: ===this.localStoragePurposeConsent:!!this.applicableSections.includes(6)\|\|!(!this.applicableSections.includes(0)&&!this.applicableSections.includes(-1)&&0!==this.applicableSections.length)&&(void 0===this.localStoragePurposeConsent\|\|this.localStoragePurpo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50257	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	907	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 401 Connection: close x-amz-rid: 7TSKSWNPS7EFW0D6EZQN Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:47 UTC	401	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 69 6e 64 65 78 5f 6e 2d 61 64 4d 65 64 69 61 56 31 5f 72 78 5f 6e 2d 61 63 75 69 74 79 61 64 73 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 63 6e 76 5f 6e 2d 73 6d 61 61 74 6f 5f 6e 2d 6f 6e 65 74 61 67 5f 70 6d 2d 64 62 35 5f 6e 2d 73 69 6d 70 6c 69 2e 66 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50255	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	641	OUT	GET /ecm3?ex=media.net&id=3565339623115671000V10 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 93MFEVV7GFDHDBYCW2C7 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50260	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	661	OUT	GET /ecm3?id=36A9D4BEDC8C49329C57B49CB04880F6&ex=simpli.fi&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AGTMSMW6W4YZFX5HN085 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50261	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	630	OUT	GET /ecm3?ex=smaato.com&id=5a11a496f1 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: EMFBGQ71ZWXX5B44AYED Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50259	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	651	OUT	GET /ecm3?ex=baidu.com&id=22210ca737cf7b3c2itoor00lv6oxcmr HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:47 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: XBSM7Z4R5WHKDHFRT2HC Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50251	50.16.197.56	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	541	OUT	GET /load/?p=233&g=001&j=d HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	934	IN	HTTP/1.1 302 server: nginx date: Fri, 19 Apr 2024 13:12:47 GMT content-type: image/gif content-length: 0 set-cookie: EE="6fe6a4603177c372840da1d3a0d7528b"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 17-Aug-2024 01:12:47 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcEsLdUs0cTMwNjQ3DzZ2NzIwsQgJdEwxTjRIMXc1MgiaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UZD%252F4qKUNMZFJcWngo9X2wEAKUQmyA%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 17-Aug-2024 01:12:47 GMT; SameSite=None; Secure; cache-control: no-cache p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://loadus.exelator.com/load/?p=233&g=001&j=d&xl8blockcheck=1 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50256	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	690	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ew75cZqQhtpEcO-Pru61
2024-04-19 13:12:47 UTC	603	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 112 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://s.amazon-adsystem.com/ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ew75cZqQhtpEcO-Pru61; Path=/; Domain=zemanta.com; Expires=Sat, 19 Apr 2025 13:12:47 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 13:12:47 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 26 61 6d 70 3b 69 64 3d 45 77 37 35 63 5a 71 51 68 74 70 45 63 4f 2d 50 72 75 36 31 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://s.amazon-adsystem.com/ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50258	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	738	OUT	GET /ul_cb/check_uuid/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmediagrid.com%26id%3D%24%7BBSW_UUID%7D?gdpr=0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532362
2024-04-19 13:12:47 UTC	554	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://s.amazon-adsystem.com/ecm3?ex=mediagrid.com&id=58637582-4b7e-42fe-b59a-889f13122ef7 Set-Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; path=/; expires=Sat, 19-Apr-2025 13:12:47 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713532367; path=/; expires=Sat, 19-Apr-2025 13:12:47 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	49911	13.32.230.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	625	OUT	GET /skeleton.gif?adslot=ad_300x250_8001271 HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	617	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 19 Apr 2024 01:23:01 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:55:15 GMT ETag: "45cf913e5d9d3c9b2058033056d3dd23" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: iiN8XkcmZQdDIQeKkzAiegPwcD.5WPja Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 799fe82fac4f020c59f351e7b18812ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: BtxdcIWNKvprNHjYXUMLLR7a--uJbHwbkBORDTg3TY-pfwcupLtCVA== Age: 42587
2024-04-19 13:12:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50262	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	772	OUT	GET /syncframe?origin=publishertagids&topUrl=www.justjared.com&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	642	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:46 GMT server: Kestrel cache-control: private, max-age=3600 set-cookie: uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff; expires=Wed, 14 May 2025 13:12:47 GMT; domain=.criteo.com; path=/; secure; samesite=none set-cookie: optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/ transfer-encoding: chunked x-robots-tag: noindex cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp server-processing-duration-in-ticks: 376137 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:47 UTC	14626	IN	Data Raw: 33 39 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 44 4f 4d 41 49 4e 5f 4e 41 4d 45 20 3d 20 22 63 73 6d 2e 75 73 35 2e 75 73 2e 63 72 69 74 65 6f 2e 6e 65 74 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 52 41 54 49 4f 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 47 55 4d 5f 44 4f 4d 41 49 4e 20 3d 20 22 67 75 6d 2e 63 72 69 74 65 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 Data Ascii: 3915<!DOCTYPE html><html><head> <script type="text/javascript"> window.CONFIG_CSM_DOMAIN_NAME = "csm.us5.us.criteo.net"; window.CONFIG_CSM_RATIO = 100; window.GUM_DOMAIN = "gum.criteo.com"; </script> <script type="t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50263	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	596	OUT	GET /assets/smart-tag/versioned/runtime_6459738026535cda4232dc813c61447d.js HTTP/1.1 Host: assets.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	925	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqACkADUZErROtrVNL8Q__LTRepIl465-6gOlolQjzcd8iVglcLWcdJtbM6Hlz4cLBpzA_KUSPhxw Date: Fri, 19 Apr 2024 13:12:47 GMT Last-Modified: Thu, 18 Apr 2024 19:25:36 GMT ETag: W/"04df81a2b7937344ef6d9c69b33d63e1" Vary: Accept-Encoding x-goog-generation: 1713468336306666 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1526 Content-Type: text/javascript x-goog-hash: crc32c=EmFU8A== x-goog-hash: md5=BN+BoreTc0TvbZxpsz1j4Q== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: etag Access-Control-Expose-Headers: Content-Type X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Cache-Control: public,max-age=31536000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:47 UTC	330	IN	Data Raw: 61 31 31 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 72 2c 74 2c 6f 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6f 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 61 29 2c 74 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 61 2e 4f 3d 28 72 2c 74 2c 6f 2c 6e 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 69 3d 31 2f 30 3b 66 6f 72 28 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 74 2c 6f 2c 6e 5d 3d 65 5b 73 5d 2c 6c 3d 21 30 Data Ascii: a11(()=>{var e,r,t,o={},n={};function a(e){var r=n[e];if(void 0!==r)return r.exports;var t=n[e]={exports:{}};return o[e].call(t.exports,t,t.exports,a),t.exports}a.m=o,e=[],a.O=(r,t,o,n)=>{if(!t){var i=1/0;for(s=0;s<e.length;s++){for(var[t,o,n]=e[s],l=!0
2024-04-19 13:12:47 UTC	1255	IN	Data Raw: 3f 74 2e 73 70 6c 69 63 65 28 75 2d 2d 2c 31 29 3a 28 6c 3d 21 31 2c 6e 3c 69 26 26 28 69 3d 6e 29 29 3b 69 66 28 6c 29 7b 65 2e 73 70 6c 69 63 65 28 73 2d 2d 2c 31 29 3b 76 61 72 20 63 3d 6f 28 29 3b 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 72 3d 63 29 7d 7d 72 65 74 75 72 6e 20 72 7d 6e 3d 6e 7c 7c 30 3b 66 6f 72 28 76 61 72 20 73 3d 65 2e 6c 65 6e 67 74 68 3b 73 3e 30 26 26 65 5b 73 2d 31 5d 5b 32 5d 3e 6e 3b 73 2d 2d 29 65 5b 73 5d 3d 65 5b 73 2d 31 5d 3b 65 5b 73 5d 3d 5b 74 2c 6f 2c 6e 5d 7d 2c 61 2e 64 3d 28 65 2c 72 29 3d 3e 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 72 29 61 2e 6f 28 72 2c 74 29 26 26 21 61 2e 6f 28 65 2c 74 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: ?t.splice(u--,1):(l=!1,n<i&&(i=n));if(l){e.splice(s--,1);var c=o();void 0!==c&&(r=c)}}return r}n=n\|\|0;for(var s=e.length;s>0&&e[s-1][2]>n;s--)e[s]=e[s-1];e[s]=[t,o,n]},a.d=(e,r)=>{for(var t in r)a.o(r,t)&&!a.o(e,t)&&Object.defineProperty(e,t,{enumerable:!
2024-04-19 13:12:47 UTC	999	IN	Data Raw: 3d 64 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6c 2e 6f 6e 6c 6f 61 64 29 2c 75 26 26 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 7d 7d 2c 61 2e 72 3d 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3b 61 2e 67 2e 69 6d 70 6f 72 74 53 63 72 69 70 74 73 26 26 Data Ascii: =d.bind(null,l.onload),u&&document.head.appendChild(l)}},a.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},(()=>{var e;a.g.importScripts&&
2024-04-19 13:12:47 UTC	397	IN	Data Raw: 31 38 31 0d 0a 2c 6f 5b 31 5d 28 6c 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 72 2c 72 29 7d 65 6c 73 65 20 65 5b 72 5d 3d 30 7d 2c 61 2e 4f 2e 6a 3d 72 3d 3e 30 3d 3d 3d 65 5b 72 5d 3b 76 61 72 20 72 3d 28 72 2c 74 29 3d 3e 7b 76 61 72 20 6f 2c 6e 2c 5b 69 2c 6c 2c 75 5d 3d 74 2c 63 3d 30 3b 69 66 28 69 2e 73 6f 6d 65 28 28 72 3d 3e 30 21 3d 3d 65 5b 72 5d 29 29 29 7b 66 6f 72 28 6f 20 69 6e 20 6c 29 61 2e 6f 28 6c 2c 6f 29 26 26 28 61 2e 6d 5b 6f 5d 3d 6c 5b 6f 5d 29 3b 69 66 28 75 29 76 61 72 20 73 3d 75 28 61 29 7d 66 6f 72 28 72 26 26 72 28 74 29 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6e 3d 69 5b 63 5d 2c 61 2e 6f 28 65 2c 6e 29 26 26 65 5b 6e 5d 26 26 65 5b 6e 5d 5b 30 5d 28 29 2c 65 5b 6e 5d 3d 30 3b 72 65 74 75 72 6e 20 61 2e 4f 28 73 29 Data Ascii: 181,o[1](l)}}),"chunk-"+r,r)}else e[r]=0},a.O.j=r=>0===e[r];var r=(r,t)=>{var o,n,[i,l,u]=t,c=0;if(i.some((r=>0!==e[r]))){for(o in l)a.o(l,o)&&(a.m[o]=l[o]);if(u)var s=u(a)}for(r&&r(t);c<i.length;c++)n=i[c],a.o(e,n)&&e[n]&&e[n][0](),e[n]=0;return a.O(s)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50264	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	814	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-86316-1&cid=315527398.1713532348&jid=1870324937&_u=YADAAUAAAAAAACAAI~&z=844830423 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 13:12:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50265	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	669	OUT	GET /v1/envelope?pid=0010b00001rrPUnAAM&src=aps&ver=1.9.0&us_privacy=1YNN HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	367	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 49 via: 1.1 google date: Fri, 19 Apr 2024 13:12:47 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:47 UTC	49	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 75 6e 74 72 79 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"succeeded":false,"error":"Country not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50266	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	669	OUT	GET /v1/envelope?pid=0010b00002cG8kQAAS&src=aps&ver=1.9.0&us_privacy=1YNN HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:47 UTC	367	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 49 via: 1.1 google date: Fri, 19 Apr 2024 13:12:47 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:47 UTC	49	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 75 6e 74 72 79 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"succeeded":false,"error":"Country not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50267	50.16.197.56	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	775	OUT	GET /load/?p=233&g=001&j=d&xl8blockcheck=1 HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="6fe6a4603177c372840da1d3a0d7528b"; ud="eJxrXxzq6XKLQcEsLdUs0cTMwNjQ3DzZ2NzIwsQgJdEwxTjRIMXc1MgiaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UZD%252F4qKUNMZFJcWngo9X2wEAKUQmyA%253D%253D"
2024-04-19 13:12:48 UTC	2640	IN	HTTP/1.1 200 server: nginx date: Fri, 19 Apr 2024 13:12:48 GMT content-type: application/x-javascript;charset=UTF-8 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="6fe6a4603177c372840da1d3a0d7528b"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 17-Aug-2024 01:12:48 GMT; SameSite=None; Secure; set-cookie: udo="gAAAAAQAAAglKLUv%252FWAlB1UgAOb1y0uwVtUDfMHHP4rLPDwjUc%252FUsgF6hT9DM2N7mSFC84Rf8s6VgykHMVIbCdlBN9snkvRRKKlNzy0ZOJEu1wBnJlwFY6wRZSLn%252Bse966fKAK4AsAAi0KtsWTWGQ1TtWjDV7LI2NbuKuvqdAwJHEtsxjk8Q5%252F48G6wMf4rxAIVRukBhokQUG08FAhQKTKBxJcxIEsGIDREHQlw%252FIviA6UHkRF2TAHbkXDAzV%252FTkeFji1xS4JiAe0OgIdD6QPDoMMEeUZBxkq7nGTJkxqhFFZ0eOtUIvBkUnRoWSlg0WSoqYTIaMtiICFMxowCCF8wE5roE2czyHxDlsxZOSkpL4As45AJ4ARzn356nrzgamZ5%252FbCYknL0qcG9X2jgH9b16LuBvQK%252FvZ62d65mtRmC9F6qB%252FLWKmX3wsFYkiU%252BS4GoPsm77duLieiw49VbOX6FoK%252FTr2tJ9WfVHXzqZC77dhGxyHN5t3ve3fIdeq%252Blx0K5qua2nXn%252FY1FzfzBaEpjKqaQGd6D91m%252B6b%252BZw%252BNydqOmukMevbyFFni%252BNOibKul9jbGNSSOYS1ifmWYJohVe3n2u%252FdtM10zgWSvNKZs9VKm3z913cnWFiajCo0jakQFvZKNDmgienVIQG46FCjdDg9O342nXRlzolIqq5TKyBpVRhYONpZ2mnLttw%252FGubhZCLtweAq9C9veRs80GQ5lOIzne8R%252FT5%252F29nfp74b%252FhW0vhzHOxtmwXcvwBn4UY9MXHUxNXeg6Y6FSq1f05Dv6V7zAQq1Id7UaSVF1was%252BTRXyozOV4a3GkbeiMzdcdLIadY31WLXXw5pp%252BaO%252FjbvZZjeMvTzX9I%252FpGCJJFO%252BF%252Byy8xDkSNwKagKaiFG7ktbnxgjcbzMvd3F2QRpvxgnX98jjnpZDlxDmnQIAb4CVeCln4CiuFIdXyzlZGsVa30FZY%252BFE8vzd%252BPT4MKmJLiAzyt8DKnOQPdMHKVy9lejVbnm2%252F4E2trvkE2TMFmohy%252FEnXuB9rJFU%252BrBjnlBPD%252FvXlesFa9j82Yw%252B7%252F1YLmYD8APwDS1%252B6av5ysvLsr7btLpT9BbFBoBWVOBIv2gGaiHZguivWZ14BcqiBIE4TkWBkAglEZEbUHAADEZqxDhFQJOSQwBBiVZtpDtRxIyTIVJ1M8gQaeRuBFFbIMrF8BoQZEdRXQFH1RYxWKCI31yqMEYOZnfBsp9Ey6aiNIBIpgXzI1xHyE8ciW0nMBsQfSOJ%252BjuEZVa3KoIxeLGG9bw7GImI%252BIENJxDwpkRA1jXU%252FYUiVCM6rsQhkjz2e80cudnQKCPsc%252BUa1YgfNqtQijIUKAhcowxxq1xzGcsU5zDnMOYzlCsv1R9KrzkF6VeKOootkOqLv0xKRaU2JfXAhvmb%252B"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 17-Aug-2024 01:12:48 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcEsLdUs0cTMwNjQ3DzZ2NzIwsQgJdEwxTjRIMXc1MgiaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6oiD%252FxUUpaQyLSopPBR%252BvtgMAfy4pxw%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 17-Aug-2024 01:12:48 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close transfer-encoding: chunked
2024-04-19 13:12:48 UTC	327	IN	Data Raw: 31 33 42 0d 0a 76 61 72 20 78 6c 38 69 6d 67 20 3d 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 20 78 6c 38 69 6d 67 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 27 6e 6f 2d 72 65 66 65 72 72 65 72 27 3b 20 78 6c 38 69 6d 67 2e 77 69 64 74 68 3d 27 31 27 3b 20 78 6c 38 69 6d 67 2e 61 6c 74 3d 27 45 78 65 6c 61 74 65 44 61 74 61 27 3b 20 78 6c 38 69 6d 67 2e 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 3b 20 78 6c 38 69 6d 67 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 6e 61 6c 79 74 69 63 73 2e 74 77 69 74 74 65 72 2e 63 6f 6d 2f 69 2f 61 64 73 63 74 3f 70 5f 75 73 65 72 5f 69 64 3d 36 66 65 36 61 34 36 30 33 31 37 37 63 33 37 32 38 34 30 64 61 31 64 33 61 30 64 37 35 32 38 62 26 70 5f Data Ascii: 13Bvar xl8img = document.createElement('img'); xl8img.referrerPolicy='no-referrer'; xl8img.width='1'; xl8img.alt='ExelateData'; xl8img.style='display:none'; xl8img.src='https://analytics.twitter.com/i/adsct?p_user_id=6fe6a4603177c372840da1d3a0d7528b&p_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50268	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	907	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:48 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 361 Connection: close x-amz-rid: R7VGB9H21NNN2GRSJNBP Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:48 UTC	361	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 69 6e 64 65 78 5f 6e 2d 61 64 4d 65 64 69 61 56 31 5f 72 78 5f 6e 2d 61 63 75 69 74 79 61 64 73 5f 63 6e 76 5f 6e 2d 6f 6e 65 74 61 67 5f 70 6d 2d 64 62 35 5f 79 6d 5f 72 62 64 5f 70 70 74 5f 73 6f 76 72 6e 5f 6e 2d 52 69 73 65 5f 6e 2d 4f 75 74 62 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=n-index_n-adMediaV1_rx_n-acuityads_cnv_n-onetag_pm-db5_ym_rbd_ppt_sovrn_n-Rise_n-Outb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50269	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	1088	OUT	GET /v3/pr?exlist=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:48 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 4095 Connection: close x-amz-rid: Y3SGZXCT8M6S4YXJTHE0 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:48 UTC	4095	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 35 36 61 32 33 64 31 30 2d 62 34 39 36 2d 34 31 64 62 2d 39 61 30 39 2d 63 32 31 63 66 30 64 63 31 63 63 39 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="56a23d10-b496-41db-9a09-c21cf0dc1cc9"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50270	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	649	OUT	GET /ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:48 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ENV2587PNM56VEJC4CFA Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50271	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:47 UTC	659	OUT	GET /ecm3?ex=mediagrid.com&id=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:48 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: S1H8MPC6T4SAJ4R2MZCB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50272	52.44.103.61	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	746	OUT	GET /consent/set?ct=skip&ca=1&ccd=1&cds=1&cta=1&c=9217&fp=2647d031a51b7a31cc96fbee0c73c78c&src=LTJS HTTP/1.1 Host: privacy.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c
2024-04-19 13:12:48 UTC	401	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: application/json;charset=utf-8 Content-Length: 302 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.53.188 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Server: Jetty(9.4.38.v20210224)
2024-04-19 13:12:48 UTC	302	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 73 22 3a 5b 5d 2c 22 50 72 6f 66 69 6c 65 22 3a 7b 22 70 69 64 22 3a 22 32 36 34 37 64 30 33 31 61 35 31 62 37 61 33 31 63 63 39 36 66 62 65 65 30 63 37 33 63 37 38 63 22 2c 22 63 6f 6e 73 65 6e 74 22 3a 5b 7b 22 63 6c 69 65 6e 74 69 64 22 3a 39 32 31 37 2c 22 6c 61 73 74 75 70 64 61 74 65 22 3a 31 37 31 33 35 33 32 33 36 38 2c 22 74 79 70 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 61 6e 61 6c 79 74 69 63 73 22 2c 22 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 74 61 72 67 65 74 69 6e 67 22 2c 22 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 64 61 74 61 73 68 61 72 69 6e 67 22 2c 22 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 63 72 6f 73 73 64 65 76 69 Data Ascii: {"cookies":[],"Profile":{"pid":"2647d031a51b7a31cc96fbee0c73c78c","consent":[{"clientid":9217,"lastupdate":1713532368,"types":[{"name":"analytics","consent":true},{"name":"targeting","consent":true},{"name":"datasharing","consent":true},{"name":"crossdevi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50071	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	664	OUT	GET /universal/v1?supply_id=49574e61&gdpr=0&gdpr_consent=&tappx=1 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd
2024-04-19 13:12:48 UTC	103	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50274	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	993	OUT	GET /us?loc=https%3A%2F%2Fsync.kueezrtb.com%2Fapi%2Fcookie%3FpartnerId%3Dkueez-sonobi%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN%26userId%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.kueezrtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJt0; _usd_justjared.com=1df90e2f-8482-4a03-a221-2cb3848e46db
2024-04-19 13:12:48 UTC	431	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:48 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-197 x-xss-protection: 0 server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50275	34.160.169.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	665	OUT	POST /0/a66326aa834b64/5feb9ca8a1b6f849f8dedbf615d41afb5ea3dc HTTP/1.1 Host: baitbaseball.com Connection: keep-alive Content-Length: 285 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:48 UTC	285	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 62 6c 22 3a 74 72 75 65 2c 22 64 69 73 22 3a 31 39 2c 22 64 66 6c 61 67 73 22 3a 38 37 31 33 2c 22 64 74 22 3a 31 35 30 30 38 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 69 64 22 3a 22 41 2d 36 30 35 30 45 44 31 39 32 44 44 33 30 39 33 44 34 39 32 43 33 33 30 34 2d 35 22 2c 22 6a 73 76 22 3a 22 32 2e 34 37 2e 30 22 2c 22 75 74 63 6f 22 3a 37 32 30 30 2c 22 76 65 72 62 22 3a 31 2c 22 73 73 22 3a 22 68 74 74 70 73 3a 2f 2f 62 61 69 74 62 61 73 65 62 61 6c 6c 2e 63 6f 6d 2f 76 32 6a 61 78 65 75 58 5f 48 6b 33 47 4b 4d 54 70 71 69 42 71 79 30 4d 73 78 64 5f 4e 78 45 6f 76 44 31 4a 39 73 57 58 6e 4f 63 5a 70 6c 74 51 52 4f 52 34 44 49 77 55 22 7d 2c 22 62 22 3a 5b 7b Data Ascii: {"c":{"dbl":true,"dis":19,"dflags":8713,"dt":15008,"uri":"https://www.justjared.com/","pid":"A-6050ED192DD3093D492C3304-5","jsv":"2.47.0","utco":7200,"verb":1,"ss":"https://baitbaseball.com/v2jaxeuX_Hk3GKMTpqiBqy0Msxd_NxEovD1J9sWXnOcZpltQROR4DIwU"},"b":[{
2024-04-19 13:12:48 UTC	803	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Expires: Fri, 19 Apr 2024 13:12:47 GMT Strict-Transport-Security: max-age=15724800; preload Timing-Allow-Origin: * Vary: Accept-Encoding, Origin X-Buildname: hoothoot X-Buildnumber: 1205290244 X-Datacenter: gce-us-east1 X-Hostname: fen-hoothoot-us-east1-f00b Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Length: 295 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:48 UTC	295	IN	Data Raw: 7b 22 6e 65 77 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 49 44 22 3a 22 35 2d 30 31 34 36 63 31 36 39 63 65 38 34 66 34 63 64 66 32 66 31 63 39 32 38 63 31 63 33 39 61 63 39 2d 36 37 36 33 36 35 32 64 37 35 37 33 32 64 36 35 36 31 37 33 37 34 33 31 2d 30 22 2c 22 6e 6f 77 22 3a 31 37 31 33 35 33 32 33 36 38 2c 22 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 30 75 38 34 63 31 38 32 62 34 66 65 34 65 31 31 65 65 38 62 33 33 37 61 32 62 32 33 39 66 36 63 62 61 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 76 69 65 77 22 7d 5d 2c 22 6c 6f 63 61 6c 44 61 74 61 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 53 74 61 74 75 73 22 3a 7b 22 6b 6e 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 72 65 67 69 73 74 65 72 65 64 22 3a 66 61 6c 73 65 2c 22 73 75 62 73 63 72 69 Data Ascii: {"newSession":true,"sessionID":"5-0146c169ce84f4cdf2f1c928c1c39ac9-6763652d75732d6561737431-0","now":1713532368,"ids":[{"id":"0u84c182b4fe4e11ee8b337a2b239f6cba","type":"pageview"}],"localData":"","visitorStatus":{"known":false,"registered":false,"subscri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50278	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	1301	OUT	GET /sync?nid=286 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0
2024-04-19 13:12:48 UTC	222	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:48 GMT Location: https://sync.go.sonobi.com/us.gif?nw=st&nuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ Content-Length: 99 Connection: Close
2024-04-19 13:12:48 UTC	99	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 2e 73 6f 6e 6f 62 69 2e 63 6f 6d 2f 75 73 2e 67 69 66 3f 6e 77 3d 73 74 26 61 6d 70 3b 6e 75 69 64 3d 56 30 73 67 67 2d 5a 45 56 61 39 4f 75 4a 55 32 41 4f 49 65 56 56 47 31 4f 54 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.go.sonobi.com/us.gif?nw=st&nuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50280	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	828	OUT	GET /bh/rtset?pid=562615&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11592%26uid%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1
2024-04-19 13:12:48 UTC	1239	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:48 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev_part=3-1qw8\|7bq.0.1\|8i8.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 19-Apr-2025 13:12:48 GMT;SameSite=None;Partitioned Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:48 GMT;Max-Age=0;SameSite=None Set-Cookie: pb_rtb_ev_part=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:48 GMT;Max-Age=0;SameSite=None Location: https://cs-tam.yellowblue.io/cs?aid=11592&uid=part_d3pYBt4hoB3q&ev=1&us_privacy=[US_PRIVACY]&pid=562615&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50282	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	768	OUT	GET /getuid?redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D28%26type%3Diframe%26id%3D%24UID%26auxuid%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:48 UTC	689	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Length: 0 Connection: close Location: https://ssp.api.tappx.com/cs/usync?idmn=28&type=iframe&id=3059573620546902553906&auxuid= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:48 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:48 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50281	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	827	OUT	GET /getuid?https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D32%26type%3Diframe%26id%3D%24UID%26auxuid%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:48 UTC	1448	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ssp.api.tappx.com/cs/usync?idmn=32&type=iframe&id=187107314970053313&auxuid= AN-X-Request-Uuid: b13ad62d-f2be-4ca2-9240-0be1554ab4b7 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50080	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	694	OUT	GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E&gdpr=0 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3565339623115671000V10
2024-04-19 13:12:48 UTC	438	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://s.amazon-adsystem.com/ecm3?ex=media.net&id=3565339623115671000V10 p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" x-mnet-hl2: E Expires: Fri, 19 Apr 2024 13:12:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 13:12:48 GMT Connection: close
2024-04-19 13:12:48 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50075	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	734	OUT	GET /dsp/google/cookiematch/dv?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:49 UTC	526	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SWhIWUFQWkhneUR0TFk0clRWbXFVWnN1&gdpr=0 Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50285	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	696	OUT	GET /universal/v1?supply_id=5926d422&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd
2024-04-19 13:12:49 UTC	368	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Length: 0 Connection: close Location: https://cs.yellowblue.io/cs?aid=11587&uid=7456771a-49ee-4e2a-b013-668de61e15dd&gdpr=0 Set-Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd; Max-Age=2592000; Expires=Sun, 19 May 2024 13:12:48 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50291	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	948	OUT	GET /us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D115667%26uid%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJt0; _usd_justjared.com=1df90e2f-8482-4a03-a221-2cb3848e46db
2024-04-19 13:12:49 UTC	678	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:48 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-197 x-xss-protection: 0 location: https://cs-tam.yellowblue.io/cs?aid=115667&uid=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb set-cookie: __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; expires=Sun, 19 May 2024 13:12:48 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50277	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	661	OUT	GET /track/cmf/generic?ttd_pid=sonobi&ttd_tpi=1&ttd_puid=91e92b73fd&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:48 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:49 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50290	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	884	OUT	GET /visitormatch?p=547259,530912,534301,548607,543793,561117&rurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%25%25VGUID%25%25%26ex%3DPulsepoint HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1
2024-04-19 13:12:49 UTC	803	IN	HTTP/1.1 200 OK Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Content-Type: text/html;charset=iso-8859-1 Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:48 GMT;Max-Age=0;SameSite=None Set-Cookie: pb_rtb_ev_part=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:48 GMT;Max-Age=0;SameSite=None Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000
2024-04-19 13:12:49 UTC	27	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50276	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	810	OUT	GET /check_uuid/https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11603%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BUSER_CONSENT%5D%26uid%3D$%7BBSW_UUID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:49 UTC	310	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://cs-tam.yellowblue.io/cs?aid=11603&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&uid=58637582-4b7e-42fe-b59a-889f13122ef7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50081	18.67.76.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	678	OUT	GET /c/?adExInit=aps&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SCM=5a11a496f1; SCMaps=5a11a496f1
2024-04-19 13:12:49 UTC	637	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 13:12:49 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=5a11a496f1; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMaps=5a11a496f1; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://s.amazon-adsystem.com/ecm3?ex=smaato.com&id=5a11a496f1 X-Cache: Miss from cloudfront Via: 1.1 c3af1bb2028605770032345c7c19b7aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: yJzGB8BTBZQa1gpftCyoD3bUoVYnsjwmfqbrIfJ8s25YplVDH9vg_g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50046	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	664	OUT	GET /amazon/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dsimpli.fi%26id%3D?gdpr=0 HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=36A9D4BEDC8C49329C57B49CB04880F6
2024-04-19 13:12:49 UTC	646	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://s.amazon-adsystem.com/ecm3?id=36A9D4BEDC8C49329C57B49CB04880F6&ex=simpli.fi&status=ok Expires: Thu, 18 Apr 2024 13:12:49 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-19 13:12:49 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50083	35.208.249.213	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	693	OUT	GET /ju/cs/amazon?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbaidu.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca737cf7b3c2itoor00lv6oxcmr
2024-04-19 13:12:49 UTC	441	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://s.amazon-adsystem.com/ecm3?ex=baidu.com&id=22210ca737cf7b3c2itoor00lv6oxcmr Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:49 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50076	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	785	OUT	GET /sync-iframe?redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drise.com%26id%3D%7BpartnerId%7D&gdpr=0 HTTP/1.1 Host: cs-tam.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:49 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: cs-tam.yellowblue.io set-cookie: wrvUserID=P2oHoy7zC; Path=/; Domain=.yellowblue.io; Expires=Sun, 19 May 2024 13:12:49 UTC; Max-Age=2592000; HttpOnly; SameSite=None; Secure x-envoy-upstream-service-time: 2 server: istio-envoy
2024-04-19 13:12:49 UTC	3266	IN	Data Raw: 63 62 62 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2e 73 68 62 2d 73 79 6e 63 2e 63 6f 6d 2f 63 33 35 39 33 66 65 34 2d 66 64 65 66 2d 34 61 39 32 2d 39 61 31 61 2d 39 37 32 36 64 31 64 64 64 66 33 30 2e 67 69 66 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 5b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 5d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2d 74 61 6d 2e 79 65 6c 6c 6f 77 62 6c 75 65 2e 69 6f 25 32 46 63 73 25 33 46 61 69 64 25 33 44 31 31 36 30 38 25 32 36 69 64 25 33 44 25 35 42 55 49 44 25 35 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f Data Ascii: cbb<html><head><title></title></head><body><img src="https://us.shb-sync.com/c3593fe4-fdef-4a92-9a1a-9726d1dddf30.gif?gdpr=0&gdpr_consent=[GDPR_CONSENT]&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11608%26id%3D%5BUID%5D" style="display:none;"/
2024-04-19 13:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50279	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	657	OUT	GET /cm-notify?pi=sonobi HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322; ts=1713532366
2024-04-19 13:12:49 UTC	397	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:49 GMT vary: Accept-Encoding location: https://sync.go.sonobi.com/us.gif?nw=rh&nuid=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=sonobi cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 19 Apr 2024 13:12:49 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50294	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	753	OUT	GET /server_match?partner_id=1934&r=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D253%26type%3Diframe%26id%3D%7BPUB_USER_ID%7D%26auxuid%3D HTTP/1.1 Host: ad.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2cd32817-436f-4a0b-8d96-e539ff9a7ea5; tuuid_lu=1713532355
2024-04-19 13:12:49 UTC	232	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2024-04-19 13:12:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50283	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:48 UTC	700	OUT	GET /sync?ssp=sonobi&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:49 UTC	399	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=sonobi&bsw_param=58637582-4b7e-42fe-b59a-889f13122ef7&google_hm=NTg2Mzc1ODItNGI3ZS00MmZlLWI1OWEtODg5ZjEzMTIyZWY3&gdpr_consent=&gdpr=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50289	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	649	OUT	GET /s/441/9.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	1433	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#1; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:49 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/441/441/9/1.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:48 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50300	216.22.16.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	752	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=1845939505169848484
2024-04-19 13:12:49 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 19 Apr 2024 13:12:48 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=1845939505169848484 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50302	169.197.150.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	766	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_9ac5c5704fa24c0696323; CDIPARTNERS=%7B%221%22%3A%2220240419%22%7D
2024-04-19 13:12:49 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_9ac5c5704fa24c0696323 set-cookie: CDIUSER=di_9ac5c5704fa24c0696323; Max-Age=47260800; SameSite=None; Expires=Sat, 18 Oct 2025 13:12:49 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240419%22%2C%22142%22%3A%2220240419%22%7D; Max-Age=47260800; SameSite=None; Expires=Sat, 18 Oct 2025 13:12:49 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Fri, 19 Apr 2024 13:12:48 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50303	34.239.23.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	612	OUT	GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 13:12:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50287	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	628	OUT	GET /dmp/pixelSync?nid=140&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	440	IN	HTTP/1.1 302 Found set-cookie: ssi=43832ec9-23ab-4e6d-8de1-1752b7609838#1713532369099; Domain=.sitescout.com; Expires=Sat, 19-Apr-2025 13:12:49 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=140&gdpr=0&gdpr_consent= Content-Length: 0 date: Fri, 19 Apr 2024 13:12:48 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50296	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	723	OUT	GET /AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent= HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:47 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50305	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	819	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:49 UTC	1427	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=187107314970053313 AN-X-Request-Uuid: 49a55d8e-ab15-4b80-8b53-ad67ee140f00 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:49 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:49 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:49 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50304	54.144.51.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	833	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119
2024-04-19 13:12:49 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:49 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e Set-Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119; Path=/; Domain=ipredictive.com; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 9add6cca-7f36-49f4-8b95-7ac53aace700 Content-Length: 108 Connection: Close
2024-04-19 13:12:49 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 64 31 64 65 35 61 38 62 2d 39 65 30 31 2d 34 62 36 31 2d 62 65 34 31 2d 63 61 33 37 66 38 65 35 65 36 32 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50284	3.228.82.154	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	852	OUT	GET /assets/imp/logging?reqId=b04b991a-07d0-4d85-8276-27bd9407659f&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A2%2C%22ren%22%3A2%2C%22fc%22%3A0%2C%22ctx%22%3A%5B2%5D%2C%22jsv%22%3A%223.88.29%22%2C%22pbv%22%3A%220.0.0%22%7D&ns=1280 HTTP/1.1 Host: va-lb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:49 UTC	374	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Set-Cookie: cs=true; Domain=.gumgum.com; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Path=/; Secure; SameSite=None Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-19 13:12:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50306	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	907	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:49 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 350 Connection: close x-amz-rid: ASRQ3NEAVMF5G858HR1N Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:49 UTC	350	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 69 6e 64 65 78 5f 6e 2d 61 64 4d 65 64 69 61 56 31 5f 6e 2d 6f 6e 65 74 61 67 5f 70 6d 2d 64 62 35 5f 79 6d 5f 72 62 64 5f 70 70 74 5f 72 78 5f 6e 2d 61 63 75 69 74 79 61 64 73 5f 63 6e 76 5f 73 6f 76 72 6e 5f 6e 2d 52 69 73 65 26 66 76 3d 31 2e 30 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=n-index_n-adMediaV1_n-onetag_pm-db5_ym_rbd_ppt_rx_n-acuityads_cnv_sovrn_n-Rise&fv=1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50288	216.200.232.249	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	680	OUT	GET /sync/img?cs_wd_sy=1&dp=43&redir=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dif%26nuid%3D[MM_UUID] HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	622	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x7 config_version:"2517" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=58876622-6dd1-4d00-bd2b-ad74dd749760; domain=.mathtag.com; path=/; expires=Sat, 17-May-2025 13:12:49 GMT; SameSite=None; Secure location: https://sync.go.sonobi.com/us.gif?nw=if&nuid=58876622-6dd1-4d00-bd2b-ad74dd749760 Expires: Fri, 19 Apr 2024 13:12:48 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50314	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	888	OUT	GET /pixel?google_nid=index&google_cm&google_hm=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:49 UTC	714	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=0&gpp=&gpp_sid=&google_gid=CAESELL55Lb_r68ETm1PZvTsUw8&google_cver=1 Date: Fri, 19 Apr 2024 13:12:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 365 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:49 UTC	365	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 72 65 64 69 72 3f 73 3d 31 38 34 30 32 33 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=0&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50307	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	1048	OUT	GET /v3/pr?exlist=n-index_n-adMediaV1_rx_n-acuityads_cnv_n-onetag_pm-db5_ym_rbd_ppt_sovrn_n-Rise_n-Outbrain&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:49 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 3470 Connection: close x-amz-rid: AZKFY9WSHEE4CTKRQAP6 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:49 UTC	3470	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 66 37 64 65 34 35 39 36 2d 34 61 64 36 2d 34 62 37 62 2d 38 38 38 65 2d 35 61 33 65 62 37 31 62 39 61 38 64 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="f7de4596-4ad6-4b7b-888e-5a3eb71b9a8d"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50311	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	830	OUT	GET /bh/rtset?do=add&pid=560606&ev=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb&daaqp=1&rurl=https%3A%2F%2Fsync.go.sonobi.com%2Fus.gif%3Fnw%3Dpp%26nuid%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1
2024-04-19 13:12:49 UTC	1308	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:49 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev_part=3-1qw8\|7bq.0.1\|7LJ.0.8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb\|8i8.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 19-Apr-2025 13:12:49 GMT;SameSite=None;Partitioned Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:49 GMT;Max-Age=0;SameSite=None Set-Cookie: pb_rtb_ev_part=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:49 GMT;Max-Age=0;SameSite=None Location: https://cm.g.doubleclick.net/pixel?google_nid=contextweb&google_cm&google_sc&google_hm=QW9LbndBcUpuYUZmUkFfdGdRYXJoQy1ZT1ZQM3RmcVY&gdpr=&gdpr_consent= Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50312	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	769	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=0&gdpr_consent=&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:49 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: D6TFHWDQE7EC3JJK3SPS Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50316	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	696	OUT	GET /ecm3?id=IhHYAPZHgyDtLY4rTVmqUZsu&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:49 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9NE8Q7YJ1WVQ2FBFVTST Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50297	96.46.186.57	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	690	OUT	GET /match?bidder_id=43929&callback_url=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D724%26type%3Diframe%26id%3D%24%7BUSER_ID%7D%26auxuid%3D HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	926	IN	HTTP/1.1 302 Found location: /match?bidder_id=43929&callback_url=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D724%26type%3Diframe%26id%3D%24%7BUSER_ID%7D%26auxuid%3D&crf=1&rts=4947430377108709478 cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=2d9d0769-dca8-536e-84e5-cf7ce2c7a2ad; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZiJt0QAB-9C5lWSbK-bh2P2zsM_RIvC-v_fZxg==; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ss=1; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50310	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	686	OUT	GET /usersync/amazon_tam/?cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Doutbrain.com%26id%3D__ZUID__&gdpr=0 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ew75cZqQhtpEcO-Pru61
2024-04-19 13:12:49 UTC	603	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 112 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://s.amazon-adsystem.com/ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ew75cZqQhtpEcO-Pru61; Path=/; Domain=zemanta.com; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 13:12:49 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 6f 75 74 62 72 61 69 6e 2e 63 6f 6d 26 61 6d 70 3b 69 64 3d 45 77 37 35 63 5a 71 51 68 74 70 45 63 4f 2d 50 72 75 36 31 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://s.amazon-adsystem.com/ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50313	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	607	OUT	GET /track/cmf/casale?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:49 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50315	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	683	OUT	GET /usersync/index/?us_privacy=&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ew75cZqQhtpEcO-Pru61
2024-04-19 13:12:49 UTC	623	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 136 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=Ew75cZqQhtpEcO-Pru61&puid=&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ew75cZqQhtpEcO-Pru61; Path=/; Domain=zemanta.com; Expires=Sat, 19 Apr 2025 13:12:49 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 13:12:49 UTC	136	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 45 77 37 35 63 5a 71 51 68 74 70 45 63 4f 2d 50 72 75 36 31 26 61 6d 70 3b 70 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=Ew75cZqQhtpEcO-Pru61&puid=&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50301	34.202.33.5	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	982	OUT	GET /match/gg?ex_uid=u_bd73a985-3ef7-4416-a679-3a9309181613 HTTP/1.1 Host: match.justpremium.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jpxumaster=r-eeda9212-3054-4d07-9616-b410e2cec98d-41046-309475319; jpxsession=r-4f7db2bf-8c50-41b8-b139-9241c0a57092-41046-309547013; jpxuuid=r-e9b2b064-4800-43ad-9935-294675a8d629-41046-309581719; 83481_313785=0_0_0; 83481_313787=1_8_0; 83481_313788=1_8_0; 83481_313789=1_8_0; 83481_313795=0_0_0; 83481_453288=0_0_0; 83481_454035=1_8_0
2024-04-19 13:12:49 UTC	242	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: jpxumatched=gg; Path=/; Domain=justpremium.com; Expires=Sat, 20 Apr 2024 13:12:49 GMT; Secure; SameSite=None
2024-04-19 13:12:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50293	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	684	OUT	GET /usersync2/rmphb?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	872	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:44 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-d337340c-8ca1-47a0-bf78-1405e94c9750-005%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D%22%7D; path=/; expires=Sat, 19 Apr 2025 13:12:44 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D&cb=1713532364186 etag: RXd337340c8ca147a0bf781405e94c9750005 connection: close
2024-04-19 13:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50309	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:49 UTC	660	OUT	GET /usersync2/rmpssp?sub=amazon&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&gdpr=0 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:49 UTC	842	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:48 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sat, 19 Apr 2025 13:12:48 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=amazon&zcc=1&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&cb=1713532368939 etag: RXdd40f750a0144531a2f18878dd503e55005 connection: close
2024-04-19 13:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50320	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	815	OUT	GET /usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:50 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 876d26057a3f0d1a-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:50 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:50 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7XNAOZaqSBDh5qWCVXcVKl9as1RWhA0KBMvTWYykAAWxYWh0JegTlISZwOQucC8lfyrlVur%2FoP4NhQ8jjIz9prvBlKDn9TOITCCiIsNnCwBQrBNkey8%2BSIjnz6W7HnVUPHMAuU1I%2FJmInQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:50 UTC	377	IN	Data Raw: 36 64 31 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 63 61 73 61 6c 65 2f 5a 69 4a 74 79 73 41 6f 49 70 30 41 41 43 54 7a 41 73 42 65 4f 41 41 41 43 68 67 41 41 41 41 42 3f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c Data Ascii: 6d1<html><head><title></title></head><body><img src="https://pr-bh.ybp.yahoo.com/sync/casale/ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB?gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><
2024-04-19 13:12:50 UTC	1369	IN	Data Raw: 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 69 65 3f 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 34 30 2f 73 79 6e 63 3f 5f 6f 72 69 67 69 Data Ascii: gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.prod.bidr.io/cookie-sync/ie?gdpr=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origi
2024-04-19 13:12:50 UTC	6	IN	Data Raw: 74 6d 6c 3e 0d 0a Data Ascii: tml>
2024-04-19 13:12:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50319	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	901	OUT	GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:50 UTC	271	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:50 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50321	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	854	OUT	GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	287	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0
2024-04-19 13:12:51 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50356	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	664	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=61723701&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:49 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50340	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	711	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	895	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Length: 0 Connection: close x-amz-rid: 1RRQPK8M7XA82QGHGTM5 Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:50 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:50 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=ZUN4s6npS8GwWOHs-pEJnQ&rk=usync-na&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50354	34.160.169.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	662	OUT	POST /3eb114c22d8c7b76a45f3c143c6f2d1533b718aa7a143672d8e0 HTTP/1.1 Host: baitbaseball.com Connection: keep-alive Content-Length: 272 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:50 UTC	272	OUT	Data Raw: 7b 22 70 69 64 22 3a 22 41 2d 36 30 35 30 45 44 31 39 32 44 44 33 30 39 33 44 34 39 32 43 33 33 30 34 2d 35 22 2c 22 70 76 22 3a 22 30 75 38 34 63 31 38 32 62 34 66 65 34 65 31 31 65 65 38 62 33 33 37 61 32 62 32 33 39 66 36 63 62 61 22 2c 22 74 70 22 3a 7b 22 6e 70 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 68 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 70 70 22 3a 22 2f 22 7d 2c 22 6a 73 76 22 3a 22 32 2e 34 37 2e 30 22 2c 22 63 22 3a 7b 22 64 62 6c 22 3a 74 72 75 65 2c 22 64 69 73 22 3a 31 39 2c 22 64 66 6c 61 67 73 22 3a 38 37 31 33 2c 22 64 74 22 3a 31 35 30 30 38 7d 2c 22 73 69 64 22 3a 22 35 2d 30 31 34 36 63 31 36 39 63 65 38 34 66 34 63 64 66 32 66 31 63 39 32 38 63 31 63 33 39 61 63 39 2d 36 37 36 33 36 35 32 64 37 35 37 Data Ascii: {"pid":"A-6050ED192DD3093D492C3304-5","pv":"0u84c182b4fe4e11ee8b337a2b239f6cba","tp":{"np":"default","ph":"www.justjared.com","pp":"/"},"jsv":"2.47.0","c":{"dbl":true,"dis":19,"dflags":8713,"dt":15008},"sid":"5-0146c169ce84f4cdf2f1c928c1c39ac9-6763652d757
2024-04-19 13:12:51 UTC	801	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Expires: Fri, 19 Apr 2024 13:12:49 GMT Strict-Transport-Security: max-age=15724800; preload Timing-Allow-Origin: * Vary: Accept-Encoding, Origin X-Buildname: hoothoot X-Buildnumber: 1205290244 X-Datacenter: gce-us-east1 X-Hostname: fen-hoothoot-us-east1-f00b Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 3 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	3	IN	Data Raw: 7b 7d 0a Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50343	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	849	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:51 UTC	690	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&put=CAESEAtdNfDPc36nmraKAXnmblY&google_cver=1 Date: Fri, 19 Apr 2024 13:12:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 337 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	337	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50362	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	708	OUT	GET /cs?aid=11592&uid=part_d3pYBt4hoB3q&ev=1&us_privacy=[US_PRIVACY]&pid=562615&gdpr_consent=&gdpr=0 HTTP/1.1 Host: cs-tam.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:51 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://cs-tam.yellowblue.io/ x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50361	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	658	OUT	GET /ecm3?ex=tappx.com&id=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: X5JQAZ29S31KQDD33KAD Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50363	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	706	OUT	GET /cs?aid=11603&gdpr=[GDPR]&gdpr_consent=[USER_CONSENT]&uid=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1 Host: cs-tam.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:51 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://cs-tam.yellowblue.io/ x-envoy-upstream-service-time: 1 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50357	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	667	OUT	GET /cs?aid=115667&uid=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb HTTP/1.1 Host: cs-tam.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:51 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://cs-tam.yellowblue.io/ x-envoy-upstream-service-time: 1 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50352	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	622	OUT	GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:51 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50327	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	801	OUT	GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gdpr=0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:51 UTC	1104	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZiJtysAoIp0AACTzAsBeOAAA CF-Ray: 876d2606bb3b7b93-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:51 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oap%2BbHZcmSM9y1gEdhTnscmtnpTFRcwqftcm7uuJeiVO0uWr60MXZD3azMP%2BPjFykNDVeJCMhd2QBm24%2BYctlfTn7wit5bHIShXcpSEC%2BUgwivgFiWYWzU%2BEoQeBQTf6%2FQYuhz31QXwVhA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50339	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	722	OUT	GET /crum?cm_dsp_id=17&external_user_id=Ew75cZqQhtpEcO-Pru61&puid=&gdpr=0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:51 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d2606bc7907e6-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:51 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BOl3acuF8ZOijsfq%2F6%2FC921VEa8flE2t2a8oPCb9XQ2d1tZAuCMtIs%2FIONu1WQ6Hv0AUHalbDXuhcgk0cPHaooIzTUiGVmPWLlNeBLftLDX%2FfGQfV5GJ1Y93ZeCcE6%2FDuPAFXaXWB%2BIA0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50364	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	1037	OUT	GET /v3/pr?exlist=n-index_n-adMediaV1_n-onetag_pm-db5_ym_rbd_ppt_rx_n-acuityads_cnv_sovrn_n-Rise&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-index_n-adMediaV1_rx_n-acuityads_n-MediaNet_cnv_n-smaato_n-onetag_pm-db5_n-simpli.fi_ym_rbd_ppt_n-baidu_sovrn_n-Rise_n-Outbrain Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 3299 Connection: close x-amz-rid: AJ9TGVTYZVZHJVTY6A40 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	3299	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 32 30 64 37 61 34 35 61 2d 36 39 33 66 2d 34 31 33 31 2d 61 32 62 33 2d 63 63 64 32 64 32 62 37 34 62 65 38 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="20d7a45a-693f-4131-a2b3-ccd2d2b74be8"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50323	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	730	OUT	GET /usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	166	IN	HTTP/1.1 204 No Content cache-control: no-store strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50322	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	659	OUT	GET /match/?int_id=113&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&gdpr=0 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	277	IN	HTTP/1.1 204 No Content p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50344	34.96.71.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	652	OUT	GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=0&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	688	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.casalemedia.com Content-Type: text/html; charset=utf-8 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1729343571&external_user_id=ddb37c3d-7862-43a9-8061-ddaca97c3bfa Set-Cookie: tuuid=ddb37c3d-7862-43a9-8061-ddaca97c3bfa; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713532371\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 157 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	157	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 32 39 33 34 33 35 37 31 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 64 64 62 33 37 63 33 64 2d 37 38 36 32 2d 34 33 61 39 2d 38 30 36 31 2d 64 64 61 63 61 39 37 63 33 62 66 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1729343571&external_user_id=ddb37c3d-7862-43a9-8061-ddaca97c3bfa">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50324	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	744	OUT	GET /sync/?ssp=1601&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadmedia.com%26id%3D%5BUID%5D HTTP/1.1 Host: pixel.s3xified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	308	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: admRtbUidCkey34334Ssp245=b775784632323f34fcd70d90833d7507; Path=/; Expires=Mon, 17-Apr-34 13:12:51 GMT; domain=.s3xified.com; Secure; SameSite=None
2024-04-19 13:12:51 UTC	1414	IN	Data Raw: 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 0d 0a 64 61 0d 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 61 64 6d 65 64 69 61 2e 63 6f 6d 26 69 64 3d 62 37 37 35 37 38 34 36 33 32 33 32 33 66 33 34 66 63 64 37 30 64 39 30 38 33 33 64 37 35 30 37 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e Data Ascii: 29<!DOCTYPE html><html><head></head><body>da<iframe width="0" height="0" scrolling="no" frameborder="0" src="https://s.amazon-adsystem.com/ecm3?ex=admedia.com&id=b775784632323f34fcd70d90833d7507" style="border: 0px; visibility: hidden; display: non

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50330	54.211.215.248	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	745	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZiJtysAoIp0AACTzAsBeOAAA%262584&gpdr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a
2024-04-19 13:12:51 UTC	623	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Location: https://d.turn.com/r/dd/id/L21rdC8xOTcxL2NpZC8xNzQ5ODczMjc1L3QvMg/url/https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=$!%7BTURN_UUID%7D Set-Cookie: _li_ss=CggKBgjSARDcFw; Max-Age=2592000; Expires=Sun, 19 May 2024 13:12:51 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a; Max-Age=63072000; Expires=Sun, 19 Apr 2026 13:12:51 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50326	54.208.231.58	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	747	OUT	GET /tamptsync?callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dym.com%26id%3D%24UID&gdpr=0 HTTP/1.1 Host: sync-amz.ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	73	IN	HTTP/1.1 204 Date: Fri, 19 Apr 2024 13:12:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50345	8.2.110.134	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	653	OUT	GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.krushmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	546	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Set-Cookie: krm_usr=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; path=/; domain=.krushmedia.com; expires=Fri, 03 May 2024 13:12:51 GMT;SameSite=None;Secure Set-Cookie: krm_r=572; path=/; domain=.krushmedia.com; expires=Fri, 03 May 2024 13:12:51 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: http://ce.lijit.com/merge?pid=102&3pid=ba8f4e41-72ae-5bc7-8225-d78d77656ddb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50328	52.5.14.134	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	696	OUT	GET /ping_match.gif?ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_&gdpr=0 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	654	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 19 Apr 2024 13:12:50 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_&gdpr=0 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0a00da13cf65eb038@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=SrCpyrdV1RXO2T5; Domain=.w55c.net; Expires=Mon, 19 May 2025 23:12:51 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50337	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	792	OUT	GET /ps/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	652	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568798270310%3As1%3D1713532371050%3Ats%3D1713532371050; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP002 location: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= content-length: 0 date: Fri, 19 Apr 2024 13:12:50 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50349	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	792	OUT	GET /ps/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	652	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212567986847654%3As1%3D1713532371050%3Ats%3D1713532371050; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP016 location: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= content-length: 0 date: Fri, 19 Apr 2024 13:12:50 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50346	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	632	OUT	GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1 Host: data.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:51 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50348	34.198.78.192	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	717	OUT	GET /pixel.gif?ch=185&cm=IhHYAPZHgyDtLY4rTVmqUZsu&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	930	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://ce.lijit.com/merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 set-cookie: cb=ZiJt0-EedLilJRkb8yqXAxW4; Max-Age=63027504; Expires=Sun, 19 Apr 2026 00:51:15 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"185","t":"2024-04-19 13:12:51"}]; Max-Age=63027504; Expires=Sun, 19 Apr 2026 00:51:15 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50360	52.95.115.255	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	718	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8X6D20P9X6FW3QA4J425 Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:51 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:51 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50359	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:50 UTC	557	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	379	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://www.justjared.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:50 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:51 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 7a 78 51 67 67 64 73 45 49 48 55 54 7a 4c 6d 42 51 30 54 71 74 77 3d 3d 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"lb":"zxQggdsEIHUTzLmBQ0Tqtw=="}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50358	82.145.213.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	612	OUT	GET /pub/sync?pubid=pub6192414557248&gdpr=0&consent=&us_privacy={{US_PRIVACY}} HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	803	IN	HTTP/1.1 302 Found Server: Tengine Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 172 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ssp.api.tappx.com/cs/usync?consent=&gdpr=0&id=OPUf67e9fe0c71146baa5554ff263871c94&idmn=1135&us_privacy=%7B%7BUS_PRIVACY%7D%7D Pragma: no-cache Set-Cookie: UID=OPUf67e9fe0c71146baa5554ff263871c94; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-19 13:12:51 UTC	172	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 73 70 2e 61 70 69 2e 74 61 70 70 78 2e 63 6f 6d 2f 63 73 2f 75 73 79 6e 63 3f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 69 64 3d 4f 50 55 66 36 37 65 39 66 65 30 63 37 31 31 34 36 62 61 61 35 35 35 34 66 66 32 36 33 38 37 31 63 39 34 26 61 6d 70 3b 69 64 6d 6e 3d 31 31 33 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 37 42 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 44 25 37 44 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ssp.api.tappx.com/cs/usync?consent=&gdpr=0&id=OPUf67e9fe0c71146baa5554ff263871c94&idmn=1135&us_privacy=%7B%7BUS_PRIVACY%7D%7D">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50366	35.214.251.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	698	OUT	GET /?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11571%26id%3D%7Bdevice_id%7D HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	406	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=db936981-528a-4ea5-a990-5f76796d1680; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Fri, 19-Jul-2024 13:12:51 GMT; SameSite=None location: https://cs-tam.yellowblue.io/cs?aid=11571&id=db936981-528a-4ea5-a990-5f76796d1680&gdpr_consent=null&gdpr=0 content-length: 0 date: Fri, 19 Apr 2024 13:12:51 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50069	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	778	OUT	GET /cs/usync?idmn=50&type=iframe&id=1045438816811072924&auxuid= HTTP/1.1 Host: ssp.api.tappx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362
2024-04-19 13:12:51 UTC	390	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * access-control-allow-credentials: true set-cookie: TXCSDMN_50=1045438816811072924; expires=Sun, 19-May-2024 13:12:51 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50368	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	623	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	129	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 30 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 33 36 39 2c 22 70 64 22 3a 22 22 7d 7d Data Ascii: {"name":"id5Id","storage":{"expires":90,"name":"id5id","type":"html5","refreshInSeconds":28800},"params":{"partner":369,"pd":""}}
2024-04-19 13:12:51 UTC	419	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://www.justjared.com vary: Origin access-control-allow-credentials: true content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:50 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:51 UTC	141	IN	Data Raw: 38 37 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 33 36 39 2e 6a 73 6f 6e 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a Data Ascii: 87{"fetchCall":{"url":"https://id5-sync.com/g/v2/369.json"},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50370	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	733	OUT	GET /pixel?google_nid=lijit_dbm&google_hm=SWhIWUFQWkhneUR0TFk0clRWbXFVWnN1&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:51 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50376	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	647	OUT	GET /v1/envelope?pid=0010b00001rrPUnAAM&gdpr=0&src=pbjs&ver=8.38.0&coppa=0 HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	367	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 49 via: 1.1 google date: Fri, 19 Apr 2024 13:12:51 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	49	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 75 6e 74 72 79 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"succeeded":false,"error":"Country not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50374	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	779	OUT	GET /pixel?google_nid=rubicon&google_hm=NDEwMjllODQzYjk1NTgzNTE3YjE0NjU5MjgxZjYxNzJiMGYwMWNhOA&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:51 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50372	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	661	OUT	GET /ecm3?id=36A9D4BEDC8C49329C57B49CB04880F6&ex=simpli.fi&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: THFWBC76JDJER7EB4KMW Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50371	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	641	OUT	GET /ecm3?ex=media.net&id=3565339623115671000V10 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: W7V6TZYE0QZSVNP81MQ0 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50373	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	630	OUT	GET /ecm3?ex=smaato.com&id=5a11a496f1 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WXZB6DKFC52VJ3WRADPM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50375	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	924	OUT	GET /cchain/0?gdpr=0&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
2024-04-19 13:12:51 UTC	261	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2356 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:50 GMT server: envoy x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close
2024-04-19 13:12:51 UTC	2356	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 61 36 36 32 61 65 66 30 2d 31 31 31 30 2d 34 34 63 38 2d 62 39 39 64 2d 32 61 63 62 61 34 61 35 64 62 31 38 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50387	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	881	OUT	GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Fopenx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:51 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50386	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	1047	OUT	GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyRhYzFjZjZiZC02N2MyLTQyMjktOTdmNC0xZjk4MmJkMTFiNDmqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
2024-04-19 13:12:51 UTC	261	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2324 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:51 GMT server: envoy x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close
2024-04-19 13:12:51 UTC	2324	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 61 36 36 32 61 65 66 30 2d 31 31 31 30 2d 34 34 63 38 2d 62 39 39 64 2d 32 61 63 62 61 34 61 35 64 62 31 38 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50385	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	1029	OUT	GET /v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1 Host: cs.ingage.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:51 UTC	142	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Origin
2024-04-19 13:12:51 UTC	1008	IN	Data Raw: 33 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 73 65 72 2d 53 79 6e 63 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 63 55 73 65 72 4b 65 79 20 3d 20 Data Ascii: 3e9<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <title>User-Sync</title></head><body><script type="text/javascript"> if (window.localStorage) { const lcUserKey =
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50389	34.232.139.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	670	OUT	GET /sync/rubicon/TwYhSmfTCxUlMg_vgydP9Mn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50382	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	821	OUT	GET /beacon?informer=13406715 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	217	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon?informer=13406715
2024-04-19 13:12:51 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50380	54.87.127.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	677	OUT	GET /usersync?b=sad&i=1845939505169848484 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:51 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50379	54.87.127.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	682	OUT	GET /usersync?b=dit&i=di_9ac5c5704fa24c0696323 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:51 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50378	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	688	OUT	GET /ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11580%26puid%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	596	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000C server: 33XP001 location: https://cs-tam.yellowblue.io/cs?aid=11580&puid=212568969054924 content-length: 0 date: Fri, 19 Apr 2024 13:12:51 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50401	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	753	OUT	GET /w/1.0/pd HTTP/1.1 Host: insticator-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:51 UTC	246	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Content-Length: 199 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	199	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50390	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	1047	OUT	GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzguMOgCAYgDztuJsQaoA0fqAyQ1MDcyNWQ4My0xYWU5LTRkYTktYjg1Yi03YmI0NzA3YjliYjKqBANEQ0iyBQNVU0TqBQdkZXNrdG9w-gUEZGMxM6oHA3dlYsoHDWp1c3RqYXJlZC5jb23gBwGCCA1qdXN0amFyZWQuY29t HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
2024-04-19 13:12:51 UTC	261	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2324 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:50 GMT server: envoy x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close
2024-04-19 13:12:51 UTC	2324	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 61 36 36 32 61 65 66 30 2d 31 31 31 30 2d 34 34 63 38 2d 62 39 39 64 2d 32 61 63 62 61 34 61 35 64 62 31 38 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50403	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	770	OUT	GET /w/1.0/cm?id=58ceaaf5-c766-4c17-869a-d76e43401714&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11563%26id%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:51 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; Version=1; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://cs-tam.yellowblue.io/cs?aid=11563&id=6954e16a-161b-4257-85da-5bee818de9ef Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50397	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	867	OUT	GET /AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=1YNN&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D158355%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.a-mo.net%252Fsetuid%253FA%253De8ba6a97-4f0e-4f17-a097-1f0587909fd0%2526bidder%253Dpubmatic%2526uid%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50391	54.87.127.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	676	OUT	GET /usersync?b=apn&i=187107314970053313 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:51 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50405	172.64.149.180	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	697	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	442	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 426 Expires: Fri, 19 Apr 2024 17:12:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d26095e01673c-ATL
2024-04-19 13:12:51 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-04-19 13:12:51 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-04-19 13:12:51 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50404	108.138.64.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	547	OUT	GET /mtc/cmd/remote.js HTTP/1.1 Host: d188m5xxcpvuue.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	690	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2151 Connection: close x-amz-replication-status: FAILED Last-Modified: Mon, 24 Oct 2022 20:41:16 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: nwdt5kXEOee7SQQ3BspfQ48xBI1A9pHt Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 13:12:51 GMT Cache-Control: max-age=7800 ETag: "b5b6eec9b6154480acdf521a60b757e9" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b0c7b942a33f0f4451718aee53f7840c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IIfKmsMgaEZ-m31datXZST8-loLrQ3FJ797d5KFKFnZUZeRdLrZzIQ== Age: 3851 Vary: Origin
2024-04-19 13:12:51 UTC	2151	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 44 65 66 69 6e 65 53 6c 6f 74 52 65 6d 6f 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 44 65 66 69 6e 65 53 6c 6f 74 52 65 6d 6f 74 65 3d 74 28 29 3a 65 2e 44 65 66 69 6e 65 53 6c 6f 74 52 65 6d 6f 74 65 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("DefineSlotRemote",[],t):"object"==typeof exports?exports.DefineSlotRemote=t():e.DefineSlotRemote=t()}(this,(function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50406	54.87.127.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	694	OUT	GET /usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:51 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50409	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	797	OUT	GET /sync/prebid?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dopenx%26uid%3D%24%7BUID%7D HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:51 UTC	309	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: image/gif P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50411	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	765	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=0&gpp=&gpp_sid=&google_gid=CAESELL55Lb_r68ETm1PZvTsUw8&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:51 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d26099bcb1359-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:51 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JqAH9fLKy%2B32M2Kg1%2FugK9M2c2qE4dMUJx3BJ0BAWtuRFu8bs3veXflatDMsJl1LjXTRX2ZztBGvMUiJf9rNXvKlnfB7UvAx43ruaEze%2BxRqTlK%2FqzeWrwy4AW%2FtVT6gzt3m4G5jH7yfOg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50068	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-04-19 13:12:51 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50407	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	634	OUT	GET /ups/58570/occ?uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	230	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:51 GMT Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50400	151.101.65.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	887	OUT	GET /dmp/async_usersync.html HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:51 UTC	552	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53044 Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT ETag: "623de86a-cf34" Expires: Sat, 06 Apr 2024 08:12:55 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 19 Apr 2024 13:12:51 GMT Age: 10860 X-Served-By: cache-lga13626-LGA, cache-pdk-kfty2130067-PDK X-Cache: HIT, HIT X-Cache-Hits: 1891, 4 X-Timer: S1713532371.335867,VS0,VE0 Vary: Accept-Encoding
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 61 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 74 2c 61 2e 63 3d 65 2c 61 2e 64 3d 66 75 6e 63 74 69 6f Data Ascii: <!DOCTYPE html><html><head></head><body><script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=functio
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 6e 20 61 29 69 28 61 2c 6e 29 26 26 28 74 5b 6e 5d 3d 61 5b 6e 5d 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 73 68 72 69 6e 6b 42 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 3f 74 3a 74 2e 73 75 62 61 72 72 61 79 3f 74 2e 73 75 62 61 72 72 61 79 28 30 2c 65 29 3a 28 74 2e 6c 65 6e 67 74 68 3d 65 2c 74 29 7d 3b 76 61 72 20 72 3d 7b 61 72 72 61 79 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 2c 69 29 7b 69 66 28 65 2e 73 75 62 61 72 72 61 79 26 26 74 2e 73 75 62 61 72 72 61 79 29 74 2e 73 65 74 28 65 2e 73 75 62 61 72 72 61 79 28 61 2c 61 2b 6e 29 2c 69 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 74 5b 69 2b 72 5d 3d 65 5b 61 2b 72 5d 7d 2c Data Ascii: n a)i(a,n)&&(t[n]=a[n])}}return t},e.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)};var r={arraySet:function(t,e,a,n,i){if(e.subarray&&t.subarray)t.set(e.subarray(a,a+n),i);else for(var r=0;r<n;r++)t[i+r]=e[a+r]},
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 22 6f 6e 22 2b 74 2c 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 21 74 2e 70 75 72 70 6f 73 65 7c 7c 21 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 7c 7c 21 30 3d 3d 3d 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 64 61 74 61 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 61 3d 65 2e 5f 5f 63 6d 70 52 65 74 75 72 6e 7c 7c 65 2e 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3b 61 26 26 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 3d 3d 3d 61 2e 63 6f 6d 6d 61 6e 64 26 26 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 68 28 61 2e 63 61 6c 6c 49 64 2c 61 2e 72 65 74 Data Ascii: "on"+t,e)},o=function(t){return!t\|\|!t.purpose\|\|!t.purpose.consents\|\|!0===t.purpose.consents[1]},l=function(t){var e=t.data;try{e=JSON.parse(e)}catch(t){}var a=e.__cmpReturn\|\|e.__tcfapiReturn;a&&("getConsentData"===a.command&&a.returnValue?h(a.callId,a.ret
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 33 3a 61 3b 64 6f 7b 72 3d 72 2b 28 69 3d 69 2b 65 5b 6e 2b 2b 5d 7c 30 29 7c 30 7d 77 68 69 6c 65 28 2d 2d 73 29 3b 69 25 3d 36 35 35 32 31 2c 72 25 3d 36 35 35 32 31 7d 72 65 74 75 72 6e 20 69 7c 72 3c 3c 31 36 7c 30 7d 7d 2c 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 61 3d 30 3b 61 3c 32 35 36 3b 61 2b 2b 29 7b 74 3d 61 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 38 3b 6e 2b 2b 29 74 3d 31 26 74 3f 33 39 38 38 32 39 32 33 38 34 5e 74 3e 3e 3e 31 3a 74 3e 3e 3e 31 3b 65 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b Data Ascii: 3:a;do{r=r+(i=i+e[n++]\|0)\|0}while(--s);i%=65521,r%=65521}return i\|r<<16\|0}},20:function(t,e,a){"use strict";var n=function(){for(var t,e=[],a=0;a<256;a++){t=a;for(var n=0;n<8;n++)t=1&t?3988292384^t>>>1:t>>>1;e[a]=t}return e}();t.exports=function(t,e,a,i){
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 62 69 6e 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 28 74 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 62 69 6e 73 74 72 69 6e 67 32 62 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6e 2e 42 75 66 38 28 74 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 65 5b 61 5d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 2c 6e 2c 69 2c 72 2c 6f 3d 65 7c 7c 74 2e 6c 65 6e 67 74 68 2c 68 3d 6e 65 77 20 41 72 72 61 79 28 32 2a 6f 29 3b 66 6f 72 28 6e 3d 30 2c 61 3d 30 3b 61 3c 6f Data Ascii: urn e},e.buf2binstring=function(t){return l(t,t.length)},e.binstring2buf=function(t){for(var e=new n.Buf8(t.length),a=0,i=e.length;a<i;a++)e[a]=t.charCodeAt(a);return e},e.buf2string=function(t,e){var a,n,i,r,o=e\|\|t.length,h=new Array(2*o);for(n=0,a=0;a<o
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 61 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 3c 6e 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 69 3d 61 28 33 37 29 2c 72 3d 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: tion(){return(n=Object.assign\|\|function(t){for(var e,a=1,n=arguments.length;a<n;a++)for(var i in e=arguments[a])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};e.__esModule=!0;var i=a(37),r=(window&&window.location
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 70 61 74 68 3d 22 2b 69 2b 72 7d 2c 74 68 69 73 2e 77 72 69 74 65 50 69 78 65 6c 4d 61 70 54 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 70 69 78 65 6c 4d 61 70 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 2e 70 69 78 65 6c 4d 61 70 5b 74 5d 2c 6e 3d 61 2e 69 64 2c 69 3d 61 2e 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3b 72 65 74 75 72 6e 7b 69 64 3a 6e 2c 73 79 6e 63 5f 73 74 61 72 74 3a 61 2e 73 79 6e 63 5f 73 74 61 72 74 2c 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3a 69 7d 7d 29 2c 61 3d 69 2e 65 6e 63 6f 64 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 76 65 72 73 69 6f 6e 3a 73 2c 70 69 78 65 6c 73 3a 74 Data Ascii: e=none;secure;path="+i+r},this.writePixelMapToCookie=function(){var t=Object.keys(e.pixelMap).map(function(t){var a=e.pixelMap[t],n=a.id,i=a.sync_complete;return{id:n,sync_start:a.sync_start,sync_complete:i}}),a=i.encode(JSON.stringify({version:s,pixels:t
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 69 78 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3b 74 3d 65 2e 70 69 78 65 6c 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 29 7b 76 61 72 20 61 3d 74 2e 69 64 3b 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 7c 7c 28 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 3d 74 2c 65 2e 6c 6f 61 64 50 69 78 65 6c 28 74 29 29 7d 7d 2c 74 68 69 73 2e 69 6d 70 62 75 73 55 72 6c 3d 74 7c 7c 64 2c 74 68 69 73 2e 70 69 78 65 6c 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 69 78 65 6c 4d 61 70 3d 74 68 69 73 2e 72 65 61 64 50 69 78 65 6c 4d 61 70 46 72 6f 6d 43 6f 6f Data Ascii: .firstChild)},this.processPixels=function(){for(var t;t=e.pixelQueue.shift();){var a=t.id;e.pixelRequestMap[a]\|\|(e.pixelRequestMap[a]=t,e.loadPixel(t))}},this.impbusUrl=t\|\|d,this.pixelQueue=[],this.pixelRequestMap={},this.pixelMap=this.readPixelMapFromCoo
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 29 3e 3e 38 29 2c 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 35 35 26 61 29 29 2c 65 7d 7d 2c 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 66 6f 72 28 74 3d 53 74 72 69 6e 67 28 74 29 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3e 32 35 35 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 33 29 7b 76 61 72 20 6e 3d 5b 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 5d 3b 6e 5b 30 5d 3d 74 2e 63 68 61 72 43 6f 64 Data Ascii: )>>8),e+=String.fromCharCode(255&a)),e}},40:function(t,e,a){"use strict";t.exports=function(t){var e;for(t=String(t),e=0;e<t.length;e++)if(t.charCodeAt(e)>255)return null;var a="";for(e=0;e<t.length;e+=3){var n=[void 0,void 0,void 0,void 0];n[0]=t.charCod
2024-04-19 13:12:51 UTC	1371	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 73 5b 61 5d 29 3b 69 66 28 65 2e 68 65 61 64 65 72 26 26 6e 2e 64 65 66 6c 61 74 65 53 65 74 48 65 61 64 65 72 28 74 68 69 73 2e 73 74 72 6d 2c 65 2e 68 65 61 64 65 72 29 2c 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 7b 76 61 72 20 5f 3b 69 66 28 5f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 69 63 74 69 6f 6e 61 72 79 3f 72 2e 73 74 72 69 6e 67 32 62 75 66 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3d 3d 3d 6c 2e 63 61 6c 6c 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 65 2e 64 69 63 74 69 6f 6e 61 72 79 2c 28 61 3d 6e 2e 64 65 66 6c 61 74 65 53 65 74 44 69 63 Data Ascii: ew Error(s[a]);if(e.header&&n.deflateSetHeader(this.strm,e.header),e.dictionary){var _;if(_="string"==typeof e.dictionary?r.string2buf(e.dictionary):"[object ArrayBuffer]"===l.call(e.dictionary)?new Uint8Array(e.dictionary):e.dictionary,(a=n.deflateSetDic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50377	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	608	OUT	GET /track/rid?ttd_pid=mp4hjl8&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	451	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: application/json Content-Length: 63 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://www.justjared.com cache-control: private expires: Sun, 19 May 2024 13:12:51 GMT vary: Origin
2024-04-19 13:12:51 UTC	63	IN	Data Raw: 7b 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 35 31 22 7d Data Ascii: {"TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-19T13:12:51"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50414	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	698	OUT	GET /ecm3?ex=vidazoo.com&id=a2cfff08-e3a1-d49f-dccd-86df76cdf804 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: K06AXMFJC1C5A28RSTW4 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50408	121.127.42.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	731	OUT	GET /u?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid=&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Damx_com%26uid%3D HTTP/1.1 Host: id.a-mx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	556	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:50 GMT location: https://sync.a-mo.net/setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=amx_com&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0 connection: close content-length: 0 set-cookie: amdt_t=p::1713532371508; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Path=/; Domain=a-mx.com; Secure; HTTPOnly; SameSite=None set-cookie: amuid2=e8ba6a97-4f0e-4f17-a097-1f0587909fd0; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Path=/; Domain=a-mx.com; Secure; HTTPOnly; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50415	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	663	OUT	GET /api/sync?callerId=77&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=1845939505169848484
2024-04-19 13:12:51 UTC	190	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 19 Apr 2024 13:12:50 GMT location: https://cs.yellowblue.io/cs?aid=11600&id=1845939505169848484&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50369	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	623	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	129	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 30 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 33 36 39 2c 22 70 64 22 3a 22 22 7d 7d Data Ascii: {"name":"id5Id","storage":{"expires":90,"name":"id5id","type":"html5","refreshInSeconds":28800},"params":{"partner":369,"pd":""}}
2024-04-19 13:12:51 UTC	419	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://www.justjared.com vary: Origin access-control-allow-credentials: true content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:50 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:51 UTC	141	IN	Data Raw: 38 37 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 33 36 39 2e 6a 73 6f 6e 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a Data Ascii: 87{"fetchCall":{"url":"https://id5-sync.com/g/v2/369.json"},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50402	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	669	OUT	GET /cs?aid=11587&uid=7456771a-49ee-4e2a-b013-668de61e15dd&gdpr=0 HTTP/1.1 Host: cs.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:51 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://cs-tam.yellowblue.io/ x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50399	54.87.122.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	643	OUT	GET /id?c=17248 HTTP/1.1 Host: id.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c
2024-04-19 13:12:51 UTC	917	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: application/json;charset=utf-8 Content-Length: 152 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.12.89 Set-Cookie: _cc_id=2647d031a51b7a31cc96fbee0c73c78c;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4XmNQMDIzMU8xMDZMNDVMMk80NkxOtjRLS0pNNUg2N042t0hmAII0pdzLIBoKAFKvCtI%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4XmNgYGBIU8q9DKSgAAAVjQHJ";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Server: Jetty(9.4.38.v20210224)
2024-04-19 13:12:51 UTC	152	IN	Data Raw: 7b 22 70 72 6f 66 69 6c 65 5f 69 64 22 3a 22 32 36 34 37 64 30 33 31 61 35 31 62 37 61 33 31 63 63 39 36 66 62 65 65 30 63 37 33 63 37 38 63 22 2c 22 63 6f 72 65 5f 69 64 22 3a 22 64 36 36 38 33 33 34 34 65 62 33 63 35 39 65 36 35 37 38 65 38 39 61 35 31 35 31 30 31 38 35 63 61 30 32 63 65 34 37 34 65 39 36 31 30 62 62 62 39 35 64 61 38 34 63 63 39 32 63 61 61 32 62 34 22 2c 22 65 78 70 69 72 79 5f 74 73 22 3a 31 37 31 34 31 33 37 31 37 31 33 39 36 7d Data Ascii: {"profile_id":"2647d031a51b7a31cc96fbee0c73c78c","core_id":"d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4","expiry_ts":1714137171396}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50418	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	854	OUT	GET /beacon/amazon?url=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid%3D%24UID&ex=sovrn.com&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Content-Length: 1373 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxdjLERgDAMA3dxncKyHSthNY7dc5ACTPmnf50yVA4QwcBMNhnxMtEEalWAejXMq2D5sHf2vh%2FyF3AznLiDad%2F9WoYWHV8%3D; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-04-19 13:12:51 UTC	1373	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 36 20 53 65 6e 74 20 2f 20 35 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 70 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (6 Sent / 5 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='https

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50422	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	754	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFY2T1g3TFMtMVUtRzFUQg==&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:51 UTC	686	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAESEA5PwDc1jOcDK_GZP2beYa8&google_cver=1 Date: Fri, 19 Apr 2024 13:12:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAES

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50394	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	771	OUT	GET /sync?ssp=adaptmx&user_id=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:51 UTC	387	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=58637582-4b7e-42fe-b59a-889f13122ef7&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dadaptmx%26user_id%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50419	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	651	OUT	GET /ecm3?ex=baidu.com&id=22210ca737cf7b3c2itoor00lv6oxcmr HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: PMH1XTJDKZ63ZKHF9J8A Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50413	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	903	OUT	GET /usersync2/rmpssp?sub=amazon&zcc=1&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D&cb=1713532368939 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
2024-04-19 13:12:51 UTC	729	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sat, 19 Apr 2025 13:12:51 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=3774429360 etag: RXdd40f750a0144531a2f18878dd503e55005 connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	50424	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	744	OUT	GET /merge?pid=102&3pid=ba8f4e41-72ae-5bc7-8225-d78d77656ddb HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	829	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	50423	8.2.110.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	731	OUT	GET /c3593fe4-fdef-4a92-9a1a-9726d1dddf30.gif?gdpr=0&gdpr_consent=[GDPR_CONSENT]&redir=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11608%26id%3D%5BUID%5D HTTP/1.1 Host: us.shb-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	554	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Set-Cookie: smart_usr=405ce1e6-27d8-4dbe-becb-3a11e6ea0caf; path=/; domain=.shb-sync.com; expires=Fri, 03 May 2024 13:12:51 GMT;SameSite=None;Secure Set-Cookie: smart_r=34323; path=/; domain=.shb-sync.com; expires=Fri, 03 May 2024 13:12:51 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://cs-tam.yellowblue.io/cs?aid=11608&id=405ce1e6-27d8-4dbe-becb-3a11e6ea0caf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	50425	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	731	OUT	GET /merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	816	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.5	50427	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	709	OUT	GET /usersync?b=mag&i=LV6OX7LS-1U-G1TB&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:51 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.5	50428	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	649	OUT	GET /ecm3?ex=outbrain.com&id=Ew75cZqQhtpEcO-Pru61&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2KNG8KTFN8SG6K2R3NRY Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.5	50434	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	710	OUT	GET /cs/usync?idmn=28&type=iframe&id=3059573620546902553906&auxuid= HTTP/1.1 Host: ssp.api.tappx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
2024-04-19 13:12:51 UTC	393	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * access-control-allow-credentials: true set-cookie: TXCSDMN_28=3059573620546902553906; expires=Sun, 19-May-2024 13:12:51 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.5	50437	96.46.186.57	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	832	OUT	GET /match?bidder_id=43929&callback_url=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D724%26type%3Diframe%26id%3D%24%7BUSER_ID%7D%26auxuid%3D&crf=1&rts=4947430377108709478 HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dc=was1; tuuid=2d9d0769-dca8-536e-84e5-cf7ce2c7a2ad; ut=ZiJt0QAB-9C5lWSbK-bh2P2zsM_RIvC-v_fZxg==; ss=1
2024-04-19 13:12:51 UTC	720	IN	HTTP/1.1 302 Found location: https://ssp.api.tappx.com/cs/usync?idmn=724&type=iframe&id=2d9d0769-dca8-536e-84e5-cf7ce2c7a2ad&auxuid= cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=2d9d0769-dca8-536e-84e5-cf7ce2c7a2ad; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZiJt0wALNxiaC52zvLOgV0jA_CM4pYB6j-dmrg==; Max-Age=31536000; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.5	50436	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	836	OUT	GET /usersync2/rmpssp?sub=typeaholdings HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
2024-04-19 13:12:51 UTC	645	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:52 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.63%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 19 Apr 2025 13:12:52 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=5888737765 etag: RXdd40f750a0144531a2f18878dd503e55005 connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.5	50429	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	730	OUT	GET /merge?pid=80&3pid=LV6OX7LS-1U-G1TB&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	808	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.5	50410	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	664	OUT	POST /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 3592 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#1
2024-04-19 13:12:51 UTC	3592	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 30 34 64 66 35 33 61 2d 61 61 37 35 2d 34 32 61 63 2d 61 62 35 33 2d 35 66 36 34 35 30 66 34 61 38 61 64 22 2c 22 72 65 71 75 65 73 74 43 6f 75 6e 74 22 3a 31 2c 22 72 6f 6c 65 22 3a 22 6c 65 61 64 65 72 22 2c 22 63 61 63 68 65 49 64 22 3a 22 38 32 33 38 37 32 37 35 39 34 31 33 30 33 30 36 22 2c 22 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 22 3a 33 36 39 2c 22 76 22 3a 22 31 2e 30 2e 36 33 22 2c 22 6f 22 3a 22 61 70 69 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f Data Ascii: {"requests":[{"requestId":"004df53a-aa75-42ac-ab53-5f6450f4a8ad","requestCount":1,"role":"leader","cacheId":"8238727594130306","refresh":true,"partner":369,"v":"1.0.63","o":"api","tml":"https://www.justjared.com/","ref":null,"cu":"https://www.justjared.co
2024-04-19 13:12:51 UTC	582	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:51 GMT vary: Accept-Encoding p3p: CP="CAO PSA OUR" set-cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#2; Path=/; Domain=id5-sync.com; Expires=Thu, 18 Jul 2024 13:12:51 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://www.justjared.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:51 UTC	1746	IN	Data Raw: 36 43 36 0d 0a 7b 22 67 65 6e 65 72 69 63 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 72 54 6f 31 79 37 4a 42 76 56 45 30 6e 70 52 59 43 71 38 4d 6e 65 65 46 56 49 76 58 56 76 38 76 6c 31 4e 68 2d 58 50 47 72 6a 73 49 41 33 46 69 41 52 52 74 74 37 33 39 6e 79 4d 58 75 56 42 50 5f 47 4c 79 69 34 2d 63 56 62 54 44 5a 6d 37 45 6e 69 65 74 36 67 61 63 42 41 53 4e 7a 6e 61 75 47 30 31 50 79 58 65 43 47 68 63 50 48 66 34 58 56 34 43 59 7a 42 46 2d 76 51 59 61 4a 78 35 79 32 6c 35 52 31 57 36 4a 35 62 64 70 50 44 6a 6a 76 77 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 34 39 2e 31 30 35 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 Data Ascii: 6C6{"generic":{"signature":"ID5_ArTo1y7JBvVE0npRYCq8MneeFVIvXVv8vl1Nh-XPGrjsIA3FiARRtt739nyMXuVBP_GLyi4-cVbTDZm7Eniet6gacBASNznauG01PyXeCGhcPHf4XV4CYzBF-vQYaJx5y2l5R1W6J5bdpPDjjvw","created_at":"2024-04-19T13:12:49.105Z","id5_consent":true,"original_uid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.5	50430	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	762	OUT	GET /setuid/magnite?uid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
2024-04-19 13:12:51 UTC	348	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 19 Apr 2024 13:12:51 GMT server: envoy set-cookie: _sv3_7=1; path=/; domain=prebid.a-mo.net; expires=Sat, 20 Apr 2024 13:12:51 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.5	50440	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	926	OUT	GET /getuid?https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dappnexus%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:51 UTC	1498	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.cootlogix.com/api/user?partnerId=appnexus&userId=187107314970053313&gdpr=0&gdpr_consent=&us_privacy=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 9c9f5913-0666-433c-9026-20af1a2b9647 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:51 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:51 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.5	50449	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	819	OUT	GET /cksync?cs=30&type=vdz&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dmedianet%26userId%3D%3Cvsid%3E%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3565339623115671000V10
2024-04-19 13:12:51 UTC	482	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://sync.cootlogix.com/api/user?partnerId=medianet&userId=3565339623115671000V10&gdpr=0&gdpr_consent=&us_privacy= p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" x-mnet-hl2: E Expires: Fri, 19 Apr 2024 13:12:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 13:12:51 GMT Connection: close
2024-04-19 13:12:51 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.5	50435	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	706	OUT	GET /cs/usync?idmn=32&type=iframe&id=187107314970053313&auxuid= HTTP/1.1 Host: ssp.api.tappx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
2024-04-19 13:12:51 UTC	389	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * access-control-allow-credentials: true set-cookie: TXCSDMN_32=187107314970053313; expires=Sun, 19-May-2024 13:12:51 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.5	50438	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	691	OUT	GET /cs/usync?idmn=728&id=nXZup0qoCvW1rWLB0W0iZg HTTP/1.1 Host: ssp.api.tappx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
2024-04-19 13:12:51 UTC	394	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * access-control-allow-credentials: true set-cookie: TXCSDMN_728=nXZup0qoCvW1rWLB0W0iZg; expires=Sun, 19-May-2024 13:12:51 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.5	50439	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	755	OUT	GET /cs/usync?consent=&gdpr=0&id=OPUf67e9fe0c71146baa5554ff263871c94&idmn=1135&us_privacy=%7B%7BUS_PRIVACY%7D%7D HTTP/1.1 Host: ssp.api.tappx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TXUSERID=c2d796cf-5d2c-4773-aea5-8358eef31c7bf1a; TXCD=1713532362; TXCSDMN_50=1045438816811072924
2024-04-19 13:12:51 UTC	408	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked access-control-allow-origin: * access-control-allow-credentials: true set-cookie: TXCSDMN_1135=OPUf67e9fe0c71146baa5554ff263871c94; expires=Sun, 19-May-2024 13:12:51 GMT; Max-Age=2592000; path=/; domain=.tappx.com; secure; HttpOnly; SameSite=None connection: close
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.5	50447	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	881	OUT	GET /w/1.0/cm?id=b355ce4f-581b-4a1c-8c84-81fe81e4bc39&r=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Fopenx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:51 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.5	50332	34.198.78.192	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	800	OUT	GET /pixel.gif?ch=185&cm=IhHYAPZHgyDtLY4rTVmqUZsu&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiJt0-EedLilJRkb8yqXAxW4; chs=[{"ch":"185","t":"2024-04-19 13:12:51"}]
2024-04-19 13:12:51 UTC	792	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://ce.lijit.com/merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 set-cookie: cb=ZiJt0-EedLilJRkb8yqXAxW4; Max-Age=63027504; Expires=Sun, 19 Apr 2026 00:51:15 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.5	50450	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	900	OUT	GET /w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:51 UTC	603	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; Version=1; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://sync.cootlogix.com/api/user?partnerId=openx&userId=73db8c99-4eaf-44a4-b197-4578118389c7&gdpr=0&gdpr_consent=&us_privacy= Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.5	50441	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	1318	OUT	GET /api/cookie?partnerId=appnexus&userId=187107314970053313&gdpr=0&gdpr_consent=&us_privacy=1YNN&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=Fbl140c8GLP7ktNCANAS0FIJj4kWQ4GPWF7FWMFBQtyfzUFUxB5d3V%2FIgBTCXAoM1JcFyxhbWx3BAJZIyhoVQpHKiF5eCdRAgkme2lWXRZsb2N7JwMGDHd0aVQJQ3kid35xAVRbJHhlU19WYmF3fXVVWgB3eDJVWBcqdSIrJQJTW3R7ZVVJWGx2J310AwZecShnA19FLXNxf3ZUAF1wLzQVR1Z4d3Z4cQhTDSUqZQZZFXkgJ3d3BlMLcn1yG0lCfXFwLHEJVQ92fWgDXkwtcnh%2FdVFWDXJuDRtJFyE2LzpjClMUZSs0RxlWdDhjJzJ1Nhp9KjFbGBFiYSYqMUJBAmV8chtJEyozMw0uXhBdKThyDUlWYmE0PRFCCk4mLykVUVZ%2FGg8AY01PGjQpI0QCGyBhe2x5A1NZcX5mA0ZCeCF5Y3AHBVtqfzVSWll3ciMoJAlRDyN%2FNAZJWGwgLiAvVQBMLiM%2Bfg9WdGF3eiNTBl51f2BUDRB%2Benh5JAgFCHJ8ZQBJWGwqMgcnQgJVIm5qQxkBKz4%3D
2024-04-19 13:12:52 UTC	575	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; Domain=.cootlogix.com; Path=/; Expires=Sun, 19 May 2024 13:12:51 GMT; Secure; SameSite=None content-type: image/avif content-length: 43 date: Fri, 19 Apr 2024 13:12:51 GMT keep-alive: timeout=5 connection: close
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.5	50444	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	782	OUT	GET /AdServer/ImgSync?p=159988&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dpubmatics2s%26userId%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:50 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.5	50446	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	836	OUT	GET /getuid?gdpr=0&cmp_cs=&redir=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dtriplelift%26userId%3D$UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:51 UTC	720	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Location: https://sync.cootlogix.com/api/user?partnerId=triplelift&userId=3059573620546902553906&gdpr=0&gdpr_consent=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:51 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:51 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.5	50448	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	859	OUT	GET /pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dsovrn%26userId%3D%24UID%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:51 UTC	550	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Location: https://sync.cootlogix.com/api/user?partnerId=sovrn&userId=IhHYAPZHgyDtLY4rTVmqUZsu&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.5	50451	54.145.3.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	783	OUT	GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119
2024-04-19 13:12:51 UTC	511	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:51 GMT Location: https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e&expires=30&gdpr=0&us_privacy=1YNN Set-Cookie: cu=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e\|1713532366119; Path=/; Domain=ipredictive.com; Expires=Sat, 19 Apr 2025 13:12:51 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 3da6dbb4-6bfb-4efe-b083-027519b5d1a6 Content-Length: 175 Connection: Close
2024-04-19 13:12:51 UTC	175	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 37 31 34 39 26 61 6d 70 3b 6e 69 64 3d 32 38 36 31 26 61 6d 70 3b 70 75 74 3d 64 31 64 65 35 61 38 62 2d 39 65 30 31 2d 34 62 36 31 2d 62 65 34 31 2d 63 61 33 37 66 38 65 35 65 36 32 65 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e&expires=30&gdpr=0&us_privacy=1YNN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.5	50443	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	784	OUT	GET /deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	715	IN	HTTP/1.1 307 location: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=Vz/bJWYibdPMu3ZvZk8k1w==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Fri, 19 Apr 2024 13:12:50 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.5	50442	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	784	OUT	GET /deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid= HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:51 UTC	715	IN	HTTP/1.1 307 location: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Fri, 19 Apr 2024 13:12:50 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.5	50453	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	1029	OUT	GET /v1/syncPage/rubicon?userId=d420a613-8395-4234-83fd-2a89fd387f7e&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2Fxapi%2Fmulti-sync.html%3Fendpoint%3Dus-east%26p%3Dinsticator HTTP/1.1 Host: cs.ingage.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:51 UTC	142	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Origin
2024-04-19 13:12:51 UTC	1008	IN	Data Raw: 33 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 73 65 72 2d 53 79 6e 63 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 63 55 73 65 72 4b 65 79 20 3d 20 Data Ascii: 3e9<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <title>User-Sync</title></head><body><script type="text/javascript"> if (window.localStorage) { const lcUserKey =
2024-04-19 13:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.5	50432	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	733	OUT	GET /c/441/441/9/1.gif?puid=u_bd73a985-3ef7-4416-a679-3a9309181613&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#1
2024-04-19 13:12:52 UTC	1589	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#2; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=441; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=8; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=2; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy= transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:51 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.5	50456	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	702	OUT	GET /ecm3?gdpr=0&ex=index.com&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:51 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: K89X1XQTA2P9ARCFZ1M3 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.5	50455	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	721	OUT	GET /ecm3?id=LV6OX7LS-1U-G1TB&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:52 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AG407JXBQ53VCBPR8K1D Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.5	50445	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	890	OUT	GET /check_uuid/https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3FpartnerId%3Dgrid%26userId%3D%24%7BBSW_UUID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D?gdpr=0&gdpr_consent=&us_privacy=&uid=${BSW_UUID}&cookie_age=${COOKIE_AGE} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:52 UTC	315	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://sync.cootlogix.com/api/user?partnerId=grid&userId=58637582-4b7e-42fe-b59a-889f13122ef7&gdpr=0&gdpr_consent=&us_privacy=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.5	50457	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	705	OUT	GET /ecm3?id=LV6OX7LS-1U-G1TB&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:52 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VPJMN7FWVQTD68MADB82 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.5	50458	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	907	OUT	GET /w/1.0/cm?cc=1&id=4241c706-9fd2-4ae4-b2d7-c9f8d34e773c&ph=f4cc9fb1-057b-4e7a-b393-325ee9109574&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fcookie%3FpartnerId%3Dopenx%26userId%3D%7BOPENX_ID%7D%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D1YNN HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:52 UTC	609	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; Version=1; Expires=Sat, 19-Apr-2025 13:12:51 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://sync.cootlogix.com/api/cookie?partnerId=openx&userId=73db8c99-4eaf-44a4-b197-4578118389c7&gdpr=0&gdpr_consent=&us_privacy=1YNN Date: Fri, 19 Apr 2024 13:12:51 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.5	50459	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	550	OUT	GET /js/ld/publishertag.prebid.144.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:51 GMT content-type: text/javascript content-length: 98590 last-modified: Fri, 27 Oct 2023 06:43:26 GMT etag: "653b5c0e-1811e" expires: Sat, 20 Apr 2024 13:12:51 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:52 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 69 6f 78 78 64 6a 48 44 7a 46 42 74 35 30 6a 73 4b 48 63 55 4c 6f 45 6a 66 50 6a 6e 37 46 75 70 48 55 4f 62 55 58 54 45 75 6c 48 31 69 49 6d 63 61 54 31 4f 59 59 71 34 6e 58 65 64 76 2b 76 36 79 73 74 4c 2f 6d 63 69 77 34 33 65 4e 32 4e 31 73 42 71 75 6b 45 63 42 31 47 33 79 4c 61 6f 7a 77 41 51 6f 5a 61 72 49 76 70 65 2b 6f 70 32 49 38 64 44 57 43 72 6e 6d 51 4c 35 61 41 33 54 52 46 41 32 68 49 47 4d 45 73 47 44 50 64 6c 6a 49 66 5a 6c 78 50 4b 42 35 54 74 38 72 5a 4d 6b 77 64 38 54 2b 37 55 45 4a 4f 44 6b 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-04-19 13:12:52 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 62 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 62 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 62 65 29 3b 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 77 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",be.CRITEO_ERROR_HANDLER="error",be.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",be);function be(e){void 0===e&&(e=!1),this.auditMode=e}var we=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-04-19 13:12:52 UTC	16384	IN	Data Raw: 3d 3d 69 26 26 28 69 3d 21 31 29 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 45 6e 64 70 6f 69 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 73 70 2d 73 79 6e 63 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 2f 70 69 78 65 6c 73 22 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 54 69 6d 65 6f 75 74 3d 32 65 33 2c 74 68 69 73 2e 65 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 50 69 78 65 6c 73 52 65 74 72 69 65 76 65 64 3d 65 2c 74 68 69 73 2e 64 65 62 75 67 3d 69 7d 76 61 72 20 65 74 3d 28 74 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 6e 65 77 20 24 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 Data Ascii: ==i&&(i=!1),this.pixelSyncEndpoint="https://ssp-sync.criteo.com/user-sync/pixels",this.pixelSyncTimeout=2e3,this.errorReporter=t,this.onPixelsRetrieved=e,this.debug=i}var et=(tt.execUserSync=function(e,t,i,n){void 0===n&&(n=!1),new $e(tt.appendUserSyncPix
2024-04-19 13:12:52 UTC	12837	IN	Data Raw: 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 30 29 2c 72 3d 7b 5f 5f 75 73 70 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 74 2c 63 61 6c 6c 49 64 3a 6e 7d 7d 3b 6f 2e 75 73 70 61 70 69 43 61 6c 6c 62 61 63 6b 73 5b 6e 5d 3d 69 2c 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 72 2c 22 2a 22 29 7d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3f 76 74 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 3b 69 66 28 74 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 Data Ascii: om().toString(10),r={__uspapiCall:{command:e,parameter:t,callId:n}};o.uspapiCallbacks[n]=i,s.postMessage(r,"*")},this.currentWindow.addEventListener("message",function(e){var t="string"==typeof e.data?vt(e.data):e.data;if(t&&t.__uspapiReturn&&t.__uspapiRe
2024-04-19 13:12:52 UTC	16384	IN	Data Raw: 72 28 76 61 72 20 69 3d 30 2c 6e 3d 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 6e 5b 69 5d 2c 6f 3d 72 2e 73 75 62 73 74 72 28 30 2c 72 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 2c 73 3d 72 2e 73 75 62 73 74 72 28 72 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 2b 31 29 3b 69 66 28 6f 3d 3d 3d 65 29 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 29 7d 7d 2c 4d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 2c 72 29 7b 69 66 28 74 68 69 73 2e 63 6f 6f 6b Data Ascii: r(var i=0,n=(t\|\|document).cookie.split(";");i<n.length;i++){var r=n[i],o=r.substr(0,r.indexOf("=")).replace(/^\s+\|\s+$/g,""),s=r.substr(r.indexOf("=")+1);if(o===e)return decodeURIComponent(s)}},Mt.prototype.setCookieString=function(e,t,i,n,r){if(this.cook
2024-04-19 13:12:52 UTC	16384	IN	Data Raw: 72 6f 74 6f 63 6f 6c 7c 7c 22 68 74 74 70 22 29 2b 22 3a 2f 2f 22 2b 28 65 2e 68 6f 73 74 7c 7c 65 2e 68 6f 73 74 6e 61 6d 65 2b 28 65 2e 70 6f 72 74 3f 22 3a 22 2b 65 2e 70 6f 72 74 3a 22 22 29 29 2b 28 65 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 29 2b 28 65 2e 73 65 61 72 63 68 3f 22 3f 22 2b 68 69 28 65 2e 73 65 61 72 63 68 7c 7c 22 22 29 3a 22 22 29 2b 28 65 2e 68 61 73 68 3f 22 23 22 2b 65 2e 68 61 73 68 3a 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 2c 6e 3d 69 5b 30 5d 2c 72 3d 69 5b 31 5d 3b 72 65 74 75 Data Ascii: rotocol\|\|"http")+"://"+(e.host\|\|e.hostname+(e.port?":"+e.port:""))+(e.pathname\|\|"")+(e.search?"?"+hi(e.search\|\|""):"")+(e.hash?"#"+e.hash:"")}function fi(e){return e?e.replace(/^\?/,"").split("&").reduce(function(e,t){var i=t.split("="),n=i[0],r=i[1];retu
2024-04-19 13:12:52 UTC	960	IN	Data Raw: 74 68 69 73 2e 63 6c 69 65 6e 74 53 65 73 73 69 6f 6e 49 64 7d 2c 58 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 7d 2c 58 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 69 73 70 6c 61 79 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 47 65 2e 69 6e 49 66 72 61 6d 65 28 29 3f 65 2e 65 72 72 3f 61 69 2e 49 6e 55 6e 66 72 69 65 6e 64 6c 79 49 66 72 61 6d 65 3a 61 69 2e 49 6e 46 72 69 65 6e 64 6c 79 49 66 72 61 6d 65 3a 61 69 2e 44 69 72 65 63 74 49 6e 74 65 67 72 61 74 69 6f 6e 7d 2c 58 69 2e 70 72 6f 74 6f 74 79 70 65 2e 73 79 6e 63 68 72 6f 6e 69 Data Ascii: this.clientSessionId},Xi.prototype.getMetricsManager=function(){return this.contextMetricsManager},Xi.prototype.getDisplayContext=function(e){return Ge.inIframe()?e.err?ai.InUnfriendlyIframe:ai.InFriendlyIframe:ai.DirectIntegration},Xi.prototype.synchroni
2024-04-19 13:12:52 UTC	3422	IN	Data Raw: 61 72 20 6f 3d 4c 28 4c 28 7b 7d 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 65 78 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 64 61 74 61 29 2c 72 2e 64 61 74 61 29 3b 6e 2e 65 78 74 3d 4c 28 4c 28 7b 7d 2c 6e 2e 65 78 74 29 2c 7b 64 61 74 61 3a 6f 7d 29 7d 69 66 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 64 65 76 69 63 65 29 7b 76 61 72 20 73 3d 4c 28 4c 28 7b 7d 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 65 78 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 65 76 69 63 65 29 2c 72 2e 64 65 76 69 63 65 29 3b 6e 2e 65 78 74 3d 4c 28 4c 28 7b 7d 2c 6e 2e 65 78 74 29 2c 7b 64 65 76 69 63 65 3a 73 7d 29 7d 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 64 65 76 69 63 65 29 7c 7c 76 Data Ascii: ar o=L(L({},null===(e=n.ext)\|\|void 0===e?void 0:e.data),r.data);n.ext=L(L({},n.ext),{data:o})}if(null==r?void 0:r.device){var s=L(L({},null===(t=n.ext)\|\|void 0===t?void 0:t.device),r.device);n.ext=L(L({},n.ext),{device:s})}return(null===(i=this.device)\|\|v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.5	50392	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	913	OUT	GET /usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D&cb=1713532364186 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.5%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Drhythmone.com%26id%3D%5BRX_UUID%5D%22%7D
2024-04-19 13:12:52 UTC	749	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:52 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D%22%7D; path=/; expires=Sat, 19 Apr 2025 13:12:52 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=2882248819 etag: RXdd40f750a0144531a2f18878dd503e55005 connection: close
2024-04-19 13:12:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.5	50464	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	753	OUT	GET /w/1.0/pd HTTP/1.1 Host: insticator-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:52 UTC	246	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html Content-Length: 199 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:52 UTC	199	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.5	50465	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	817	OUT	GET /v1/syncPage/rubicon?uid=LV6OX7LS-1U-G1TB&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: cs.ingage.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:52 UTC	97	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:52 GMT Connection: close Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.5	50462	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	855	OUT	GET /getuid?https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11596%26id%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:52 UTC	1448	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cs-tam.yellowblue.io/cs?aid=11596&id=187107314970053313&gdpr=0&gdpr_consent= AN-X-Request-Uuid: ac267592-6dd1-4b1c-a8ee-93ffea0e3890 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.5	50463	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	821	OUT	GET /beacon?informer=13406715 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:52 UTC	217	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon?informer=13406715
2024-04-19 13:12:52 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.5	50466	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:51 UTC	836	OUT	GET /prebid/setuid?bidder=rubicon&uid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:52 UTC	1787	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 3daea35a-d384-427f-9347-88863bcfc5ef Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/YCxrEQF']wIg2GTtvwG:3!]tbP6j2F-.aDabByFnKcfMDQ8Nq5)AT$9.kE21!<e:g^hEh[U%v4VB%nl]B(HrLk; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWNk9YN0xTLTFVLUcxVEIiLCJleHBpcmVzIjoiMjAyNC0wNy0xOFQxMzoxMjo1MloifX0sImJpcnRoZGF5IjoiMjAyNC0wNC0xOVQxMzoxMjo1MloifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.5	50468	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	698	OUT	GET /ecm3?ex=rubiconprojectHMT&id=ZUN4s6npS8GwWOHs-pEJnQ&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:52 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DT8F18WYEBECB0HE4NBZ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.5	50471	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	705	OUT	GET /api/sync?callerId=140&gdpr={0,1}&gdpr_consent={empty,consent%20string}&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=1845939505169848484
2024-04-19 13:12:52 UTC	94	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 19 Apr 2024 13:12:51 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.5	50472	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	843	OUT	GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:52 UTC	1442	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ce.lijit.com/merge?pid=92&3pid=187107314970053313&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 0f978ea3-fd4c-45f1-ad26-a108e1bb63a5 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.5	50473	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	864	OUT	GET /pixel?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=&gpp_sid=&redir=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dsovrn%26uid%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu
2024-04-19 13:12:52 UTC	271	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:52 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.5	50475	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	696	OUT	GET /ecm3?id=IhHYAPZHgyDtLY4rTVmqUZsu&ex=sovrn.com&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:52 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: V04N2G8S92P3YEWC3GEB Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.5	50474	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	876	OUT	GET /getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dappnexus%26uid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:52 UTC	1470	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.a-mo.net/setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=appnexus&uid=187107314970053313 AN-X-Request-Uuid: 35e4a63b-8227-4277-b214-c3cfc7ee038e Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.5	50452	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	642	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	411	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:52 GMT location: https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 19 Apr 2024 13:22:52 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.5	50476	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	924	OUT	GET /cchain/0?gdpr=0&cb=https%3A%2F%2Fcs.ingage.tech%2Fv1%2Fsync%2Famx%2Fd420a613-8395-4234-83fd-2a89fd387f7e%3Fuid%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
2024-04-19 13:12:52 UTC	261	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2356 content-type: text/html; charset=utf-8 date: Fri, 19 Apr 2024 13:12:51 GMT server: envoy x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close
2024-04-19 13:12:52 UTC	2356	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 61 36 36 32 61 65 66 30 2d 31 31 31 30 2d 34 34 63 38 2d 62 39 39 64 2d 32 61 63 62 61 34 61 35 64 62 31 38 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=a662aef0-1110-44c8-b99d-2acba4a5db18&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.5	50479	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	859	OUT	GET /beacon?informer=13406715 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; ljtrtbexp=eJxdjLERgDAMA3dxncKyHSthNY7dc5ACTPmnf50yVA4QwcBMNhnxMtEEalWAejXMq2D5sHf2vh%2FyF3AznLiDad%2F9WoYWHV8%3D
2024-04-19 13:12:52 UTC	775	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html Content-Length: 4608 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytYUsn4BXc7y7o25DLF8C4XOOwjgEYjApzG1EdJ4dZf8J2gUIF1CiccPyRSEPV62dNCSxlKRQysydZhT5NDON2In5C9Tv3z7qcH%2F9IAbd1L523Ry9Scc%3D; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-04-19 13:12:52 UTC	4608	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 32 33 20 53 65 6e 74 20 2f 20 2d 31 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (23 Sent / -1 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.5	50484	54.87.122.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	643	OUT	GET /id?c=17248 HTTP/1.1 Host: id.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c
2024-04-19 13:12:52 UTC	918	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: application/json;charset=utf-8 Content-Length: 152 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.14.153 Set-Cookie: _cc_id=2647d031a51b7a31cc96fbee0c73c78c;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4XmNQMDIzMU8xMDZMNDVMMk80NkxOtjRLS0pNNUg2N042t0hmAII0pdwrIBoKAFK7CtM%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4XmNgYGBIU8q9AqSgAAAVmAHK";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 13:01:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Server: Jetty(9.4.38.v20210224)
2024-04-19 13:12:52 UTC	152	IN	Data Raw: 7b 22 70 72 6f 66 69 6c 65 5f 69 64 22 3a 22 32 36 34 37 64 30 33 31 61 35 31 62 37 61 33 31 63 63 39 36 66 62 65 65 30 63 37 33 63 37 38 63 22 2c 22 63 6f 72 65 5f 69 64 22 3a 22 64 36 36 38 33 33 34 34 65 62 33 63 35 39 65 36 35 37 38 65 38 39 61 35 31 35 31 30 31 38 35 63 61 30 32 63 65 34 37 34 65 39 36 31 30 62 62 62 39 35 64 61 38 34 63 63 39 32 63 61 61 32 62 34 22 2c 22 65 78 70 69 72 79 5f 74 73 22 3a 31 37 31 34 31 33 37 31 37 32 32 31 38 7d Data Ascii: {"profile_id":"2647d031a51b7a31cc96fbee0c73c78c","core_id":"d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4","expiry_ts":1714137172218}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.5	50454	3.218.162.229	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	911	OUT	GET /sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D%26partnerId%3Dsundaysky%26userId%3D%24%7Bssky_uuid%7D HTTP/1.1 Host: vop.sundaysky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	1004	IN	HTTP/1.1 302 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 0 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff Set-Cookie: sskyu=d6.f67b530ab25f49d8bfcc9cac8250cd2b; Domain=sundaysky.com; Expires=Sun, 19-Apr-2026 13:12:52 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskyCreationTime=1713532372111; Domain=sundaysky.com; Expires=Sun, 19-Apr-2026 13:12:52 GMT; Path=/; Secure; SameSite=None Expires: Sat, 1 Apr 2000 00:00:00 GMT Pragma: no-cache Cache-control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate, max-age=0 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI PUR COM NAV INT DEM STA PRE" Location: https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D%26partnerId%3Dsundaysky%26userId%3D%24%7Bssky_uuid%7D&_cvt=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.5	50487	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	872	OUT	GET /merge?pid=80&3pid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB
2024-04-19 13:12:52 UTC	1439	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.5	50461	3.161.188.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	583	OUT	GET /product-loader-code/2cdf4c71-ad6c-487e-b43a-8f1af912284a.js HTTP/1.1 Host: product.instiengage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28811 Connection: close Date: Fri, 19 Apr 2024 13:12:53 GMT Last-Modified: Thu, 18 Apr 2024 14:13:07 GMT ETag: "dd4bfe4691a358a21fc1a60bd968757e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600,public x-amz-version-id: DAcxpfmTdnbuF7k9nIcUrO1SJisCm5nd Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f9469697124eb80051d25655c550eb3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: 83277Slb03WZOgjTXm6glouDQRAv8rnAB1v2ulwWQwYppEtDNjzF_g==
2024-04-19 13:12:52 UTC	15774	IN	Data Raw: 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 65 6e 61 62 6c 65 45 6d 62 65 64 20 3d 20 74 72 75 65 3b 20 0a 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 61 63 63 6f 75 6e 74 55 55 49 44 20 3d 20 27 62 64 34 35 61 33 36 37 2d 64 35 66 61 2d 34 32 30 37 2d 39 61 65 63 2d 31 61 63 62 61 38 65 63 35 32 65 62 27 3b 20 0a 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 73 69 74 65 55 55 49 44 20 3d 20 27 32 63 64 66 34 63 37 31 2d 61 64 36 63 2d 34 38 37 65 2d 62 34 33 61 2d 38 66 31 61 66 39 31 32 32 38 34 61 27 3b 20 0a 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 65 6e 61 62 6c 65 4e 65 77 41 75 74 68 46 6c 6f 77 20 3d 20 74 72 75 65 3b 20 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 65 6e 61 62 6c 65 45 6e 68 61 6e Data Ascii: window.Insticator.enableEmbed = true; window.Insticator.accountUUID = 'bd45a367-d5fa-4207-9aec-1acba8ec52eb'; window.Insticator.siteUUID = '2cdf4c71-ad6c-487e-b43a-8f1af912284a'; window.Insticator.enableNewAuthFlow = true; window.Insticator.enableEnhan
2024-04-19 13:12:52 UTC	216	IN	Data Raw: 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 3b 72 65 74 75 72 6e 20 65 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 65 29 29 3a 7b 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 2c 74 2e 6c 47 3d 65 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 28 30 2c 74 2e 63 24 29 28 29 2c 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 29 2c 65 29 3b 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 75 73 65 72 2e 61 64 64 69 74 69 6f 6e 61 6c 44 61 74 61 3d 69 3b 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 6f 2c 77 69 6e 64 6f 77 2e Data Ascii: rage.getItem(o);return e?JSON.parse(window.atob(e)):{}}catch(e){return{}}},t.lG=e=>{const n=(0,t.c$)(),i=Object.assign(Object.assign({},n),e);window.Insticator.user.additionalData=i;try{localStorage.setItem(o,window.
2024-04-19 13:12:52 UTC	1382	IN	Data Raw: 62 74 6f 61 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 74 2e 62 76 3d 28 29 3d 3e 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 49 6e 73 74 69 63 61 74 6f 72 2e 75 73 65 72 2e 61 64 64 69 74 69 6f 6e 61 6c 44 61 74 61 3d 7b 7d 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6f 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 28 65 3d 3e 7b 22 49 4e 53 54 49 43 41 54 4f 52 5f 53 48 41 52 45 5f 41 44 44 49 54 49 4f 4e 41 4c 5f 55 53 45 52 5f 44 41 54 41 22 3d 3d 3d 65 2e 64 61 74 61 2e 74 79 70 65 26 26 28 30 2c 74 2e 6c 47 29 28 65 2e 64 61 74 61 2e 64 61 74 61 29 2c 22 49 4e 53 54 49 43 41 Data Ascii: btoa(JSON.stringify(i)))}catch(e){}},t.bv=()=>{try{window.Insticator.user.additionalData={},localStorage.removeItem(o)}catch(e){}},window.addEventListener("message",(e=>{"INSTICATOR_SHARE_ADDITIONAL_USER_DATA"===e.data.type&&(0,t.lG)(e.data.data),"INSTICA
2024-04-19 13:12:52 UTC	11439	IN	Data Raw: 61 64 43 6f 6d 6d 65 6e 74 69 6e 67 2c 63 6f 6d 6d 75 6e 69 74 79 3a 73 2e 6c 6f 61 64 43 6f 6d 6d 65 6e 74 69 6e 67 2c 70 72 6f 66 69 6c 65 3a 73 2e 6c 6f 61 64 43 6f 6d 6d 65 6e 74 69 6e 67 2c 63 75 73 74 6f 6d 53 53 4f 3a 75 2e 73 61 76 65 41 75 74 68 43 61 6c 6c 62 61 63 6b 2c 22 6e 65 77 2d 70 72 6f 66 69 6c 65 22 3a 64 2e 6c 6f 61 64 50 72 6f 66 69 6c 65 41 70 70 2c 22 63 6f 6d 6d 65 6e 74 73 2d 63 6f 75 6e 74 65 72 22 3a 61 2e 6c 6f 61 64 43 6f 72 65 43 6f 6d 6d 65 74 69 6e 67 2c 22 63 6f 72 65 2d 63 6f 6d 6d 65 6e 74 69 6e 67 22 3a 61 2e 6c 6f 61 64 43 6f 72 65 43 6f 6d 6d 65 74 69 6e 67 2c 22 65 6e 64 2d 75 73 65 72 2d 70 72 6f 66 69 6c 65 22 3a 67 2e 6c 6f 61 64 65 72 45 6e 64 55 73 65 72 50 72 6f 66 69 6c 65 2c 22 69 6e 73 74 69 63 61 74 6f 72 Data Ascii: adCommenting,community:s.loadCommenting,profile:s.loadCommenting,customSSO:u.saveAuthCallback,"new-profile":d.loadProfileApp,"comments-counter":a.loadCoreCommeting,"core-commenting":a.loadCoreCommeting,"end-user-profile":g.loaderEndUserProfile,"insticator

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.5	50488	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	841	OUT	GET /prebid/setuid?bidder=amx&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&do=www.justjared.com HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:52 UTC	1832	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 04a7cc3e-f97f-48a8-b4c7-f7b91f87e232 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FEVNsVF']wIg2GTtvwG:3!]tbP6j2F-.o%/6/guKFUZ.<L?TM@lZ:If$VV(Ig3NvFY4bZT-ilWt'gYo<Xit%W[^5(M$f@se#e+.<Q!8FetoX$<a; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDctMThUMTM6MTI6NTJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMTlUMTM6MTI6NTJaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.5	50469	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	703	OUT	GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:52 UTC	249	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=fmx&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.5	50470	82.145.213.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	673	OUT	GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPUf67e9fe0c71146baa5554ff263871c94
2024-04-19 13:12:52 UTC	766	IN	HTTP/1.1 302 Found Server: Tengine Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 131 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ce.lijit.com/merge?3pid=OPUf67e9fe0c71146baa5554ff263871c94&gdpr=0&gdpr_consent=&pid=103 Pragma: no-cache Set-Cookie: UID=OPUf67e9fe0c71146baa5554ff263871c94; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-19 13:12:52 UTC	131	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 33 70 69 64 3d 4f 50 55 66 36 37 65 39 66 65 30 63 37 31 31 34 36 62 61 61 35 35 35 34 66 66 32 36 33 38 37 31 63 39 34 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 69 64 3d 31 30 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ce.lijit.com/merge?3pid=OPUf67e9fe0c71146baa5554ff263871c94&gdpr=0&gdpr_consent=&pid=103">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.5	50501	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	2892	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fwww.justjared.com%2F&pid=hBd048qvtwt8a&cb=3&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22photo_Top_Left_160x600_OuterRail%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F21854935662%2C22573693114%2Fjustjared%2Fdesktop%2Fadhesion%2Fphoto%22%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&schain=1.0%2C1!mediatradecraft.com%2C111111%2C1%2C%2CTradecraft%2520LLC%2520dba%2520Media%2520Tradecraft%2C&sm=27bf8ce4-278f-460a-b8c9-351253d0a972&pubid=78a541f2-9748-4ba5-9cda-85fd7a44b234&gdpre=0&gdprl=%7B%22status%22%3A%22tcfv2-success%22%7D&vm=%7B%22ids%22%3A%7B%22audigent%22%3A%220608bh96a97jjd8e7ckjkgfeel9hfje7cli4gs60e62wwk4m2iywyqomm06sowm2i%22%2C%22lotame%22%3A%22d6683344eb3c59e6578e89a51510185ca02ce474e9610bbb95da84cc92caa2b4%22%2C%22pubcommon%22%3A%22a59c0898-b4d5-4e01-b773-f0480b65a0cc%22%7D%2C%22vendors%22%3A%7B%22arcspan%22%3A%7B%22data%22%3A%7B%22default%22%3A%7B%22site%22%3A%7B%22name%22%3A%22arcspan%22%2C%22cat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22sectioncat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22pagecat%22%3A%5B%22IAB1-7%22%2C%22IAB1-2%22%5D%2C%22keywords%22%3A%22Outlander%20(TV%20series)%2CTony%20DiNozzo%20and%20Ziva%20David%2CJamie%20Fraser%20(character)%2CClaire%20Fraser%20(character)%2CEntertainment%2CTelevision%2CDiana%20Gabaldon%2CRichard%20Lewis%20(comedian)%2CavM7hHWe%2C8FWC3Bns%22%2C%22content%22%3A%7B%22data%22%3A%5B%7B%22name%22%3A%22arcspan%22%2C%22segment%22%3A%5B%7B%22id%22%3A%22640%22%7D%2C%7B%22id%22%3A%22432%22%7D%5D%2C%22ext%22%3A%7B%22segtax%22%3A6%7D%7D%5D%7D%2C%22domain%22%3A%22www.justjared.com%22%2C%22page%22%3A%22https%3A%2F%2Fwww.justjared.com%2F%22%2C%22ref%22%3A%22%22%7D%7D%7D%7D%7D%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:53 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 173 Connection: close Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 13:12:52 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 0ed91fd9817789661f8fd99e9f14d4be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: hnACq3OO2l3mYGIPEfy6Javnzy1Iao_iZiZlAzxYTTEiN7p-DskN3A==
2024-04-19 13:12:53 UTC	173	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 6e 2d 73 68 61 72 65 74 68 72 6f 75 67 68 5f 6e 2d 6d 69 6e 75 74 65 4d 65 64 69 61 5f 70 6d 2d 64 62 35 5f 6e 2d 4f 67 75 72 79 5f 70 70 74 5f 73 6e 62 5f 63 6e 76 5f 6e 2d 6e 61 74 69 76 6f 5f 6e 2d 52 69 73 65 22 2c 22 63 62 22 3a 22 33 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=n-sharethrough_n-minuteMedia_pm-db5_n-Ogury_ppt_snb_cnv_n-nativo_n-Rise","cb":"3"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.5	50498	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	778	OUT	POST /v1/openrtb HTTP/1.1 Host: ex.ingage.tech Connection: keep-alive Content-Length: 1479 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:52 UTC	1479	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 38 34 38 35 34 65 63 65 36 64 33 64 62 61 22 2c 22 74 6d 61 78 22 3a 32 30 30 30 2c 22 73 6f 75 72 63 65 22 3a 7b 22 66 64 22 3a 31 2c 22 74 69 64 22 3a 22 37 39 31 32 34 31 39 31 2d 31 66 33 66 2d 34 34 62 63 2d 39 32 36 36 2d 35 39 37 34 31 30 32 61 34 32 38 32 22 2c 22 65 78 74 22 3a 7b 22 73 63 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 22 3a 22 6d 65 64 69 61 74 72 61 64 65 63 72 61 66 74 2e 63 6f 6d 22 2c 22 73 69 64 22 3a 22 31 31 31 31 31 31 22 2c 22 68 70 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 54 72 61 64 65 63 72 61 66 74 20 4c 4c 43 20 64 62 61 20 4d 65 64 69 61 20 54 72 61 64 65 63 72 61 66 74 22 2c 22 72 69 64 22 3a 22 39 38 34 Data Ascii: {"id":"984854ece6d3dba","tmax":2000,"source":{"fd":1,"tid":"79124191-1f3f-44bc-9266-5974102a4282","ext":{"schain":{"ver":"1.0","complete":1,"nodes":[{"asi":"mediatradecraft.com","sid":"111111","hp":1,"name":"Tradecraft LLC dba Media Tradecraft","rid":"984
2024-04-19 13:12:53 UTC	329	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 880 Connection: close vary: Origin access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d2610ea10452c-ATL
2024-04-19 13:12:53 UTC	880	IN	Data Raw: 7b 22 69 64 22 3a 22 39 38 34 38 35 34 65 63 65 36 64 33 64 62 61 22 2c 22 62 69 64 69 64 22 3a 22 30 31 48 56 56 37 54 31 59 52 35 50 50 4e 57 36 54 4a 57 44 51 57 53 52 31 54 22 2c 22 6e 62 72 22 3a 30 2c 22 65 78 74 22 3a 7b 22 73 79 6e 63 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 69 6e 67 61 67 65 2e 74 65 63 68 2f 76 31 2f 73 79 6e 63 50 61 67 65 2f 72 75 62 69 63 6f 6e 3f 75 73 65 72 49 64 3d 61 31 33 32 34 65 34 39 2d 39 66 39 62 2d 34 36 64 38 2d 39 64 63 35 2d 38 33 38 37 36 38 63 61 31 63 33 36 26 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 25 32 46 75 74 69 6c 73 25 32 46 Data Ascii: {"id":"984854ece6d3dba","bidid":"01HVV7T1YR5PPNW6TJWDQWSR1T","nbr":0,"ext":{"sync":[{"type":"iframe","url":"https://cs.ingage.tech/v1/syncPage/rubicon?userId=a1324e49-9f9b-46d8-9dc5-838768ca1c36&to=https%3A%2F%2Fsecure-assets.rubiconproject.com%2Futils%2F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.5	50491	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	859	OUT	POST /c/hb/bid HTTP/1.1 Host: s.seedtag.com Connection: keep-alive Content-Length: 714 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:52 UTC	714	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 70 75 62 6c 69 73 68 65 72 54 6f 6b 65 6e 22 3a 22 36 31 37 33 2d 37 38 32 31 2d 30 31 22 2c 22 63 6d 70 22 3a 74 72 75 65 2c 22 74 69 6d 65 6f 75 74 22 3a 32 30 30 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 37 2e 30 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 66 69 78 65 64 22 2c 22 61 75 63 74 69 6f 6e 53 74 61 72 74 22 3a 31 37 31 33 35 33 32 33 37 30 36 38 34 2c 22 74 74 66 62 22 3a 38 34 30 2c 22 62 69 64 52 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 64 22 3a 22 38 33 31 64 30 35 35 65 62 39 65 30 35 34 35 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 22 3a 22 35 65 36 31 61 65 62 34 2d 61 65 65 34 2d 34 34 66 38 2d 61 62 Data Ascii: {"url":"https://www.justjared.com/","publisherToken":"6173-7821-01","cmp":true,"timeout":2000,"version":"8.37.0","connectionType":"fixed","auctionStart":1713532370684,"ttfb":840,"bidRequests":[{"id":"831d055eb9e0545","transactionId":"5e61aeb4-aee4-44f8-ab
2024-04-19 13:12:53 UTC	1065	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 96 Vary: X-HTTP-Method-Override Set-Cookie: st_uid=53a4a572-fc56-446e-bfa3-4768d942056e; Max-Age=31536000; Domain=.seedtag.com; Path=/; Expires=Sat, 19 Apr 2025 13:12:52 GMT; Secure; SameSite=None Set-Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; Max-Age=2592000; Domain=.seedtag.com; Path=/; Expires=Sun, 19 May 2024 13:12:52 GMT; HttpOnly; Secure; SameSite=None Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	96	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 53 79 6e 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 73 65 65 64 74 61 67 2e 63 6f 6d 2f 63 73 2e 68 74 6d 6c 3f 70 74 3d 36 31 37 33 2d 37 38 32 31 2d 30 31 26 70 63 3d 55 53 26 63 6d 70 3d 74 72 75 65 26 75 73 3d 31 59 4e 4e 22 7d Data Ascii: {"bids":[],"cookieSync":"https://cs.seedtag.com/cs.html?pt=6173-7821-01&pc=US&cmp=true&us=1YNN"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.5	50492	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	902	OUT	POST /cdb?profileId=207&av=36&wv=8.37.0&cb=13044900888&lsavail=1&bundle=r2dEhF82MGEweVgzWll2Z1YlMkJlc3FvY3lzVDcwTFNCNTQlMkJNNkw1T09pckVYUlhWaUNyUUdpeWJhNWYwRENqZElOUiUyRjdTMjZ3cXQ5WGxrTFdWVzZ3MFdvJTJCSEEzYW11ejZOWnBXcXBuY1ZVdVFlNkVlT2VGS1V0cXpyd3locndRT2NrQWdT HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 2334 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff
2024-04-19 13:12:52 UTC	2334	OUT	Data Raw: 7b 22 69 64 22 3a 22 66 64 36 63 61 38 38 37 2d 38 31 31 64 2d 34 66 37 35 2d 38 34 64 34 2d 64 31 39 38 64 66 38 62 36 37 35 34 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 31 30 34 32 33 7d 2c 22 72 65 67 73 22 3a 7b 22 63 6f 70 70 61 22 3a 30 2c 22 65 78 74 22 3a 7b 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 7d 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 38 35 30 34 33 35 65 63 64 39 38 66 35 36 37 22 2c 22 69 6d 70 69 64 22 3a 22 70 68 6f 74 6f 5f 54 6f 70 5f 4c 65 66 74 5f 31 36 30 78 36 30 30 5f 4f 75 74 65 72 52 61 69 6c 22 2c 22 74 72 61 6e 73 61 Data Ascii: {"id":"fd6ca887-811d-4f75-84d4-d198df8b6754","publisher":{"url":"https://www.justjared.com/","networkid":10423},"regs":{"coppa":0,"ext":{"gdpr":0,"us_privacy":"1YNN"}},"slots":[{"slotid":"850435ecd98f567","impid":"photo_Top_Left_160x600_OuterRail","transa
2024-04-19 13:12:52 UTC	355	IN	HTTP/1.1 200 OK content-length: 2528 content-type: application/json date: Fri, 19 Apr 2024 13:12:52 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:52 UTC	2528	IN	Data Raw: 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 38 35 30 34 33 35 65 63 64 39 38 66 35 36 37 22 2c 22 69 6d 70 69 64 22 3a 22 70 68 6f 74 6f 5f 54 6f 70 5f 4c 65 66 74 5f 31 36 30 78 36 30 30 5f 4f 75 74 65 72 52 61 69 6c 22 2c 22 61 72 62 69 74 72 61 67 65 69 64 22 3a 22 36 36 32 32 36 64 64 34 35 64 64 32 33 39 31 37 62 32 63 32 38 64 66 31 32 31 34 64 30 30 30 30 22 2c 22 7a 6f 6e 65 69 64 22 3a 31 36 30 38 37 38 36 2c 22 63 70 6d 22 3a 30 2e 30 37 31 31 38 34 35 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 2c 22 63 72 65 61 74 69 76 65 22 3a 22 3c 64 69 76 20 69 64 3d 27 62 65 61 63 6f 6e 5f 30 2d Data Ascii: {"slots":[{"slotid":"850435ecd98f567","impid":"photo_Top_Left_160x600_OuterRail","arbitrageid":"66226dd45dd23917b2c28df1214d0000","zoneid":1608786,"cpm":0.0711845000000000000000000000,"currency":"USD","width":728,"height":90,"creative":"<div id='beacon_0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.5	50506	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	794	OUT	GET /ads/measurement/l?ebcid=ALh7CaQbh-g0iSq-f0OBcz9MuQmnAowUO-LuRsTL7YanjewYN-Qyfr1I0gL8oVYjOoQzxqwev8OAme6fN1e3KcT1VZ_4Nbpm8w HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:52 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.5	50494	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	731	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 2587 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18
2024-04-19 13:12:52 UTC	2587	OUT	Data Raw: 7b 22 61 22 3a 22 33 64 61 39 66 64 64 37 2d 36 65 36 37 2d 34 35 35 34 2d 61 66 66 62 2d 65 38 62 39 63 35 66 34 61 35 34 35 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 33 37 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 51 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 66 61 6c 73 65 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a 7b 22 67 70 70 53 74 Data Ascii: {"a":"3da9fdd7-6e67-4554-affb-e8b9c5f4a545","B":0,"b":"www.justjared.com","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.37.0","vg":"pbjs","i":"anVzdGphcmVkLmNvbQ","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":false,"gc":"","gpp":{"gppSt
2024-04-19 13:12:53 UTC	538	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, private, must-revalidate content-length: 858 content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:52 GMT server: envoy vary: origin, Accept-Encoding set-cookie: __amc=2_1713532366_1713532372; path=/; domain=prebid.a-mo.net; expires=Sat, 19 Apr 2025 13:12:53 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 163 connection: close
2024-04-19 13:12:53 UTC	858	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 5f 65 3d 43 73 41 42 53 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 56 49 4c 59 57 46 7a 4c 57 51 34 4e 54 51 31 5a 47 4e 61 43 48 42 69 59 54 45 75 4d 79 34 30 61 68 46 33 64 33 63 75 61 6e 56 7a 64 47 70 68 63 6d 56 6b 4c 6d 4e 76 62 66 6f 42 42 6a 67 75 4d 7a 63 75 4d 4f 67 43 41 59 67 44 7a 74 75 4a 73 51 61 6f 41 30 66 71 41 79 51 7a 5a 47 45 35 5a 6d 52 6b 4e 79 30 32 5a 54 59 33 4c 54 51 31 4e 54 51 74 59 57 5a 6d 59 69 31 6c 4f 47 49 35 59 7a 56 6d 4e Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1YNN&_e=CsABShF3d3cuanVzdGphcmVkLmNvbVILYWFzLWQ4NTQ1ZGNaCHBiYTEuMy40ahF3d3cuanVzdGphcmVkLmNvbfoBBjguMzcuMOgCAYgDztuJsQaoA0fqAyQzZGE5ZmRkNy02ZTY3LTQ1NTQtYWZmYi1lOGI5YzVmN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.5	50489	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	742	OUT	GET /setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=amx_com&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; amdgt_lk%40cfs=1
2024-04-19 13:12:52 UTC	347	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 19 Apr 2024 13:12:52 GMT server: envoy set-cookie: _sv3_14=1; path=/; domain=sync.a-mo.net; expires=Sat, 20 Apr 2024 13:12:52 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.5	50496	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	2219	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 33 35 33 32 33 37 30 37 31 34 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 39 35 62 34 63 62 35 65 62 64 31 32 64 66 34 22 2c 22 74 61 67 69 64 22 3a 22 32 37 37 38 32 33 33 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 61 64 68 65 73 69 6f 6e 2e 2a 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 Data Ascii: {"id":"1713532370714","at":1,"cur":["USD"],"imp":[{"id":"95b4cb5ebd12df4","tagid":"2778233","secure":1,"ext":{"data":{"aupname":"/21854935662,22573693114/justjared/desktop/adhesion.*","adserver":{"name":"gam","adslot":"/21854935662,22573693114/justjared/d
2024-04-19 13:12:52 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 19 Apr 2024 13:12:52 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.5	50497	3.222.148.106	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	808	OUT	POST /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.justjared.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 2861 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:52 UTC	2861	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4a 75 73 74 4a 61 72 65 64 5f 52 4f 53 5f 37 32 38 78 31 35 30 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 75 70 6e 61 6d 65 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 61 64 68 65 73 69 6f 6e 2e 2a 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 31 38 35 34 39 33 35 36 36 32 2c 32 32 35 37 33 36 39 33 31 31 34 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f Data Ascii: {"imp":[{"id":0,"tagid":"JustJared_ROS_728x150","banner":{"format":[{"w":728,"h":90}]},"fpd":{"context":{"data":{"aupname":"/21854935662,22573693114/justjared/desktop/adhesion.*","adserver":{"name":"gam","adslot":"/21854935662,22573693114/justjared/deskto
2024-04-19 13:12:53 UTC	743	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" access-control-allow-origin: https://www.justjared.com access-control-allow-credentials: true set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:53 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None content-length: 5379 connection: close
2024-04-19 13:12:53 UTC	5379	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 7b 22 69 6d 70 5f 69 64 22 3a 22 30 22 2c 22 63 72 69 64 22 3a 22 32 37 31 31 5f 36 34 5f 31 31 32 36 36 31 35 38 22 2c 22 63 70 6d 22 3a 30 2e 30 30 38 2c 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 2c 22 61 64 22 3a 22 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 49 4d 47 27 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 74 6c 78 2e 33 6c 69 66 74 2e 63 6f 6d 2f 68 65 61 64 65 72 2f 6e 6f 74 69 66 79 3f 70 78 3d 31 26 70 72 3d 24 7b 41 55 43 54 49 4f 4e 5f 50 52 49 43 45 7d 26 74 73 3d 31 37 31 33 35 33 32 33 37 32 26 61 69 64 3d 34 32 36 36 33 30 37 39 35 32 39 36 36 34 31 36 32 32 33 37 35 32 30 26 65 63 3d 32 37 31 31 5f 36 34 5f 31 31 32 36 36 31 Data Ascii: {"bids":[{"imp_id":"0","crid":"2711_64_11266158","cpm":0.008,"width":728,"height":90,"ad":"<script>document.createElement('IMG').src=\"https://tlx.3lift.com/header/notify?px=1&pr=${AUCTION_PRICE}&ts=1713532372&aid=42663079529664162237520&ec=2711_64_112661

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.5	50493	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	2086	OUT	POST /prebid/multi/6513dc26eb0d65962a567a65 HTTP/1.1 Host: exchange.kueezrtb.com Connection: keep-alive Content-Length: 1255 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdzj1_be32264c=Wao15B8eChMpoPz3idC4ORoVIho5HgoiCRFTP2ECcQ8EdVovQF4xGQVdVnQAdgBTJVF9RFhyVhFfV3RQcglRdFEuQ1liSAJeByJXIwBVIl9vXE1mSFVcU3tVegAAIA1%2FRlxlGAVQBXMHdA1Hb0p7Q1gxTANZV3JVIQ5RcV95RFdmHAtQVHIWbhpTcF8sRl5jQgBaVHQDdwBXcFt8FVZmGwVLSGECcQ8EdVguFlszTlVbBXJWdQ4GdF0vRllyVhFfV3RVdwBUe1ksE1lkSARdUHsCJAsAJVtvXE1mSQQIUSZXJgtWc196RVdiSQBYAXtRJAxHb0p7Q1gxTAIPUHJVIQ5RcV95RFdmHAsMBiEWbhpTcF17El1iS1JZUSZScF5dd1ksR1hpQgtLSGECcQgDd1p%2FFF1nTFcLBiUDegxQIAp0SA1yJx9LByxBLExHeVhhUgg0CkFLXjhJbhoWJhs%2BGQA%2BWAlLUSIFdw0Ac1lgQg1hHB4LViUBbwEAe1pgFl1hQ1INXCUFIAhVYURvEwA%2BFFYKECpbLHEBYVJvRlpoSgdfByEMcwBcJVAsE181SQReBSIHYEU%3D; vdz_sync=5f2f51a7-e226-bbae-76c9-2d8714f31edc; vdzj1_a0c8efe3=3v313KF8Ajgy0IWA1NMGRIIBgTF1U7JGMLFWlwC3YLUUtSeWYgUnh%2FdA91Xl9PVnBndQZsZ2QOcl0DSQF9YHhSfX10CnBdBBhTKG9xUHlpahp3WAFMB3E2eQkrKCMKd1lSGwZwNnECeH5kFGNcVE5Rf2dxAn8qJQ51WFBNBHFhJwl3e3cabUhRSgcoYXACdnh1CHZdUkECemRwVHd9Jw5jRkVPA342dwEtLXJbdQxVGAErYHdSeX4kDndIS1sGemAgBHZ6fgkgCVFNAn5jdQl4LXVdJ1lFVRJ%2FZHZQey4lXHJZV04HfG9zAn16IwAkDFNbHGthcgYvfXdedVsGGgZ9ZXYFenNwXnkPBRsSZXV3Ant9JApzWwZJBSwxc1d2f3dZdl1eQQhre2MHfXsgDHNYA0sHfzMjUyh8fgx0CQVACCt1bRN4eHFZd1lTHQQqYycDL3okD3cJUE8BLW9jHWx9dQ8gXwIfAX00dVd8KndadlwETgV9MXcTE2dkWy4fCQ0Sc2dtEykvNkpjUBxbWToSFBN0LSdUMg9LW1ctJzMTdGl2Gm1IAB1AOxQuXz0uKExjUEVbHGsiMmE8IjBZIhNFQxJ4Dg9%2FbDZqGjIPFApZJjljC2wucg50WAFKAmQxcAF5ZncLdFpKSAQtZGwBK3MlXHhaUx1RfjRjHWwoKVYvDwQNWSY5CFVscWQOdFtUHVN7YSRTfi9wDXhcVRgFf2AgB3tpahooGS4fQig6JBN0PzRNJBc%3D
2024-04-19 13:12:52 UTC	1255	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 22 2c 22 75 71 73 22 3a 22 22 2c 22 63 62 22 3a 31 37 31 33 35 33 32 33 37 30 36 39 38 2c 22 62 69 64 46 6c 6f 6f 72 22 3a 22 31 22 2c 22 62 69 64 49 64 22 3a 22 38 37 64 39 33 38 30 64 35 38 39 36 64 32 34 22 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 70 68 6f 74 6f 5f 54 6f 70 5f 4c 65 66 74 5f 31 36 30 78 36 30 30 5f 4f 75 74 65 72 52 61 69 6c 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 36 35 6c 6b 37 63 31 39 32 38 38 32 72 30 30 31 31 38 31 33 66 6e 39 22 2c 22 73 69 7a 65 73 22 3a 5b 22 37 32 38 78 39 30 22 5d 2c 22 75 6e 69 71 75 65 44 65 61 6c 49 64 22 3a 22 5f 31 34 Data Ascii: {"url":"https%3A%2F%2Fwww.justjared.com%2F","uqs":"","cb":1713532370698,"bidFloor":"1","bidId":"87d9380d5896d24","referrer":null,"adUnitCode":"photo_Top_Left_160x600_OuterRail","publisherId":"65lk7c192882r0011813fn9","sizes":["728x90"],"uniqueDealId":"_14
2024-04-19 13:12:53 UTC	1310	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.justjared.com cache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control set-cookie: vdzj1_4c750e18=kwS12O2wLY0CvtnH0NBAHLStELRMGHWoKFBBBf25Uc0dAWXFTfARFfmgHIBcXD3AALgVVYHsGcRBBWXBRdwoSLzwCdUVBDH4JLgJEemwSb1RCXX9ReQNEdGoDc0FDW3ACfAFGKWAGIkBWQmoGfAUWemlTJUIXWi4CLgMVe29TdEMWWH4SYxBBf25Rdk5FVnlRLARDfm4Ed05CCHtVKQFVYHsGcEEVWy1TKwFEfG4Hdk5GXXsBKgoSKm0Sb1RCXX0GLQBFfTgAdhMSXC4IewMWe24Je05WQmoGfAIReGsCJ0RDWCxSLVRAdG0FIBRNVioSYxBBf2pTdEARWH8EeQdGe25RIE4SCioJKgNVYHsGcEEVWHpSfwMWL28EcUFAWnAGKQtHeG4Sb1RCXX9ReQJHf2hRIEBAXH8EewpBKmEJc0dWQmoGfAUWemhWd0cVDX4EfQVDeGEGJU4RDCoSYxBBf25RdUVACnxTe1RFLWhSdEAXWX4BKwpVYHsGcEEVWy1WfgYUeD8CIkcWWX5TeAdDKm8SHlpWDSdFIUZVdmkcYREQHjoSdUlVJSp1FlROCClcPFdbbj5UMwRWVGoAbR5VKz1AMTUbADtVIUZVdnsSb1QBHRhCJkQWLyASeVRFNwZ%2BbU9bbipVMAUdASYSdRASeG8FcRBHXGVWfgJAYWgDdkZZX3xUfB9HKWFTJ09EWixReFFVYHtTLBgaCytEJl0ZBT0SeVRCW3AAewQVdD1WckZDXn4AdgRPL2oIdhRWQmpZPHsRPjhdJlROGjpFKk8%3D; Domain=.kueezrtb.com; Path=/; Expires=Fri, 19 Apr 2024 13:27:53 GMT; Secure; SameSite=None date: Fri, 19 Apr 2024 13:12:53 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.5	50505	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	1503	OUT	GET /pcs/view?xai=AKAOjsvu454L7TOz9sdjwmXrM5a8yjQWbv_7qp3dcm1HAemUkrL6-WOcFIv0gwccwUlGJsRJigPOROSIkx6RYKhVRf_FLksxANdhDe2yA0lEhMq9M8wUn0558BUTSI3CpozqMWjaGgqeiwXUd-Qw3w0OYjbtyZlzO3OfOxU7HG7exbrJPYNxYuoBn7gTwDlBcU0s_ICvIouBYcS3EGpiwE8Zc6FvZNuTehqIbp_WS9JkS4bNBhmVUBdS5YkzRTj_WrORuGJQdnYn8THi9NQpfYwqLNA-W84uJ-XYejauF5s6LhupOQ9ep5i7IKqtyf3CDcKuq9QyJILnvhZQhVsiUF4ba-kudHTYwNjmcHQtER3ODD0Hb6w2rJOJCfrBhiC0wGLkPucibw&sai=AMfl-YQ-zp7vGKh1QJZdz7UfSYnKdvuvereZNjVO7zvSYrRtdqtFGCaPXtRxQt60UmvWZsYTNm6cP6y0zwkbmGo152ee_C8HZs5IomPAGAogSFoF8bfTUMhgAjcFxEtmqhOSi3JrFBDWkHOSER7UF59LthTw&sig=Cg0ArKJSzE4SBJAOezbrEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:52 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:52 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:52 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.5	50481	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	756	OUT	GET /cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11585%26id%3D%3Cvsid%3E HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3565339623115671000V10
2024-04-19 13:12:53 UTC	619	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ris={{APID}}~~25;Expires=Sat, 19 Apr 2025 13:12:53 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Fri, 19 Apr 2024 13:12:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 13:12:53 GMT Connection: close
2024-04-19 13:12:53 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-19 13:12:53 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.5	50483	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	812	OUT	GET /usermatchredir?s=191503&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3De8ba6a97-4f0e-4f17-a097-1f0587909fd0%26bidder%3Dindex_rtb%26uid%3D HTTP/1.1 Host: ssum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:52 UTC	1094	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Length: 0 Connection: close Location: https://sync.a-mo.net/setuid?gdpr=0&A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=index_rtb&uid=ZiJtysAoIp0AACTzAsBeOAAA%262584 CF-Ray: 876d26121a2612d2-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:52 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:52 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F28rEP8nPkI6RCl7LtDOX%2Bo0XUAGioIwo%2FErYdRsVy45RdzteTA9S6IzYhlRx8KZjW%2BlgcUFlo8Fux0W0CRWgdswNbOnYXYOAK0UePQafzFz9IQmEIjCl1pY%2BGLouIBzJ%2FH65JPb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.5	50508	13.32.230.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	559	OUT	GET /skeleton.js?adslot=hluad_728x90_ HTTP/1.1 Host: static.adsafeprotected.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	630	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17 Connection: close Date: Fri, 19 Apr 2024 01:23:01 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 17 Aug 2020 23:54:35 GMT ETag: "53fab767ecbd3bf07990b10246befbd4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: nylqTweorRThFHMBJSrf_fHcWx3KVKN3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f3f54921f9de85e82e94a5dc59a32f40.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C4 X-Amz-Cf-Id: xfaOqMMl7j9ZgE_h-OEhGRWbFufr6SnI9q4mF34lkHXm-BSB92h8Sw== Age: 42591
2024-04-19 13:12:52 UTC	17	IN	Data Raw: 22 61 64 20 70 6c 61 63 65 68 6f 6c 64 65 72 22 3b Data Ascii: "ad placeholder";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.5	50477	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	557	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	379	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://www.justjared.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:52 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:52 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 65 39 6c 6c 52 67 39 5a 37 62 6f 65 56 62 53 41 37 68 45 48 39 77 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"e9llRg9Z7boeVbSA7hEH9w=="}
2024-04-19 13:12:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.5	50486	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	753	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=58637582-4b7e-42fe-b59a-889f13122ef7&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dadaptmx%26user_id%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 13:12:52 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.5	50480	54.224.27.195	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	634	OUT	GET /ibs:dpid=87880&dpuuid=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	780	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Length: 0 Connection: close X-TID: vttFltdFTXw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=87880&dpuuid=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb DCS: dcs-prod-va6-1-v059-0192ab79d.edge-va6.demdex.com 0 ms set-cookie: demdex=06283770382809365182374221610671770227; Max-Age=15552000; Expires=Wed, 16 Oct 2024 13:12:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.5	50509	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	672	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 13:12:52 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.5	50511	104.22.53.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	567	OUT	GET /hadron.js?partner_id=450&sync=1&url=about%3Asrcdoc HTTP/1.1 Host: cdn.hadronid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	545	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: application/javascript Content-Length: 56077 Connection: close Cf-Bgj: minify ETag: "4f8d7eccb8b77bff110a91871ebadcc0" Last-Modified: Thu, 07 Mar 2024 15:57:22 GMT x-amz-id-2: wVIO1wrs31x1jKRIz3dKPn3IKJaxmFZdB4TaOgRyJwNYeBol3+8I/Y1HD2dEOHBU8sCH74De62g= x-amz-request-id: GPA71GZPJYF3GMCR CF-Cache-Status: HIT Age: 6 Expires: Fri, 19 Apr 2024 14:12:52 GMT Cache-Control: public, max-age=3600 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d26126e6a44e7-ATL
2024-04-19 13:12:52 UTC	824	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 49 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 4a 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 49 5b 65 5d 2e 63 61 6c 6c 28 4a 2e 65 78 70 6f 72 74 73 2c 4a 2c 4a 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 4a 2e 6c 3d 21 30 2c 4a 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 49 2c 6e 2e 63 3d 69 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 65 29 7b 6e 2e 6f 28 49 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 49 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(I){var i={};function n(e){if(i[e])return i[e].exports;var J=i[e]={i:e,l:!1,exports:{}};return I[e].call(J.exports,J,J.exports,n),J.l=!0,J.exports}n.m=I,n.c=i,n.d=function(I,i,e){n.o(I,i)\|\|Object.defineProperty(I,i,{enumerable:!0,get:e})},n.r=fun
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 69 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 49 2c 69 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 49 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 63 6f 6e 73 74 20 65 3d 28 49 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 64 61 74 61 3a 5b 5d 2c 61 64 64 44 61 74 61 3a 28 49 2c 69 29 3d 3e 7b 65 2e 64 61 74 61 2e 70 75 73 68 28 7b 6b 65 79 3a 49 2c 76 61 6c 75 65 3a 69 7d 29 2c 65 2e 61 64 64 65 64 5b 49 5d 3d 21 30 7d 2c 61 64 64 65 64 3a 7b 7d 7d 3b 6c 65 74 20 4a 3d 2d 31 3b 63 6f 6e 73 74 20 73 3d 6a 3d 3e 7b 69 66 28 4a 2b Data Ascii: },n.o=function(I,i){return Object.prototype.hasOwnProperty.call(I,i)},n.p="",n(n.s=0)}([function(I,i,n){"use strict";n.r(i);const e=(I,i,n)=>{const e={data:[],addData:(I,i)=>{e.data.push({key:I,value:i}),e.added[I]=!0},added:{}};let J=-1;const s=j=>{if(J+
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 2f 22 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 3d 49 7d 7d 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 2b 49 7d 63 6f 6e 73 74 20 4d 3d 5b 22 30 31 22 2c 22 31 34 22 2c 22 32 37 22 2c 22 33 61 22 2c 22 34 64 22 2c 22 35 67 22 2c 22 36 6a 22 2c 22 37 6d 22 2c 22 38 70 22 2c 22 39 73 22 2c 22 61 76 22 2c 22 62 79 22 2c 22 63 31 22 2c 22 64 34 22 2c 22 65 37 22 2c 22 66 61 22 2c 22 67 64 22 2c 22 68 67 22 2c 22 69 6a 22 2c 22 6a 6d 22 2c 22 6b 70 22 2c 22 6c 73 22 2c 22 6d 76 22 2c 22 6e 79 22 2c 22 6f 31 22 2c 22 70 34 22 2c 22 71 37 22 2c 22 72 61 22 2c 22 73 64 22 2c 22 74 67 22 5d 3b 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b Data Ascii: /"))}catch(n){i=I}}var n;return i+I}const M=["01","14","27","3a","4d","5g","6j","7m","8p","9s","av","by","c1","d4","e7","fa","gd","hg","ij","jm","kp","ls","mv","ny","o1","p4","q7","ra","sd","tg"];(Object.create(null),"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijk
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 4a 35 49 6e 31 39 66 58 31 39 4c 43 4a 70 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 70 74 49 6e 31 39 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 64 47 63 69 66 53 77 69 65 43 49 36 65 79 4a 76 49 6a 70 37 49 6d 73 69 4f 6e 73 69 65 69 49 36 65 79 49 30 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6f 5a 79 4a 39 66 58 31 39 66 58 30 73 49 6d 73 69 4f 6e 73 69 62 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e Data Ascii: 7InQiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImJ5In19fX19LCJpIjp7Im8iOnsidCI6eyJrIjp7InkiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImptIn19fX19fSwidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoidGcifSwieCI6eyJvIjp7ImsiOnsieiI6eyI0Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJoZyJ9fX19fX0sImsiOnsibSI6eyJnIjp7In
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 49 6a 70 37 49 6d 34 69 4f 6e 73 69 64 53 49 36 65 79 49 77 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 52 6b 49 6e 31 39 66 58 31 39 66 58 31 39 66 53 77 69 65 69 49 36 65 79 4a 70 49 6a 70 37 49 6d 34 69 4f 6e 73 69 61 79 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 31 5a 79 4a 39 66 58 31 39 4c 43 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6a 64 74 49 69 77 69 65 53 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 62 79 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 Data Ascii: Ijp7Im4iOnsidSI6eyIwIjp7InkiOnsibyI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6IjRkIn19fX19fX19fSwieiI6eyJpIjp7Im4iOnsiayI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiI1ZyJ9fX19LCJrIjp7IngiOnsiXHUwMDAwIjp7fSwibWV0YSI6IjdtIiwieSI6eyJxIjp7Im8iOnsibyI6eyJ0Ijp7Im0iOnsiXHU
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 62 79 49 36 65 79 4a 36 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 73 63 79 4a 39 66 58 31 39 66 58 31 39 4c 43 49 30 49 6a 70 37 49 6e 55 69 4f 6e 73 69 4d 43 49 36 65 79 4a 30 49 6a 70 37 49 6d 30 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 55 33 49 6e 31 39 66 58 31 39 4c 43 49 31 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 53 49 36 65 79 4a 35 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 78 4e 79 4a 39 66 58 31 39 Data Ascii: SI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwibyI6eyJ6Ijp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJscyJ9fX19fX19LCI0Ijp7InUiOnsiMCI6eyJ0Ijp7Im0iOnsiXHUwMDAwIjp7fSwibWV0YSI6ImU3In19fX19LCI1Ijp7InUiOnsidSI6eyJ5Ijp7Ilx1MDAwMCI6e30sIm1ldGEiOiJxNyJ9fX19
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 4c 43 4a 6e 49 6a 70 37 49 6d 6f 69 4f 6e 73 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4d 54 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6d 6f 69 4f 6e 73 69 4d 43 49 36 65 79 4a 79 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 53 77 69 4d 53 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 49 77 49 6a 70 37 49 6e 67 69 4f 6e 73 69 61 79 49 36 65 79 4a 63 64 Data Ascii: JcdTAwMDAiOnt9LCJtZXRhIjoiMTQiLCJnIjp7ImoiOnsiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiMTQifX19fX19fX19fX19fX0sImoiOnsiMCI6eyJyIjp7InoiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fSwiMSI6eyJrIjp7InQiOnsieiI6eyIwIjp7IngiOnsiayI6eyJcd
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 36 65 79 4a 72 49 6a 70 37 49 6e 67 69 4f 6e 73 69 64 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 6f 69 4f 6e 73 69 62 79 49 36 65 79 49 78 49 6a 70 37 49 6d 73 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 56 30 59 53 49 36 49 6d 68 6e 49 6e 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 4d 69 4f 6e 73 69 4d 43 49 36 65 79 4a 35 49 6a 70 37 49 6d 73 69 4f 6e 73 69 63 79 49 36 65 79 4a 72 49 6a 70 37 49 6e 51 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 54 63 69 66 58 31 39 66 58 31 39 66 53 77 69 61 79 49 36 65 79 4a 34 49 6a 70 37 49 6d 38 69 4f 6e 73 69 61 53 49 36 65 79 4a 6e 49 6a 70 37 49 6e 51 69 4f 6e 73 69 58 48 55 77 4d 44 41 77 49 6a 70 37 66 53 77 69 62 57 Data Ascii: 6eyJrIjp7IngiOnsidCI6eyJnIjp7InoiOnsibyI6eyIxIjp7ImsiOnsiXHUwMDAwIjp7fSwibWV0YSI6ImhnIn19fX19fX19fX0sInMiOnsiMCI6eyJ5Ijp7ImsiOnsicyI6eyJrIjp7InQiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoicTcifX19fX19fSwiayI6eyJ4Ijp7Im8iOnsiaSI6eyJnIjp7InQiOnsiXHUwMDAwIjp7fSwibW
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 65 79 4a 72 49 6a 70 37 49 6e 6b 69 4f 6e 73 69 62 69 49 36 65 79 4a 76 49 6a 70 37 49 6e 59 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 63 32 51 69 66 58 31 39 66 58 31 39 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 63 69 4f 6e 73 69 4d 43 49 36 65 79 4a 6e 49 6a 70 37 49 6e 67 69 4f 6e 73 69 62 79 49 36 65 79 49 77 49 6a 70 37 49 6e 4d 69 4f 6e 73 69 65 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 5a 44 51 69 66 58 31 39 66 58 31 39 66 58 30 73 49 6e 67 69 4f 6e 73 69 65 69 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 7a 45 69 4c 43 4a 76 49 6a 70 37 49 6d 77 69 4f 6e 73 69 62 79 49 36 65 79 4a Data Ascii: eyJrIjp7InkiOnsibiI6eyJvIjp7InYiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoic2QifX19fX19fX19fX19fX0sInciOnsiMCI6eyJnIjp7IngiOnsibyI6eyIwIjp7InMiOnsieSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiZDQifX19fX19fX0sIngiOnsieiI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibzEiLCJvIjp7ImwiOnsibyI6eyJ
2024-04-19 13:12:52 UTC	1369	IN	Data Raw: 43 4a 78 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 49 32 61 69 4a 39 66 53 77 69 61 69 49 36 65 79 4a 7a 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 36 49 6a 70 37 49 6e 55 69 4f 6e 73 69 64 43 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 4e 32 30 69 66 58 31 39 66 58 31 39 66 53 77 69 63 53 49 36 65 79 4a 76 49 6a 70 37 49 6e 51 69 4f 6e 73 69 62 53 49 36 65 79 4a 63 64 54 41 77 4d 44 41 69 4f 6e 74 39 4c 43 4a 74 5a 58 52 68 49 6a 6f 69 62 6e 6b 69 66 58 31 39 66 53 77 69 64 43 49 36 65 79 4a 78 49 6a 70 37 49 6d 38 69 4f 6e 73 69 64 43 49 36 65 79 4a 74 49 6a 70 37 49 6c 78 31 4d 44 41 77 4d 43 49 36 65 33 30 73 49 6d 31 6c 64 47 45 69 4f 69 4a 6d Data Ascii: CJxIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiI2aiJ9fSwiaiI6eyJzIjp7Im8iOnsidCI6eyJ6Ijp7InUiOnsidCI6eyJcdTAwMDAiOnt9LCJtZXRhIjoiN20ifX19fX19fSwicSI6eyJvIjp7InQiOnsibSI6eyJcdTAwMDAiOnt9LCJtZXRhIjoibnkifX19fSwidCI6eyJxIjp7Im8iOnsidCI6eyJtIjp7Ilx1MDAwMCI6e30sIm1ldGEiOiJm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.5	50512	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	920	OUT	GET /v1/sync/adform/d420a613-8395-4234-83fd-2a89fd387f7e?uid=1045438816811072924 HTTP/1.1 Host: cs.ingage.tech Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=GwsU9aSDuWcb51Q8iJsV5F4IC8z7ZnKVY1KIv_PEVIE-1713532355-1.0.1.1-oJrRIJ3sgzf6XXK0Q6_6eVuVmmeS_NKgfZPaP2mcHN9TkyIVxM9DpDtHdeiiLKK9PPnbzy1GLpUfJl25_AEW3w
2024-04-19 13:12:52 UTC	314	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:52 GMT Connection: close Vary: Origin Set-Cookie: instUid=d420a613-8395-4234-83fd-2a89fd387f7e; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:52 GMT; SameSite=None; Path=/; Domain=.ingage.tech; Secure; HTTPOnly cache-control: private, max-age=1296000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.5	50513	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	861	OUT	GET /getuid?https://ids.ad.gt/api/v1/match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&adnxs_id=$UID&gdpr=0 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313
2024-04-19 13:12:52 UTC	1469	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ids.ad.gt/api/v1/match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&adnxs_id=187107314970053313&gdpr=0 AN-X-Request-Uuid: 09278511-b85b-40a0-b1b0-6c45f9c9755f Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.5	50518	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	826	OUT	GET /deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==
2024-04-19 13:12:52 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372889%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372889%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372889%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372889%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372889%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372889%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1583 date: Fri, 19 Apr 2024 13:12:52 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-04-19 13:12:52 UTC	1583	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 31 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 75 73 5f 70 72 69 76 61 63 79 3d 26 74 73 3d 31 37 31 33 35 33 32 33 37 32 38 38 39 2e 31 26 72 69 3d 32 35 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 6a 73 25 32 46 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 25 33 46 25 32 36 70 25 33 44 31 35 36 34 32 33 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["1https://ssc-cms.33across.com/ps/?us_privacy=&ts=1713532372889.1&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.5	50510	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	847	OUT	GET /merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB
2024-04-19 13:12:52 UTC	1447	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:52 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.5	50516	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	724	OUT	GET /setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=adform&uid=1045438816811072924 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; amdgt_lk%40cfs=1
2024-04-19 13:12:52 UTC	346	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 19 Apr 2024 13:12:52 GMT server: envoy set-cookie: _sv3_8=1; path=/; domain=sync.a-mo.net; expires=Sat, 20 Apr 2024 13:12:52 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.5	50517	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	826	OUT	GET /deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==
2024-04-19 13:12:52 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1583 date: Fri, 19 Apr 2024 13:12:52 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-04-19 13:12:52 UTC	1583	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 31 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 75 73 5f 70 72 69 76 61 63 79 3d 26 74 73 3d 31 37 31 33 35 33 32 33 37 32 39 30 38 2e 31 26 72 69 3d 32 35 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 6a 73 25 32 46 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 25 33 46 25 32 36 70 25 33 44 31 35 36 34 32 33 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["1https://ssc-cms.33across.com/ps/?us_privacy=&ts=1713532372908.1&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.5	50514	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	673	OUT	GET /track/cmf/generic?ttd_pid=8gkxb6n&ttd_tpi=1&ttd_puid=AU1D-0100-001713532371-GGRRVTZ5-BL2N&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:52 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.5	50490	8.28.7.105	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	651	OUT	GET /setuid?bidder=amx&uid=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&do=www.justjared.com HTTP/1.1 Host: ow.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:52 UTC	380	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/html Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMDNUMTM6MTI6NTIuOTA2MDcxODQ0WiJ9fX0=; Path=/; Domain=ow.pubmatic.com; Expires=Thu, 18 Jul 2024 13:12:52 GMT; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:52 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.5	50522	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	798	OUT	GET /idsync/ex/receive?partner_id=3185&partner_device_id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&partner_url=https://ids.ad.gt%2Fapi%2Fv1%2Ftapad_match%3Fid%3DAU1D-0100-001713532371-GGRRVTZ5-BL2N%26tapad_id%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 13:12:53 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.5	50523	172.253.124.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	881	OUT	GET /pixel?google_nid=audigent_w_appnexus_3985&google_cm&google_sc&google_ula=450542624&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:53 UTC	718	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ids.ad.gt/api/v1/g_match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&google_gid=CAESEDVRfbnB3sBtm8cOOwXsULM&google_cver=1&google_ula=450542624,0 Date: Fri, 19 Apr 2024 13:12:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 357 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	357	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 2e 61 64 2e 67 74 2f 61 70 69 2f 76 31 2f 67 5f 6d 61 74 63 68 3f 69 64 3d 41 55 31 44 2d 30 31 30 30 2d 30 30 31 37 31 33 35 33 32 33 37 31 2d 47 47 52 52 56 54 5a 35 2d 42 4c 32 4e 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ids.ad.gt/api/v1/g_match?id=AU1D-0100-001713532371-GGRRVTZ5-BL2N&google_gid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.5	50502	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	705	OUT	GET /pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs-tam.yellowblue.io%2Fcs%3Faid%3D11584%26uid%3D$UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	73	IN	HTTP/1.1 204 Date: Fri, 19 Apr 2024 13:12:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.5	50335	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:52 UTC	632	OUT	GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1 Host: data.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:53 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.5	50526	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	781	OUT	GET /setuid/magnite?uid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1713532366_1713532366; amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; _sv3_7=1
2024-04-19 13:12:53 UTC	348	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 19 Apr 2024 13:12:52 GMT server: envoy set-cookie: _sv3_7=1; path=/; domain=prebid.a-mo.net; expires=Sat, 20 Apr 2024 13:12:53 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 3 vary: Accept-Encoding connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.5	50520	8.28.7.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	718	OUT	GET /AdServer/UCookieSetPug?rd=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fpbm_match%3Fpbm%3D%23PM_USER_ID%26id%3DAU1D-0100-001713532371-GGRRVTZ5-BL2N HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-19 13:12:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.5	50533	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	685	OUT	GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=43832ec9-23ab-4e6d-8de1-1752b7609838#1713532369099
2024-04-19 13:12:53 UTC	1158	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=43832ec9-23ab-4e6d-8de1-1752b7609838#1713532369099; Domain=.sitescout.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0OCI6MTcxMzUzMjM3MzQ5OSwiMzkiOjE3MTM1MzIzNzM0OTksIjciOjE3MTM1MzIzNzM0OTl9; Domain=.sitescout.com; Expires=Sun, 19-May-2024 13:12:53 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Fri, 19 Apr 2024 13:12:52 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.5	50538	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	641	OUT	GET /cookie-sync/svr?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-19 13:12:53 UTC	389	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:53 GMT location: https://match.prod.bidr.io/cookie-sync/svr?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 19 Apr 2024 13:22:53 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.5	50546	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	913	OUT	GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359
2024-04-19 13:12:53 UTC	622	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; Version=1; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1713532373\|vMgavPkWgyiK; Version=1; Expires=Sat, 04-May-2024 13:12:53 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: text/html Content-Length: 988 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	633	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 65 64 62 61 32 33 33 63 2d 32 62 34 30 2d 34 35 31 66 2d 38 39 32 31 2d 62 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://ce.lijit.com/merge?pid=76&3pid=edba233c-2b40-451f-8921-b
2024-04-19 13:12:53 UTC	355	IN	Data Raw: 31 2d 64 64 35 65 2d 63 34 65 38 2d 30 65 39 33 2d 38 35 65 62 63 38 31 37 66 36 34 63 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 38 31 35 34 66 64 66 63 2d 63 31 66 34 2d 37 66 31 32 2d 63 65 39 64 2d 30 37 37 63 61 30 32 34 33 64 61 63 26 67 64 70 72 3d 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 57 51 7a 59 6a 4a 6c 4d 7a 59 74 4d 44 67 34 4d 79 30 79 4d 57 49 32 4c 57 52 69 4e 32 51 74 4e 57 52 6a 4e 54 5a 68 59 7a 5a 6d 4d 32 4e 6a 22 3e 3c Data Ascii: 1-dd5e-c4e8-0e93-85ebc817f64c"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=8154fdfc-c1f4-7f12-ce9d-077ca0243dac&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=YWQzYjJlMzYtMDg4My0yMWI2LWRiN2QtNWRjNTZhYzZmM2Nj"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.5	50544	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	741	OUT	GET /pixel?google_nid=rp&google_hm=TFY2T1g3TFMtMVUtRzFUQg==&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.5	50542	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	1086	OUT	GET /beacon?informer=13406715 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB; ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW
2024-04-19 13:12:53 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: text/html Content-Length: 3785 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxdUEkSgDAI%2B0vPHmRrwK85%2Ft3p2IPkmISEwD0K4xKIw6Vgx9AO5fwRE4uwPgFhx%2ByEs2HrYpCFq3YHm5LYTFIoZebZW3mRTjvT%2B3wG6ZSv5NdPt0DEwpEdK%2Bim9sbnBa%2BTRsU%3D; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-04-19 13:12:53 UTC	3785	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 31 39 20 53 65 6e 74 20 2f 20 2d 31 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (19 Sent / -1 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.5	50545	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	1011	OUT	GET /merge?pid=92&3pid=187107314970053313&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB; ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW
2024-04-19 13:12:53 UTC	1441	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_92=187107314970053313; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.5	50548	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	684	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-19 13:12:53 UTC	660	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:53 GMT location: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AAEPf07MRNwAABWcWeK7WQ&expires=30&gdpr=0 Server: gunicorn set-cookie: bito=AAEPf07MRNwAABWcWeK7WQ; Domain=bidr.io; expires=Mon, 19 May 2025 09:12:53 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Mon, 19 May 2025 09:12:53 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.5	50543	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	725	OUT	GET /setuid?A=e8ba6a97-4f0e-4f17-a097-1f0587909fd0&bidder=appnexus&uid=187107314970053313 HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.a-mo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; amdgt_lk%40cfs=1
2024-04-19 13:12:53 UTC	346	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Fri, 19 Apr 2024 13:12:52 GMT server: envoy set-cookie: _sv3_0=1; path=/; domain=sync.a-mo.net; expires=Sat, 20 Apr 2024 13:12:53 GMT; max-age=86400; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 1 vary: Accept-Encoding connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.5	50549	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	1029	OUT	GET /merge?3pid=OPUf67e9fe0c71146baa5554ff263871c94&gdpr=0&gdpr_consent=&pid=103 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB; ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW
2024-04-19 13:12:53 UTC	1459	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPUf67e9fe0c71146baa5554ff263871c94; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:53 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.5	50536	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	558	OUT	GET /js/1928.005-3.034/frame_content.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	402	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: application/javascript Content-Length: 2413 Connection: close last-modified: Tue, 02 Apr 2024 06:51:03 GMT etag: "96d-61517879910a0" Cache-Control: max-age=2592000 expires: Sun, 19 May 2024 11:35:29 GMT via: 1.1 google CF-Cache-Status: HIT Age: 5844 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d26167ac153d6-ATL
2024-04-19 13:12:53 UTC	967	IN	Data Raw: 76 61 72 20 49 4c 5f 46 52 41 4d 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 70 69 64 3d 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 70 69 64 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 70 69 64 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 77 73 69 64 3d 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 77 73 69 64 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 77 73 69 64 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 61 64 76 74 71 3d 77 69 6e 64 6f 77 Data Ascii: var IL_FRAME=function(){var i,o;return{init:function(){var n;window.top.infolinks_pid=window.infolinks_config.pid\|\|window.top.infolinks_pid,window.top.infolinks_wsid=window.infolinks_config.wsid\|\|window.top.infolinks_wsid,window.top.infolinks_advtq=window
2024-04-19 13:12:53 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 29 3a 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 73 6c 6f 74 73 3d 5b 77 69 6e 64 6f 77 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 63 6f 6e 66 69 67 2e 69 6e 70 6c 61 63 65 5f 73 6c 6f 74 5d 29 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 24 69 63 65 7c 7c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 63 65 4c 6f 61 64 53 74 61 72 74 65 64 7c 7c 28 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 6e 66 6f 6c 69 6e 6b 73 5f 69 6e 69 74 46 72 6f 6d 46 72 61 6d 65 3d 21 30 2c 77 69 6e 64 6f 77 2e 74 6f 70 2e 69 63 65 4c 6f 61 64 53 74 61 72 74 65 64 3d 21 30 2c 28 6e 3d 77 69 6e 64 6f 77 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 74 79 70 65 3d 22 74 Data Ascii: config.inplace_slot):window.top.infolinks_slots=[window.infolinks_config.inplace_slot]),window.top.$ice\|\|window.top.iceLoadStarted\|\|(window.top.infolinks_initFromFrame=!0,window.top.iceLoadStarted=!0,(n=window.top.document.createElement("script")).type="t
2024-04-19 13:12:53 UTC	77	IN	Data Raw: 6d 65 5f 69 6e 70 6c 61 63 65 2e 6a 73 22 2c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 29 7d 29 28 29 7d 7d 7d 28 29 3b 49 4c 5f 46 52 41 4d 45 2e 69 6e 69 74 28 29 3b Data Ascii: me_inplace.js",window.document.body.appendChild(n))})()}}}();IL_FRAME.init();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.5	50550	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	705	OUT	GET /api/sync?callerId=140&gdpr={0,1}&gdpr_consent={empty,consent%20string}&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=1845939505169848484
2024-04-19 13:12:53 UTC	94	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 19 Apr 2024 13:12:53 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.5	50558	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	852	OUT	GET /pixel?google_nid=sonobi&google_cm&google_hm=OGMyZmE1NmMtMjE2Ni00ZmFiLTg2ZTktZTAyZmZkOWZhNmNi HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.go.sonobi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:53 UTC	657	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://sync.go.sonobi.com/usg.gif?google_gid=CAESEF2mFdWPZbQQsWYF8Dqp3Wc&google_cver=1 Date: Fri, 19 Apr 2024 13:12:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 288 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:53 UTC	288	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 67 6f 2e 73 6f 6e 6f 62 69 2e 63 6f 6d 2f 75 73 67 2e 67 69 66 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 46 32 6d 46 64 57 50 5a 62 51 51 73 57 59 46 38 44 71 70 33 57 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://sync.go.sonobi.com/usg.gif?google_gid=CAESEF2mFdWPZbQQsWYF8Dqp3Wc&google_cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.5	50535	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	861	OUT	GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.api.tappx.com%2Fcs%2Fusync%3Fidmn%3D162%26type%3Diframe%26id%3D%5BRX_UUID%5D%26auxuid%3D%22%7D
2024-04-19 13:12:53 UTC	645	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:53 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.80%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 19 Apr 2025 13:12:53 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=6694574960 etag: RXdd40f750a0144531a2f18878dd503e55005 connection: close
2024-04-19 13:12:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.5	50551	3.218.162.229	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	1001	OUT	GET /sync/dmp?redirect=https%3A%2F%2Fsync.cootlogix.com%2Fapi%2Fuser%3Fgdpr%3D%24%7Buser.gdpr%7D%26gdpr_consent%3D%24%7Buser.consentStr%7D%26us_privacy%3D%24%7Buser.usPrivacy%7D%26partnerId%3Dsundaysky%26userId%3D%24%7Bssky_uuid%7D&_cvt=t HTTP/1.1 Host: vop.sundaysky.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sskyu=d6.f67b530ab25f49d8bfcc9cac8250cd2b; sskyCreationTime=1713532372111
2024-04-19 13:12:53 UTC	611	IN	HTTP/1.1 302 Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Length: 0 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff Set-Cookie: sskyu=d6.f67b530ab25f49d8bfcc9cac8250cd2b; Domain=sundaysky.com; Expires=Sun, 19-Apr-2026 13:12:53 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskyCreationTime=1713532372111; Domain=sundaysky.com; Expires=Sun, 19-Apr-2026 13:12:53 GMT; Path=/; Secure; SameSite=None Location: https://sync.cootlogix.com/api/user?gdpr=user.gdpr&gdpr_consent=user.consentStr&us_privacy=user.usPrivacy&partnerId=sundaysky&userId=d6.f67b530ab25f49d8bfcc9cac8250cd2b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.5	50547	54.166.111.231	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	637	OUT	GET /cookie-sync/id5?us_privacy= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-19 13:12:53 UTC	380	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:53 GMT location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 19 Apr 2024 13:22:53 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.5	50534	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	671	OUT	GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322; ts=1713532366
2024-04-19 13:12:53 UTC	411	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:53 GMT vary: Accept-Encoding location: https://ce.lijit.com/merge?pid=86&3pid=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=sovrn&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 19 Apr 2024 13:12:53 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.5	50537	82.145.213.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	673	OUT	GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPUf67e9fe0c71146baa5554ff263871c94
2024-04-19 13:12:53 UTC	766	IN	HTTP/1.1 302 Found Server: Tengine Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 131 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ce.lijit.com/merge?3pid=OPUf67e9fe0c71146baa5554ff263871c94&gdpr=0&gdpr_consent=&pid=103 Pragma: no-cache Set-Cookie: UID=OPUf67e9fe0c71146baa5554ff263871c94; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-19 13:12:53 UTC	131	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 33 70 69 64 3d 4f 50 55 66 36 37 65 39 66 65 30 63 37 31 31 34 36 62 61 61 35 35 35 34 66 66 32 36 33 38 37 31 63 39 34 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 69 64 3d 31 30 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ce.lijit.com/merge?3pid=OPUf67e9fe0c71146baa5554ff263871c94&gdpr=0&gdpr_consent=&pid=103">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.5	50560	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	669	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=34673937&p=158111&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:53 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:52 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.5	50566	18.67.76.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	678	OUT	GET /consent/tcfv2/vendor-list/categories?siteId=7443&consentLanguage=en HTTP/1.1 Host: cdn.privacy-mgmt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn.privacy-mgmt.com/index.html?hasCsp=true&message_id=1107691&consentUUID=null&preload_message=true&version=v1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 1819 Connection: close Date: Fri, 19 Apr 2024 13:12:54 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET, PUT, POST, DELETE Cache-Control: max-age=0, s-maxage=3600 Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7a887c7cb9fe4a7abca02d85e8b196e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: eflyqItjK3tHm84vndax205M-c2a1hZ-jp4h5_49zZ3u11uYbov5xA==
2024-04-19 13:12:54 UTC	1819	IN	Data Raw: 7b 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 7b 22 5f 69 64 22 3a 22 35 66 32 39 62 61 61 38 35 31 64 32 65 63 32 35 61 62 34 37 32 39 34 32 22 2c 22 74 79 70 65 22 3a 22 49 41 42 5f 50 55 52 50 4f 53 45 22 2c 22 6e 61 6d 65 22 3a 22 53 74 6f 72 65 20 61 6e 64 2f 6f 72 20 61 63 63 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 61 20 64 65 76 69 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6f 6b 69 65 73 2c 20 64 65 76 69 63 65 20 6f 72 20 73 69 6d 69 6c 61 72 20 6f 6e 6c 69 6e 65 20 69 64 65 6e 74 69 66 69 65 72 73 20 28 65 2e 67 2e 20 6c 6f 67 69 6e 2d 62 61 73 65 64 20 69 64 65 6e 74 69 66 69 65 72 73 2c 20 72 61 6e 64 6f 6d 6c 79 20 61 73 73 69 67 6e 65 64 20 69 64 65 6e 74 69 66 69 65 72 73 2c 20 6e 65 74 77 6f 72 6b 20 62 Data Ascii: {"categories":[{"_id":"5f29baa851d2ec25ab472942","type":"IAB_PURPOSE","name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.5	50559	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	557	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	379	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://www.justjared.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:53 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:54 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 6f 70 4f 6d 66 39 30 6b 4f 6b 33 65 4f 58 4a 67 48 52 61 48 6d 67 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"opOmf90kOk3eOXJgHRaHmg=="}
2024-04-19 13:12:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.5	50567	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	667	OUT	GET /ecm3?ex=rise.com&id=P2oHoy7zC HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cs-tam.yellowblue.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:53 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: SGJ9FJB111ZVTBQMTR9H Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.5	50563	18.211.200.227	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	811	OUT	GET /ibs:dpid=348447&dpuuid=AU1D-0100-001713532371-GGRRVTZ5-BL2N&redir=https%3A%2F%2Fids.ad.gt%2Fapi%2Fv1%2Fadb_match%3Fadb%3D%24%7BDD_UUID%7D%26id%3DAU1D-0100-001713532371-GGRRVTZ5-BL2N HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=06283770382809365182374221610671770227
2024-04-19 13:12:53 UTC	962	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Length: 0 Connection: close X-TID: zD+bIcW/Tdk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://ids.ad.gt/api/v1/adb_match?adb=06283770382809365182374221610671770227&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N DCS: dcs-prod-va6-1-v059-02bbbb0ad.edge-va6.demdex.com 2 ms set-cookie: dpm=06283770382809365182374221610671770227; Max-Age=15552000; Expires=Wed, 16 Oct 2024 13:12:53 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=06283770382809365182374221610671770227; Max-Age=15552000; Expires=Wed, 16 Oct 2024 13:12:53 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.5	50564	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	841	OUT	GET /bh/rtset?pid=562316&ev=1&rurl=https://ids.ad.gt/api/v1/ppnt_match?uid=%%VGUID%%&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1\|7LJ.0.8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb\|8i8.0.1
2024-04-19 13:12:53 UTC	1049	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:53 GMT;SameSite=None;Partitioned Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:53 GMT;Max-Age=0;SameSite=None Set-Cookie: pb_rtb_ev_part=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:53 GMT;Max-Age=0;SameSite=None Location: https://ids.ad.gt/api/v1/ppnt_match?uid=part_d3pYBt4hoB3q&ev=1&pid=562316&id=AU1D-0100-001713532371-GGRRVTZ5-BL2N Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.5	50565	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	703	OUT	GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:53 UTC	267	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:53 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sync2.resetdigital.co/csync/bs?type=d&bidswitch_ssp_id=fmx&gdpr=0&us_privacy=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.5	50388	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	1195	OUT	GET /ps/?us_privacy=&ts=1713532372889.1&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dg%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:54 UTC	727	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:54 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP005 location: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D content-length: 0 date: Fri, 19 Apr 2024 13:12:53 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.5	50568	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	799	OUT	POST /g/v2/369.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 324 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#2; 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613; cf=gif; cip=441; cnac=8; car=2; gdpr=0\|
2024-04-19 13:12:53 UTC	324	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 33 36 39 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 74 6f 70 22 3a 31 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 76 22 3a 22 38 2e 33 38 2e 30 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 Data Ascii: {"partner":369,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://www.justjared.com/","ref":null,"cu":"https://www.justjared.com/","top":1,"u":"https://www.justjared.com/","v":"8.38.0","storage":{"expires":90,"name":"id5id","type":"html5","refreshInSeconds":28
2024-04-19 13:12:54 UTC	559	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:54 GMT p3p: CP="CAO PSA OUR" set-cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#3; Path=/; Domain=id5-sync.com; Expires=Thu, 18 Jul 2024 13:12:54 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://www.justjared.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:54 UTC	587	IN	Data Raw: 32 34 34 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 67 38 32 72 57 72 58 6a 6c 53 75 5a 7a 72 50 6c 61 38 44 31 53 42 5a 4a 72 56 31 71 6f 63 4f 46 74 6c 70 6c 51 63 73 34 6b 55 74 78 41 73 76 73 6e 41 41 34 65 31 49 76 61 67 64 49 54 34 4c 67 57 5f 6f 38 75 5a 36 36 38 70 59 65 6a 30 41 5a 31 61 43 4b 64 65 78 62 63 4a 35 44 35 59 5a 4e 58 57 46 6f 38 6b 30 56 4b 6d 49 51 36 35 72 47 2d 76 6c 77 6e 6c 6b 68 6e 39 71 59 35 6c 6c 54 75 30 76 71 6a 76 49 39 78 57 72 42 2d 6d 61 44 4a 45 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 34 39 2e 31 30 35 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 22 3a 22 49 44 35 2a 48 6e 5f 4d Data Ascii: 244{"signature":"ID5_Ag82rWrXjlSuZzrPla8D1SBZJrV1qocOFtlplQcs4kUtxAsvsnAA4e1IvagdIT4LgW_o8uZ668pYej0AZ1aCKdexbcJ5D5YZNXWFo8k0VKmIQ65rG-vlwnlkhn9qY5llTu0vqjvI9xWrB-maDJE","created_at":"2024-04-19T13:12:49.105Z","id5_consent":true,"original_uid":"ID5*Hn_M
2024-04-19 13:12:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.5	50553	18.64.236.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	527	OUT	GET /locdot HTTP/1.1 Host: location.p7cloud.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	375	IN	HTTP/1.1 200 Found Server: CloudFront Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: application/javascript Content-Length: 249 Connection: close X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 5df6a6f843be2e6dd8ba492b043e12c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P1 X-Amz-Cf-Id: NuzD9CLRgiUOFmRLbgJZBzIwrgmlDvNSAXydc37yn0vH87u2ZU8qRQ==
2024-04-19 13:12:54 UTC	249	IN	Data Raw: 61 73 70 61 6e 2e 73 65 74 4c 6f 63 61 74 69 6f 6e 28 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 43 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 52 65 67 69 6f 6e 22 3a 22 47 41 22 2c 22 43 6f 75 6e 74 72 79 52 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 43 69 74 79 22 3a 22 41 74 6c 61 6e 74 61 22 2c 22 50 6f 73 74 61 6c 43 6f 64 65 22 3a 22 33 30 33 30 31 22 2c 22 54 69 6d 65 5a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 4c 61 74 69 74 75 64 65 22 3a 22 33 33 2e 37 34 38 35 30 22 2c 22 4c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 38 34 2e 33 38 37 31 30 22 2c 22 4d 65 74 72 6f 43 6f 64 65 22 3a 22 35 32 34 22 7d 29 3b Data Ascii: aspan.setLocation({"Country":"US","CountryName":"United States","CountryRegion":"GA","CountryRegionName":"Georgia","City":"Atlanta","PostalCode":"30301","TimeZone":"America/New_York","Latitude":"33.74850","Longitude":"-84.38710","MetroCode":"524"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.5	50557	3.161.163.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	671	OUT	GET /live/liveCS.php?source=external&advId=100&advUuid=LV6OX7LS-1U-G1TB&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	813	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Fri, 19 Apr 2024 13:12:53 GMT p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: no-store pragma: no-cache set-cookie: csuuid=66226dd60c146; expires=Tue, 14-May-2024 13:12:54 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LV6OX7LS-1U-G1TB X-Cache: Miss from cloudfront Via: 1.1 547b772bceeb039ad00790c432e8807e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C8DfteY0FkwPSNd2tAdARTyIdWXnmznnp5MkIOTaPvBKvs3nffWTvA== Age: 0
2024-04-19 13:12:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.5	50552	18.165.98.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	564	OUT	GET /asp?aspan=YXJjc3Bhbi11c2VyOmFyY3NwYW4tZHJvd3NzYXA HTTP/1.1 Host: ua.p7cloud.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	361	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 75 Connection: close Server: CloudFront Date: Thu, 18 Apr 2024 19:37:27 GMT X-Cache: Hit from cloudfront Via: 1.1 ce05e2e2ef149c875905ee7ff636fb28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Amz-Cf-Id: _AhMn8CH1hB55dI9wVnP-d9zqZhYQ4cVqeA_dSfa2JpiBazCMZwYrQ== Age: 63327
2024-04-19 13:12:54 UTC	75	IN	Data Raw: 61 73 70 61 6e 2e 70 61 72 73 65 64 55 41 28 7b 22 62 72 6f 77 73 65 72 22 3a 22 43 68 72 6f 6d 65 22 2c 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 7d 29 3b Data Ascii: aspan.parsedUA({"browser":"Chrome","os":"Windows","deviceType":"desktop"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.5	50554	3.163.78.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:53 UTC	576	OUT	GET /13333?uri=9bbbe62e-7780-49ac-a0a8-6829acbc35e6 HTTP/1.1 Host: d2tbszkvx1p56e.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	344	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 32 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 13:12:54 GMT X-Cache: Miss from cloudfront Via: 1.1 32b9596b9fc01b0e4c30af57fb1593a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: EmMZ6n_QmHNk9bnBOJWFyr3oUKYJAGCudcGhjbR-ZU0d-Ft_jZwolQ==
2024-04-19 13:12:54 UTC	32	IN	Data Raw: 61 73 70 61 6e 2e 73 65 74 55 73 65 72 28 7b 22 6e 6f 74 5f 66 6f 75 6e 64 22 3a 20 31 7d 29 3b Data Ascii: aspan.setUser({"not_found": 1});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.5	50556	69.90.254.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	639	OUT	GET /tum?umid=27&uid=IhHYAPZHgyDtLY4rTVmqUZsu&gdpr=0&gdpr_consent= HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.5	50531	172.253.124.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	762	OUT	GET /pixel?google_nid=audigent_w_appnexus_3985&google_hm=QVUxRC0wMTAwLTAwMTcxMzUzMjM3MS1HR1JSVlRaNS1CTDJO HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:54 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:54 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.5	50562	172.64.144.166	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	582	OUT	GET /APJrhaGcsmc9rMQust0kw-jx0NU/gpt_and_prebid/config.js HTTP/1.1 Host: cdn.confiant-integrations.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	597	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: ypTLlsIFH69Y2ALLFy2mh2IjYbALKLm64CZfhQXno1XhYqRh3kM6UJzaKQySUU28NFMkxRBxdtNzsGwY4eLdaEnUnCkaz4zSQhG2nM/S6AM= x-amz-request-id: EE7X85MEN5T3T292 Last-Modified: Fri, 19 Apr 2024 09:06:24 GMT ETag: W/"c6075f400b680bcb4a4e9dd1f9afe757" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=900, stale-while-revalidate=3600 CF-Cache-Status: HIT Age: 773 Server: cloudflare CF-RAY: 876d2619fe1607e6-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:54 UTC	772	IN	Data Raw: 37 64 35 39 0d 0a 20 20 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 73 70 61 63 65 64 2d 63 6f 6d 6d 65 6e 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 76 61 72 20 63 6f 6e 66 69 61 6e 74 47 6c 6f 62 61 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 20 3d 20 7b 7d 29 3b 0a 20 20 76 61 72 20 63 6c 69 65 6e 74 53 65 74 74 69 6e 67 73 20 3d 20 28 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 5b 27 41 50 4a 72 68 61 47 63 73 6d 63 39 72 4d 51 75 73 74 30 6b 77 2d 6a 78 30 4e 55 27 5d 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 66 69 61 6e 74 5b 27 41 50 4a 72 68 61 47 63 73 6d 63 39 72 4d 51 75 73 74 30 6b 77 Data Ascii: 7d59 /* eslint-disable spaced-comment */(function() { var confiantGlobal = window.confiant \|\| (window.confiant = {}); var clientSettings = (window.confiant && window.confiant['APJrhaGcsmc9rMQust0kw-jx0NU'] && window.confiant['APJrhaGcsmc9rMQust0kw
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 52 65 70 6f 72 74 65 72 43 6f 6e 66 69 67 29 3b 0a 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 61 64 52 65 70 6f 72 74 65 72 43 6f 6e 66 69 67 20 3d 20 7b 7d 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 73 65 74 74 69 6e 67 73 20 3d 20 7b 0a 20 20 20 20 70 72 6f 70 65 72 74 79 49 64 3a 20 27 41 50 4a 72 68 61 47 63 73 6d 63 39 72 4d 51 75 73 74 30 6b 77 2d 6a 78 30 4e 55 27 2c 0a 20 20 20 20 61 64 53 65 72 76 65 72 3a 20 27 68 74 74 70 73 3a 2f 2f 70 72 6f 74 65 63 74 65 64 2d 62 79 2e 63 6c 61 72 69 75 6d 2e 69 6f 27 2c 0a 20 20 20 20 63 6f 6e 66 69 61 6e 74 43 64 6e 3a 20 27 63 64 6e 2e 63 6f 6e 66 69 61 6e 74 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 2e 6e 65 74 27 2c 0a 20 20 20 20 6d 61 70 70 69 6e 67 3a 20 27 57 33 73 69 61 53 49 36 4d 69 77 Data Ascii: ReporterConfig); } catch (e) { adReporterConfig = {}; } var settings = { propertyId: 'APJrhaGcsmc9rMQust0kw-jx0NU', adServer: 'https://protected-by.clarium.io', confiantCdn: 'cdn.confiant-integrations.net', mapping: 'W3siaSI6Miw
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 32 35 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6f 37 30 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 33 39 36 35 35 35 36 30 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 61 76 34 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 30 33 31 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 71 78 34 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 35 37 38 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 73 7a 34 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 37 33 33 38 22 5d 7d 2c 7b 22 6f 69 22 3a 22 72 31 35 7a 33 37 22 Data Ascii: 256"]},{"oi":"o70z37","ot":2,"rs":1,"s":["aqid=\"4858:396555603"]},{"oi":"av4z37","ot":2,"rs":1,"s":["aqid=\"3858:6350313"]},{"oi":"qx4z37","ot":2,"rs":1,"s":["aqid=\"3858:6355785"]},{"oi":"sz4z37","ot":2,"rs":1,"s":["aqid=\"3858:6357338"]},{"oi":"r15z37"
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 39 37 34 38 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6f 65 37 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 37 33 33 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 32 66 37 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 39 39 35 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 63 67 37 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 30 34 30 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 71 68 37 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a Data Ascii: z37","ot":2,"rs":1,"s":["aqid=\"3858:6359748"]},{"oi":"oe7z37","ot":2,"rs":1,"s":["aqid=\"3858:6357335"]},{"oi":"2f7z37","ot":2,"rs":1,"s":["aqid=\"3858:6359955"]},{"oi":"cg7z37","ot":2,"rs":1,"s":["aqid=\"3858:6350403"]},{"oi":"qh7z37","ot":2,"rs":1,"s":
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 37 35 35 30 22 5d 7d 2c 7b 22 6f 69 22 3a 22 64 64 38 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 33 39 36 36 31 31 30 37 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 72 64 38 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 34 31 33 33 37 34 34 36 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 61 65 38 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 33 38 39 37 36 30 33 39 34 22 5d 7d 2c 7b 22 6f 69 22 3a 22 66 66 38 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 Data Ascii: "s":["aqid=\"3858:6357550"]},{"oi":"dd8z37","ot":2,"rs":1,"s":["aqid=\"4858:396611073"]},{"oi":"rd8z37","ot":2,"rs":1,"s":["aqid=\"4858:413374466"]},{"oi":"ae8z37","ot":2,"rs":1,"s":["aqid=\"4858:389760394"]},{"oi":"ff8z37","ot":2,"rs":1,"s":["aqid=\"4858
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 31 30 33 30 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 78 6a 39 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 33 38 35 38 3a 36 33 35 36 36 32 37 22 5d 7d 2c 7b 22 6f 69 22 3a 22 65 6c 39 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 34 31 30 31 35 37 35 38 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 34 6f 39 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 34 31 30 31 35 37 30 32 36 22 5d 7d 2c 7b 22 6f 69 22 3a 22 37 70 39 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 71 69 64 3d 5c 22 34 38 35 38 3a 33 Data Ascii: "s":["aqid=\"3858:6310303"]},{"oi":"xj9z37","ot":2,"rs":1,"s":["aqid=\"3858:6356627"]},{"oi":"el9z37","ot":2,"rs":1,"s":["aqid=\"4858:410157586"]},{"oi":"4o9z37","ot":2,"rs":1,"s":["aqid=\"4858:410157026"]},{"oi":"7p9z37","ot":2,"rs":1,"s":["aqid=\"4858:3
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 31 2c 22 73 22 3a 5b 22 26 61 69 3d 35 33 39 30 39 34 39 22 5d 7d 2c 7b 22 6f 69 22 3a 22 33 6c 39 79 74 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 26 61 69 3d 35 33 39 31 31 36 33 22 5d 7d 2c 7b 22 6f 69 22 3a 22 67 69 38 34 75 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 26 61 69 3d 35 33 39 39 30 34 37 22 5d 7d 2c 7b 22 6f 69 22 3a 22 63 69 6e 72 75 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 26 61 69 3d 35 33 39 32 31 37 37 22 5d 7d 2c 7b 22 6f 69 22 3a 22 32 33 34 6e 77 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 26 61 69 3d 35 34 32 31 32 32 31 22 5d 7d 2c 7b 22 6f 69 22 3a 22 78 30 61 7a 77 36 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 Data Ascii: 1,"s":["&ai=5390949"]},{"oi":"3l9yt6","ot":2,"rs":1,"s":["&ai=5391163"]},{"oi":"gi84u6","ot":2,"rs":1,"s":["&ai=5399047"]},{"oi":"cinru6","ot":2,"rs":1,"s":["&ai=5392177"]},{"oi":"234nw6","ot":2,"rs":1,"s":["&ai=5421221"]},{"oi":"x0azw6","ot":2,"rs":1,"s"
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 22 63 72 69 64 2f 4b 4a 61 6f 63 6d 33 49 68 4b 52 65 32 56 57 78 75 71 48 56 33 4d 37 74 52 46 68 43 46 54 34 30 22 5d 7d 2c 7b 22 6f 69 22 3a 22 74 6d 74 78 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 63 72 69 64 2f 51 63 6a 78 36 77 5a 48 75 4f 55 61 5a 69 73 54 6b 36 6f 39 55 72 77 41 45 51 72 73 52 42 37 52 22 5d 7d 5d 7d 2c 7b 22 64 22 3a 22 74 75 72 6e 2e 63 6f 6d 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 6e 73 6a 76 32 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 61 69 64 3d 35 35 31 39 31 38 38 31 22 5d 7d 5d 7d 2c 7b 22 64 22 3a 22 61 64 73 72 76 72 2e 6f 72 67 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 61 35 6a 31 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 63 72 69 Data Ascii: "crid/KJaocm3IhKRe2VWxuqHV3M7tRFhCFT40"]},{"oi":"tmtx37","ot":2,"rs":1,"s":["crid/Qcjx6wZHuOUaZisTk6o9UrwAEQrsRB7R"]}]},{"d":"turn.com","l":[{"oi":"nsjv27","ot":2,"rs":1,"s":["aid=55191881"]}]},{"d":"adsrvr.org","l":[{"oi":"a5j137","ot":2,"rs":1,"s":["cri
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 3a 5b 22 73 69 64 3d 38 32 35 34 32 35 36 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 61 61 35 7a 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 73 69 64 3d 38 32 34 39 37 30 35 36 22 5d 7d 5d 7d 2c 7b 22 64 22 3a 22 73 69 6d 70 6c 69 2e 66 69 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 35 74 67 73 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 2f 61 64 73 2f 33 38 39 33 30 36 33 2f 33 36 30 37 33 35 38 35 22 5d 7d 2c 7b 22 6f 69 22 3a 22 79 66 6e 75 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 2f 61 64 73 2f 33 39 33 32 35 37 30 2f 33 36 35 33 32 30 30 32 22 5d 7d 2c 7b 22 6f 69 22 3a 22 6e 65 6e 79 33 37 22 2c 22 6f 74 22 3a 32 2c 22 72 73 22 3a 31 2c 22 73 22 3a 5b 22 2f 61 64 73 2f 33 Data Ascii: :["sid=82542565"]},{"oi":"aa5z37","ot":2,"rs":1,"s":["sid=82497056"]}]},{"d":"simpli.fi","l":[{"oi":"5tgs37","ot":2,"rs":1,"s":["/ads/3893063/36073585"]},{"oi":"yfnu37","ot":2,"rs":1,"s":["/ads/3932570/36532002"]},{"oi":"neny37","ot":2,"rs":1,"s":["/ads/3
2024-04-19 13:12:54 UTC	1369	IN	Data Raw: 69 22 3a 22 69 61 72 61 22 2c 22 6f 74 22 3a 34 2c 22 72 73 22 3a 31 7d 5d 7d 2c 7b 22 64 22 3a 22 68 75 65 61 64 73 6f 72 74 62 2e 63 6f 6d 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 70 39 62 22 2c 22 6f 74 22 3a 33 2c 22 72 73 22 3a 31 7d 5d 7d 2c 7b 22 64 22 3a 22 61 64 6d 69 64 61 64 73 70 2e 63 6f 6d 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 68 61 62 22 2c 22 6f 74 22 3a 33 2c 22 72 73 22 3a 31 7d 5d 7d 2c 7b 22 64 22 3a 22 72 74 62 61 64 7a 65 73 74 6f 2e 63 6f 6d 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 35 69 62 22 2c 22 6f 74 22 3a 33 2c 22 72 73 22 3a 31 7d 5d 7d 2c 7b 22 64 22 3a 22 61 64 63 61 6e 6e 79 61 64 73 2e 63 6f 6d 22 2c 22 6c 22 3a 5b 7b 22 6f 69 22 3a 22 30 72 62 22 2c 22 6f 74 22 3a 33 2c 22 72 73 22 3a 31 7d 5d 7d 2c 7b 22 64 22 3a Data Ascii: i":"iara","ot":4,"rs":1}]},{"d":"hueadsortb.com","l":[{"oi":"p9b","ot":3,"rs":1}]},{"d":"admidadsp.com","l":[{"oi":"hab","ot":3,"rs":1}]},{"d":"rtbadzesto.com","l":[{"oi":"5ib","ot":3,"rs":1}]},{"d":"adcannyads.com","l":[{"oi":"0rb","ot":3,"rs":1}]},{"d":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.5	50398	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	673	OUT	GET /cs?aid=11590&id=LV6OX7LS-1U-G1TB&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: cs.yellowblue.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wrvUserID=P2oHoy7zC
2024-04-19 13:12:54 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://eus.rubiconproject.com/ x-envoy-upstream-service-time: 1 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.5	50569	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	995	OUT	GET /merge?pid=80&3pid=LV6OX7LS-1U-G1TB&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB; ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW
2024-04-19 13:12:54 UTC	1439	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:54 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:54 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:54 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:54 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.5	50571	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	4216	OUT	GET /gampad/ads?pvsid=1961765009388584&correlator=1383139496522754&eid=21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&iu_parts=21854935662%3A22573693114%2Cjustjared%2Cdesktop%2Cadhesion%2Cphoto&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=728x90&ifi=8&didk=2418942997&sfv=1-0-40&eri=1&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532372752&lmt=1713532038&adxs=276&adys=8773&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=6&ucis=8&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=1280x-1&msz=1280x-1&fws=516&ohw=1280&psts=AOrYGsk6PHXlmiBu_jUgcvYgy48XEF3OvmfcqGeRPXHd5SZKRUttG2RcR3nd8ahmPc0uTAX1UYlxi-JUgr_JlzeNdGlLeVP8M2dSfPTMsDqHy6FOHAYR%2CAOrYGslC9W3W_3AujtsHnyKtJMzQcYpr29r_5ZsX6pG6_BNMAK-nIoeky6P_RVwjaPSfPclOilDIK7goP-od-fRqMNHEBgF2Smxd6_f4hUde5MH9o3CL%2CAOrYGsnbkBJrfC_SMFmhI3gHn7Jbpoegxe5Tygpb8xpqz8X_Ccj3kILwyL1gliBCXmc5cwrDFAzR2NL0OvXhP2KjkGmw83sDL02mdFW4VBm1WIr2pwyN%2CAOrYGsnsJAV7ez72LGmmn6d2Ht2A1Jn70sMm93fMBjaT35p272D3_9exGuvZfel5_89_mevwxZnFTZISElsmYFWRA8HzuOEWjshP8ez0zEdgLw%2CAOrYGslXqzWxZnMwa10HhsoG5C0a%2CAOrYGslregH8m33151vWWC7D4Rvn983iFcPFWuZWCrwAU1TPh6mxxmg9WYDeZtvtKYM9Hp3z3T7PomhWtAjIo6mjk6L2ixyWnn8zRJShdK6s_4k8Nseg%2CAOrYGskveD7EKEH8udFLu2wqBFIxGwtkx-WsrQ54PsnBCZLjsZ1L4cuYmZGgxd22dmAhzUNdk5VTmXLcSbhSxZVt2_xty86VDBeR4A0pPf-4hA&ga_vid=315527398.1713532348&ga_sid=1713532353&ga_hid=2032655987&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=EloKDWNyd2RjbnRybC5uZXQSQGQ2NjgzMzQ0ZWIzYzU5ZTY1NzhlODlhNTE1MTAxODVjYTAyY2U0NzRlOTYxMGJiYjk1ZGE4NGNjOTJjYWEyYjQYi9nzs-8xSAASGwoMMzNhY3Jvc3MuY29tGLHa87PvMUgAUgIIbxLYAQoOZXNwLmNyaXRlby5jb20SvAFyMmRFaEY4Mk1HRXdlVmd6V2xsMloxWWxNa0psYzNGdlkzbHpWRGN3VEZOQ05UUWxNa0pOTmt3MVQwOXBja1ZZVWxoV2FVTnlVVWRwZVdKaE5XWXdSRU5xWkVsT1VpVXlSamRUTWpaM2NYUTVXR3hyVEZkV1Z6WjNNRmR2SlRKQ1NFRXpZVzExZWpaT1duQlhjWEJ1WTFaVmRWRmxOa1ZsVDJWR1MxVjBjWHB5ZDNsb2NuZFJUMk5yUVdkVBjh2vOz7zFIABI-CgVvcGVueBIsZXlKcElqb2lWWFpxUTNCWGFIcFJUMWRWVXpnclZYaEJUVTlWVVQwOUluMD0YydHzs-8xSAA.&pps=5%3D640%7C432&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532343142&idt=6790&prev_scp=divID%3Dphoto_Top_Left_160x600_OuterRail%26pos%3Dphoto_Top_Left_160x600_OuterRail%26refresh_count%3D0%26amznbid%3D1%26amznp%3D1%26hb_format_criteo%3Dbanner%26hb_size_criteo%3D728x90%26hb_pb_criteo%3D0.08%26hb_adid_criteo%3D1003b69791cd11ad%26hb_bidder_criteo%3Dcriteo%26hb_format%3Dbanner%26hb_size%3D728x90%26hb_pb%3D0.08%26hb_adid%3D1003b69791cd11ad%26hb_bidder%3Dcriteo&cust_params=width%3D1280%26skin_width%3Dyes%26justpremium_jj%3Dyes%26jjurl%3D%252F%26referrer%3DOther%26referrerPVs%3DOther%26jjpost%3D2017302%26PageType%3Dhomepage%26category%3DFirst%2520Listen%252CKim%2520Kardashian%252CMusic%252CTaylor%2520Swift%252CThe%2520Tortured%2520Poets%2520Department%26browser%3Dchrome%26pageview_count%3D1%26rules%3Dhome%26arcspan%3Dyes%26arcspan_c%3DavM7hHWe%252C8FWC3Bns&adks=1915671097&frm=20&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:54 UTC	896	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 5793238921 Google-Creative-Id: 138364391171 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:54 UTC	359	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 31 38 35 34 39 33 35 36 36 32 2f 6a 75 73 74 6a 61 72 65 64 2f 64 65 73 6b 74 6f 70 2f 61 64 68 65 73 69 6f 6e 2f 70 68 6f 74 6f 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 39 30 2c 37 32 38 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 33 36 34 33 39 31 31 37 31 5d 2c 5b 35 37 39 33 32 33 38 39 32 31 5d 2c 5b 34 38 38 38 32 33 35 34 36 34 5d 2c 5b 32 38 35 38 32 38 32 38 33 35 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6e 35 73 4a 6a 33 7a 37 2d 61 48 57 53 69 44 39 45 Data Ascii: 8000{"/21854935662/justjared/desktop/adhesion/photo":["html",1,null,null,1,90,728,0,0,null,null,null,1,null,[138364391171],[5793238921],[4888235464],[2858282835],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsn5sJj3z7-aHWSiD9E
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 77 49 69 67 4d 64 51 36 45 46 32 51 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 7d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 69 6e 44 61 70 49 46 3d 74 72 75 65 2c 69 6e 47 70 74 49 46 3d 74 72 75 65 3b 3c 2f 73 63 72 Data Ascii: wIigMdQ6EF2Q",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"8",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</scr
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 45 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 45 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 44 28 29 3b 44 28 29 3b 78 28 22 53 61 66 61 72 69 22 29 26 26 28 44 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 65 61 3d 7b 7d 2c 46 3d 6e 75 6c 6c 3b 76 61 72 20 47 3d 53 79 Data Ascii: ("Edge"))\|\|x("Silk")};function E(a){E[" "](a);return a}E[" "]=function(){};!x("Android")\|\|D();D();x("Safari")&&(D()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera"));var ea={},F=null;var G=Sy
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 28 61 5b 47 5d 7c 30 29 26 32 3f 61 3a 73 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 48 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 72 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 47 5d Data Ascii: turn a};function ra(a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=K(a,void 0,0)?void 0:e&&(a[G]\|0)&2?a:sa(a,b,c,void 0!==d,e);else if(H(a)){const f={};for(let g in a)f[g]=ra(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function sa(a,b,c,d,e){const f=d\|\|c?a[G]
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 2e 6c 2c 21 31 29 3a 75 61 28 74 68 69 73 2c 73 61 28 74 68 69 73 2e 6c 2c 74 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 2c 21 30 29 7d 7d 3b 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 61 3b 20 4f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 43 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6c 3a 62 29 5b 47 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 48 28 63 3d 62 Data Ascii: .l,!1):ua(this,sa(this.l,ta,void 0,void 0,!1),!0)}};O.prototype.A=fa; O.prototype.toString=function(){return ua(this,this.l,!1).toString()}; function ua(a,b,c){var d=ca?void 0:a.constructor.C;const e=(c?a.l:b)[G];a=b.length;if(!a)return b;let f,g;if(H(c=b
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 3b 30 3c 3d 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 63 2c 62 29 29 26 26 62 3c 64 3b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 3d 3d 66 7c 7c 36 33 3d 3d 66 29 69 66 28 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 65 29 2c 21 66 7c 7c 36 31 3d 3d 66 7c 7c 33 38 3d 3d 66 7c 7c 33 35 3d 3d 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 3d 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 44 61 3d 2f 23 7c 24 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 65 61 72 63 68 28 44 61 29 2c 63 3d 43 61 28 61 2c 30 2c 22 61 73 65 22 2c 62 29 3b 69 66 28 30 3e 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 63 29 3b 69 66 28 30 3e Data Ascii: ;0<=(b=a.indexOf(c,b))&&b<d;){var f=a.charCodeAt(b-1);if(38==f\|\|63==f)if(f=a.charCodeAt(b+e),!f\|\|61==f\|\|38==f\|\|35==f)return b;b+=e+1}return-1}var Da=/#\|$/; function Ea(a){var b=a.search(Da),c=Ca(a,0,"ase",b);if(0>c)return null;var d=a.indexOf("&",c);if(0>
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 6e 73 74 20 64 3d 65 3d 3e 7b 62 26 26 62 28 65 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 2c 21 31 29 7d 3b 41 61 28 63 2c 22 6c 6f 61 64 22 2c 64 29 3b 41 61 28 63 2c 22 65 72 72 6f 72 22 2c 64 29 7d 63 2e 73 72 63 3d 61 3b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 63 29 7d 3b 6c 65 74 20 51 61 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 62 26 26 62 2e 67 65 74 41 Data Ascii: nst d=e=>{b&&b(e);c.removeEventListener&&c.removeEventListener("load",d,!1);c.removeEventListener&&c.removeEventListener("error",d,!1)};Aa(c,"load",d);Aa(c,"error",d)}c.src=a;u.google_image_requests.push(c)};let Qa=0;function Ra(a,b=null){return b&&b.getA
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 68 69 73 2e 64 65 70 74 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 54 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 26 26 61 2e 74 69 6d 69 6e 67 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6e 6f 77 28 29 2b 61 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 29 7b 63 6f 6e 73 74 20 61 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 3f 61 2e 6e 6f 77 28 29 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 76 61 72 20 63 3d 24 61 28 29 7c 7c 5a Data Ascii: his.depth=null}};let T=null;function Za(){const a=u.performance;return a&&a.now&&a.timing?Math.floor(a.now()+a.timing.navigationStart):Date.now()}function $a(){const a=u.performance;return a&&a.now?a.now():null};var ab=class{constructor(a,b){var c=$a()\|\|Z
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 64 75 72 61 74 69 6f 6e 3d 28 24 61 28 29 7c 7c 5a 61 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 21 74 68 69 73 2e 67 7c 7c 32 30 34 38 3c 20 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 69 2e 70 75 73 68 28 61 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 66 75 6e 63 74 69 6f 6e 20 65 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 49 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 70 29 7b 28 67 3d 66 62 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 66 Data Ascii: duration=($a()\|\|Za())-a.value;var b=`goog_${a.label}_${a.uniqueId}_end`;U&&V()&&U.mark(b);!this.g\|\|2048< this.i.length\|\|this.i.push(a)}}};function W(a,b){const c={};c[a]=b;return[c]}function eb(a,b,c,d,e){const f=[];Ia(a,function(g,p){(g=fb(g,b,c,d,e))&&f
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 5c 5c 64 2b 28 3f 3a 2e 7c 5c 5c 6e 29 2a 29 5c 5c 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 Data Ascii: .name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\\\d+(?:.\|\\n)*)\\\\2"),"$1");b=a.replace(R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.5	50575	34.110.253.203	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	626	OUT	GET /aadetect/px.gif?ch=2&rn=82656&adslot=aaegse_728x90_ HTTP/1.1 Host: merequartz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	481	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 42 Content-Type: image/gif Last-Modified: Tue, 09 Apr 2024 18:41:30 GMT Strict-Transport-Security: max-age=15724800; preload Timing-Allow-Origin: * Vary: Accept-Encoding X-Buildname: hoothoot X-Buildnumber: 1205290244 X-Datacenter: gce-us-east1 X-Hostname: fen-hoothoot-us-east1-f00b Date: Fri, 19 Apr 2024 13:12:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.5	50572	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	822	OUT	GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1\|7LJ.0.8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb\|8i8.0.1
2024-04-19 13:12:54 UTC	1259	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:54 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev_part=3-1qw8\|7bq.0.1\|7LJ.0.8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb\|8i8.0.1\|7dW.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 19-Apr-2025 13:12:54 GMT;SameSite=None;Partitioned Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:54 GMT;Max-Age=0;SameSite=None Set-Cookie: pb_rtb_ev_part=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:54 GMT;Max-Age=0;SameSite=None Location: https://ce.lijit.com/merge?pid=49&3pid=part_d3pYBt4hoB3q&ev=1&pid=558511&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.5	50580	3.161.136.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	545	OUT	GET /rules-p-00TsOkvHvnsZU.js HTTP/1.1 Host: rules.quantcount.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 160 Connection: close Last-Modified: Thu, 13 Oct 2022 22:56:02 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin access-control-allow-origin: * access-control-allow-methods: GET Date: Fri, 19 Apr 2024 13:03:41 GMT Cache-Control: max-age=3600 ETag: "1606c77f964fed869c1c52ad7f0e3885" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e0107f6926d58620e17fce496eda1036.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: a53OQaAzoxNasDwbW2phHrYAre5bZ1gCGTDIPq-WZLKs4gDne8v8jA== Age: 583
2024-04-19 13:12:54 UTC	160	IN	Data Raw: 2f 2a 0a 20 51 75 61 6e 74 63 61 73 74 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 74 61 67 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 32 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 5f 5f 71 63 28 22 72 75 6c 65 73 22 2c 5b 61 5d 29 7d 29 28 22 70 2d 30 30 54 73 4f 6b 76 48 76 6e 73 5a 55 22 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b Data Ascii: /* Quantcast measurement tag Copyright (c) 2008-2022, Quantcast Corp.*/'use strict';(function(a,b,c){__qc("rules",[a])})("p-00TsOkvHvnsZU",window,document);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.5	50577	54.166.111.231	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	694	OUT	GET /cookie-sync/id5?us_privacy=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAEPf07MRNwAABWcWeK7WQ; bitoIsSecure=ok; checkForPermission=ok
2024-04-19 13:12:54 UTC	418	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:54 GMT location: https://id5-sync.com/k/155.gif?puid=AAEPf07MRNwAABWcWeK7WQ&id5AccountNum=155&numCascadesAllowed=9 Server: gunicorn set-cookie: bito=AAEPf07MRNwAABWcWeK7WQ; Domain=bidr.io; expires=Mon, 19 May 2025 09:12:54 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.5	50579	104.26.9.169	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	743	OUT	GET /localstore.js HTTP/1.1 Host: script.4dex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uids=eyJ1aWRzIjp7ImFkYWdpbyI6eyJ1aWQiOiIxOGQ3Y2UwMy1mMmYyLTQ1NjAtYmIwYS03NzNhYWQyMjQyNTciLCJleHBpcmVzIjoiMjAyNC0wNi0xOFQxMzoxMjo0Ni45NjY5MTY2MloifX0sImJkYXkiOiIyMDI0LTA0LTE5VDEzOjEyOjQ2Ljk2Njg2NDQxNVoifQ==
2024-04-19 13:12:54 UTC	709	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: application/javascript Content-Length: 1372 Connection: close Cache-Control: public, max-age=1800 ETag: "00a8e13a83b2bbab51af8e55f52be363" Last-Modified: Thu, 18 Apr 2024 08:50:22 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 101757 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2AhXKTV7GqrKaaMQtNw5Zytb96y53nLDFj2eltYdNBdbPTADyDkm1CTTJorqKm1vM7nZiPoebNFq%2BqiBjFHL7tF%2FNwMf1oiYkIv3nwZwB0GqCGu1Ay32U4TVul0%2FBQZp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d261caf4c4533-ATL
2024-04-19 13:12:54 UTC	660	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3f 77 69 6e 64 6f 77 2e 74 6f 70 3a 77 69 6e 64 6f 77 2e 73 65 6c 66 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 28 29 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 4d 53 49 45 7c 54 72 69 64 65 6e 74 29 2f 29 29 7b 74 72 79 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 28 29 3b 69 66 28 74 2e 41 44 41 47 49 4f 3d 74 2e 41 44 41 Data Ascii: !function(){"use strict";var e=function(){return function(){try{if(window.top.location.href)return!0}catch(e){return!1}}()?window.top:window.self};!function(){if(!e().navigator.userAgent.match(/(MSIE\|Trident)/)){try{!function(){var t=e();if(t.ADAGIO=t.ADA
2024-04-19 13:12:54 UTC	712	IN	Data Raw: 61 70 69 2d 69 6e 74 65 67 72 61 74 69 6f 6e 2d 6d 6f 64 65 22 2c 22 70 72 65 62 69 64 22 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 65 29 2c 74 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 7c 7c 28 74 2e 41 44 41 47 49 4f 2e 63 6c 65 61 6e 41 64 49 73 4c 6f 61 64 65 64 3d 21 30 2c 74 2e 41 44 41 47 49 4f 2e 63 6c 65 61 6e 41 64 49 73 4c 6f 61 64 69 6e 67 3d 21 31 29 7d 3b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 61 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 41 44 41 47 49 4f 2e 63 6c 65 61 6e 41 64 49 73 4c 6f 61 64 65 64 7c 7c 28 6e 2e 72 65 Data Ascii: api-integration-mode","prebid");var a=function e(){n.removeEventListener("load",e),t.document.head.contains(n)\|\|(t.ADAGIO.cleanAdIsLoaded=!0,t.ADAGIO.cleanAdIsLoading=!1)};n.addEventListener("load",a),setTimeout((function(){t.ADAGIO.cleanAdIsLoaded\|\|(n.re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.5	50578	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	1452	OUT	GET /api/user?gdpr=user.gdpr&gdpr_consent=user.consentStr&us_privacy=user.usPrivacy&partnerId=sundaysky&userId=d6.f67b530ab25f49d8bfcc9cac8250cd2b HTTP/1.1 Host: sync.cootlogix.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://syncaps.cootlogix.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; vdzj1_10abe312=Fbl140c8GLP7ktNCANAS0FIJj4kWQ4GPWF7FWMFBQtyfzUFUxB5d3V%2FIgBTCXAoM1JcFyxhbWx3BAJZIyhoVQpHKiF5eCdRAgkme2lWXRZsb2N7JwMGDHd0aVQJQ3kid35xAVRbJHhlU19WYmF3fXVVWgB3eDJVWBcqdSIrJQJTW3R7ZVVJWGx2J310AwZecShnA19FLXNxf3ZUAF1wLzQVR1Z4d3Z4cQhTDSUqZQZZFXkgJ3d3BlMLcn1yG0lCfXFwLHEJVQ92fWgDXkwtcnh%2FdVFWDXJuDRtJFyE2LzpjClMUZSs0RxlWdDhjJzJ1Nhp9KjFbGBFiYSYqMUJBAmV8chtJEyozMw0uXhBdKThyDUlWYmE0PRFCCk4mLykVUVZ%2FGg8AY01PGjQpI0QCGyBhe2x5A1NZcX5mA0ZCeCF5Y3AHBVtqfzVSWll3ciMoJAlRDyN%2FNAZJWGwgLiAvVQBMLiM%2Bfg9WdGF3eiNTBl51f2BUDRB%2Benh5JAgFCHJ8ZQBJWGwqMgcnQgJVIm5qQxkBKz4%3D
2024-04-19 13:12:54 UTC	548	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization access-control-allow-credentials: true p3p: CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa" access-control-allow-methods: GET, HEAD, OPTIONS, POST set-cookie: vdz_sync=a2cfff08-e3a1-d49f-dccd-86df76cdf804; Domain=.cootlogix.com; Path=/; Expires=Sun, 19 May 2024 13:12:54 GMT; Secure; SameSite=None content-length: 0 date: Fri, 19 Apr 2024 13:12:54 GMT keep-alive: timeout=5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.5	50574	54.243.52.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	607	OUT	POST /e HTTP/1.1 Host: 1x1.a-mo.net Connection: keep-alive Content-Length: 287 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	287	OUT	Data Raw: 7b 22 63 22 3a 7b 22 64 6f 22 3a 22 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 55 22 3a 6e 75 6c 6c 2c 22 72 65 22 3a 22 22 2c 22 56 22 3a 22 38 2e 33 37 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 7d 2c 22 65 22 3a 5b 7b 22 41 22 3a 22 61 6d 78 22 2c 22 61 22 3a 22 70 68 6f 74 6f 5f 54 6f 70 5f 4c 65 66 74 5f 31 36 30 78 36 30 30 5f 4f 75 74 65 72 52 61 69 6c 22 2c 22 62 69 64 22 3a 22 39 31 32 33 31 36 39 36 62 66 38 34 32 38 31 22 2c 22 6e 22 3a 22 67 5f 70 62 74 6f 22 2c 22 61 75 64 22 3a 22 35 65 36 31 61 65 62 34 2d 61 65 65 34 2d 34 34 66 38 2d 61 62 66 66 2d 38 33 65 34 66 65 61 62 61 61 31 30 22 2c 22 77 22 3a 37 32 38 2c 22 68 22 Data Ascii: {"c":{"do":"www.justjared.com","u":"https://www.justjared.com/","U":null,"re":"","V":"8.37.0","vg":"pbjs"},"e":[{"A":"amx","a":"photo_Top_Left_160x600_OuterRail","bid":"91231696bf84281","n":"g_pbto","aud":"5e61aeb4-aee4-44f8-abff-83e4feabaa10","w":728,"h"
2024-04-19 13:12:54 UTC	361	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:54 GMT Connection: close access-control-allow-origin: * cache-control: max-age=0, private, must-revalidate server: MonetEngine set-cookie: amuid2=308083b8-f695-4f56-86b8-c04500047a0e; path=/; domain=.a-mo.net; expires=Sat, 19 Apr 2025 13:12:54 GMT; max-age=31536000; secure; HttpOnly; SameSite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.5	50589	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	596	OUT	GET /assets/smart-tag/versioned/main-v2_c24410c35e5d87b630f3d54a49f2b820.js HTTP/1.1 Host: assets.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	920	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPont-eziGxKTwMDWwI_XycFyWMWosjFzkRLCnt4giSWtQkzUbq9cj1Ty1AGyu0i27wfmTk Date: Fri, 19 Apr 2024 13:12:54 GMT Last-Modified: Thu, 18 Apr 2024 19:25:26 GMT ETag: W/"cabcc434c684ee97e6e8938326c682f4" Vary: Accept-Encoding x-goog-generation: 1713468326563008 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 132806 Content-Type: text/javascript x-goog-hash: crc32c=S4O6Tw== x-goog-hash: md5=yrzENMaE7pfm6JODJsaC9A== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: etag Access-Control-Expose-Headers: Content-Type X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Cache-Control: public,max-age=31536000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:54 UTC	335	IN	Data Raw: 61 31 33 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6d 61 72 74 5f 74 61 67 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6d 61 72 74 5f 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 35 38 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 63 72 65 61 74 65 45 6e 64 63 61 70 44 65 70 6c 6f 79 6d 65 6e 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 34 35 34 34 29 2c 69 Data Ascii: a13/! For license information please see main.js.LICENSE.txt /(window.webpackChunksmart_tag=window.webpackChunksmart_tag\|\|[]).push([[179],{9586:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.createEndcapDeployment=void 0;var o=n(4544),i
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 69 6f 6e 2e 62 78 22 2c 75 2c 21 31 29 2c 65 2e 6f 6e 63 65 28 22 61 63 74 69 76 61 74 69 6f 6e 2e 62 78 22 2c 75 2c 21 31 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 62 6f 75 6e 63 65 78 2e 73 74 61 74 65 2e 6d 6f 62 69 6c 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 64 6f 6d 45 6c 65 6d 65 6e 74 49 44 2c 6f 3d 65 2e 63 61 6c 6c 6f 75 74 5f 76 6f 66 66 73 65 74 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6e 29 2c 72 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 30 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 74 69 63 6b 79 50 61 72 61 6c 6c 61 78 45 Data Ascii: ion.bx",u,!1),e.once("activation.bx",u,!1)},a=function(){if(bouncex.state.mobile){var t,n=e.domElementID,o=e.callout_voffset,a=document.getElementById(n),r=null!==(t=null==a?void 0:a.clientHeight)&&void 0!==t?t:0,c=document.getElementById("stickyParallaxE
2024-04-19 13:12:54 UTC	996	IN	Data Raw: 21 31 3b 76 61 72 20 65 3d 74 2e 66 69 6e 64 43 61 6d 70 61 69 67 6e 28 22 66 6c 6f 61 74 65 72 22 29 3b 72 65 74 75 72 6e 21 28 65 26 26 65 2e 68 61 73 42 69 64 73 28 29 29 7d 2c 66 69 6e 64 43 61 6d 70 61 69 67 6e 3a 74 2e 66 69 6e 64 43 61 6d 70 61 69 67 6e 2c 67 65 74 43 61 6d 70 61 69 67 6e 3a 74 2e 67 65 74 43 61 6d 70 61 69 67 6e 2c 68 61 6e 64 6c 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 2c 69 73 42 6c 6f 63 6b 65 64 3a 6e 2c 69 73 52 65 61 64 79 46 6f 72 41 75 63 74 69 6f 6e 3a 69 7d 7d 7d 2c 39 37 38 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 38 36 39 38 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e Data Ascii: !1;var e=t.findCampaign("floater");return!(e&&e.hasBids())},findCampaign:t.findCampaign,getCampaign:t.getCampaign,handleEvent:function(e){},isBlocked:n,isReadyForAuction:i}}},9782:(e,t,n)=>{var o=n(8698);Object.defineProperty(t,"__esModule",{value:!0}),t.
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 33 30 30 30 0d 0a 69 2e 68 61 73 46 65 61 74 75 72 65 46 6c 61 67 29 28 22 46 4c 4f 41 54 49 4e 47 5f 4d 41 53 54 48 45 41 44 5f 44 49 53 41 42 4c 45 5f 50 49 4e 4e 49 4e 47 22 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 28 29 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 69 6e 63 6c 75 64 65 73 28 22 62 78 2d 64 65 70 6c 6f 79 6d 65 6e 74 2d 66 6c 6f 61 74 65 72 2d 70 69 6e 6e 65 64 22 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6f 6e 63 65 28 22 69 6d 70 72 65 73 73 69 6f 6e 2e 62 78 22 2c 79 2c 21 31 29 2c 65 2e 6f 6e 63 65 28 22 61 63 74 69 76 61 74 69 6f 6e 2e 62 78 22 2c 79 2c 21 31 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 28 30 2c 73 2e 67 65 74 Data Ascii: 3000i.hasFeatureFlag)("FLOATING_MASTHEAD_DISABLE_PINNING")},l=function(){return e.getElement().classList.value.includes("bx-deployment-floater-pinned")},d=function(){e.once("impression.bx",y,!1),e.once("activation.bx",y,!1)},p=function(t){var r=(0,s.get
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 6f 62 6a 31 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 62 78 63 22 29 2c 74 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 69 6e 68 65 72 69 74 22 2c 74 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 54 6f 70 3d 22 2d 22 2e 63 6f 6e 63 61 74 28 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 22 70 78 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 68 69 64 65 28 29 7d 29 2c 32 30 30 29 2c 74 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 54 6f 70 3d 22 30 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 28 29 Data Ascii: {var n;return null===(n=e.obj1[0])\|\|void 0===n\|\|n.classList.remove("bxc"),t.style.overflow="inherit",t.style.marginTop="-".concat(t.offsetHeight,"px"),setTimeout((function(){e.hide()}),200),t},g=function(t,n){return t.style.marginTop="0",function(){if(u()
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 28 75 3d 75 2e 61 64 73 43 6f 6e 66 69 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 73 6d 61 72 74 48 65 61 64 65 72 53 65 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 22 73 6d 61 72 74 2d 68 65 61 64 65 72 2d 6d 61 73 74 68 65 61 64 22 2c 68 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 28 29 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 78 3d 28 30 2c 69 2e 67 65 74 49 73 54 6f 70 4f 66 45 6c 65 6d 65 6e 74 49 6e 56 69 65 77 29 28 65 2e 63 61 6c 6c 6f 75 74 5f 74 29 2c 79 3d 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 59 3c 3d 31 2e 32 2a 68 2c 77 3d 22 73 6d 61 72 74 2d 68 65 61 64 65 72 2d 6c 69 67 68 74 22 3d 3d 3d 76 26 26 28 78 7c 7c 79 29 3b 69 66 28 70 29 7b 69 66 28 21 6f 29 72 65 74 75 72 6e 3b 72 65 74 75 72 Data Ascii: (u=u.adsConfig)\|\|void 0===u?void 0:u.smartHeaderSelection)&&void 0!==s?s:"smart-header-masthead",h=e.getElement().clientHeight,x=(0,i.getIsTopOfElementInView)(e.callout_t),y=window.scrollY<=1.2*h,w="smart-header-light"===v&&(x\|\|y);if(p){if(!o)return;retur
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 64 5f 63 6c 6f 73 65 64 29 26 26 28 21 21 65 2e 68 61 73 42 69 64 73 28 29 7c 7c 21 28 6e 26 26 6e 2e 68 61 73 42 69 64 73 28 29 29 29 7d 2c 66 69 6e 64 43 61 6d 70 61 69 67 6e 3a 74 2e 66 69 6e 64 43 61 6d 70 61 69 67 6e 2c 67 65 74 43 61 6d 70 61 69 67 6e 3a 74 2e 67 65 74 43 61 6d 70 61 69 67 6e 2c 68 61 6e 64 6c 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 79 70 65 2c 6e 3d 7b 22 69 6d 70 72 65 73 73 69 6f 6e 2e 62 78 22 3a 70 2c 22 73 63 72 6f 6c 6c 2e 62 78 22 3a 5f 2c 22 61 63 74 69 76 61 74 69 6f 6e 2e 62 78 22 3a 76 7d 3b 69 66 28 74 20 69 6e 20 6e 29 72 65 74 75 72 6e 28 30 2c 6e 5b 74 5d 29 28 65 29 7d 2c 69 73 42 6c 6f 63 6b 65 64 3a 68 2c 69 73 52 65 61 64 79 46 6f 72 41 75 63 74 69 6f 6e 3a 78 2c 67 65 Data Ascii: d_closed)&&(!!e.hasBids()\|\|!(n&&n.hasBids()))},findCampaign:t.findCampaign,getCampaign:t.getCampaign,handleEvent:function(e){var t=e.type,n={"impression.bx":p,"scroll.bx":_,"activation.bx":v};if(t in n)return(0,n[t])(e)},isBlocked:h,isReadyForAuction:x,ge
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 66 61 69 6c 65 64 26 26 74 2e 64 65 70 6c 6f 79 6d 65 6e 74 3d 3d 3d 65 7d 29 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 28 29 3b 72 65 74 75 72 6e 20 74 3f 6e 21 3d 3d 63 2e 42 4c 4f 43 4b 45 44 5f 48 41 52 44 3a 21 6e 7d 7d 7d 2c 38 30 31 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 67 65 74 4d 73 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 32 34 38 31 29 3b 74 2e 67 65 74 4d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 6f 2e 68 61 73 46 65 61 74 75 72 65 46 6c 61 67 29 28 22 53 54 49 43 4b 59 5f 4d 41 Data Ascii: failed&&t.deployment===e}))},l=function(e){return function(t){var n=e();return t?n!==c.BLOCKED_HARD:!n}}},8014:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.getMs=void 0;var o=n(2481);t.getMs=function(){var e=(0,o.hasFeatureFlag)("STICKY_MA
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2c 69 3d 6e 3f 6f 2e 66 6f 63 75 73 61 62 6c 65 45 6c 73 2e 6e 6f 74 28 22 5b 74 61 62 69 6e 64 65 78 3d 2d 31 5d 22 29 3a 6f 2e 66 6f 63 75 73 61 62 6c 65 45 6c 73 2c 61 3d 74 3f 69 2e 6e 6f 74 28 22 2e 62 78 2d 63 6c 6f 73 65 2d 6f 75 74 73 69 64 65 2c 20 2e 62 78 2d 63 6c 6f 73 65 2d 69 6e 73 69 64 65 22 29 3a 69 3b 61 2e 65 71 28 30 29 26 26 61 2e 65 71 28 30 29 2e 66 6f 63 75 73 28 29 7d 2c 73 68 6f 77 41 6c 6c 79 4f 76 65 72 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 74 61 62 44 65 63 6f 79 73 2e 62 69 6e 64 28 22 66 6f 63 75 73 2e 62 63 78 5f 63 61 6d 70 61 69 67 6e 5f 61 6c 6c 79 5f Data Ascii: e,t,n){var o=bouncex.campaigns[e],i=n?o.focusableEls.not("[tabindex=-1]"):o.focusableEls,a=t?i.not(".bx-close-outside, .bx-close-inside"):i;a.eq(0)&&a.eq(0).focus()},showAllyOverlay:function(e){bouncex.campaigns[e].tabDecoys.bind("focus.bcx_campaign_ally_
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 29 3f 61 28 74 2c 21 31 2c 21 30 29 3a 74 68 69 73 3d 3d 3d 6f 2e 74 61 62 44 65 63 6f 79 73 2e 67 65 74 28 31 29 26 26 6e 2e 66 6f 63 75 73 4f 6e 46 69 72 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 65 6e 74 28 74 2c 21 31 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 2e 63 61 5f 69 64 3b 22 45 73 63 61 70 65 22 21 3d 3d 65 2e 63 6f 64 65 26 26 32 37 21 3d 3d 65 2e 6b 65 79 43 6f 64 65 7c 7c 62 6f 75 6e 63 65 78 2e 63 6c 6f 73 65 5f 61 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2c 69 3d 6e 3f 6f 2e 66 6f 63 75 73 61 62 6c 65 45 6c 73 2e 6e 6f 74 28 22 5b 74 61 62 69 6e 64 65 78 3d 2d 31 5d 22 29 3a 6f 2e Data Ascii: )?a(t,!1,!0):this===o.tabDecoys.get(1)&&n.focusOnFirstFocusableElement(t,!1,!0)}function i(e){var t=e.data.ca_id;"Escape"!==e.code&&27!==e.keyCode\|\|bouncex.close_ad(t)}function a(e,t,n){var o=bouncex.campaigns[e],i=n?o.focusableEls.not("[tabindex=-1]"):o.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.5	50582	44.196.251.236	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	1175	OUT	GET /qmap?c=1389&tp=STSC&tpid=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=2647d031a51b7a31cc96fbee0c73c78c; _cc_cc="ACZ4XmNQMDIzMU8xMDZMNDVMMk80NkxOtjRLS0pNNUg2N042t0hmAII0pdwrIBoKAFK7CtM%3D"; _cc_aud="ABR4XmNgYGBIU8q9AqSgAAAVmAHK"
2024-04-19 13:12:54 UTC	541	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.12.11 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&partner_url=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D16%263pid%3D43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553%26gdpr%3D0%26gdpr_consent%3D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.5	50594	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	673	OUT	GET /usersync?b=apn&i=187107314970053313 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:54 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:54 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.5	50597	54.224.168.63	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	724	OUT	GET /usersync?b=pln&i=part_d3pYBt4hoB3q&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:54 UTC	263	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-19 13:12:54 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.5	50601	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	704	OUT	GET /ecm3?ex=sharethrough.com&id=7456771a-49ee-4e2a-b013-668de61e15dd HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://match.sharethrough.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:54 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 80MCRH02TXYGBSVJ16S5 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.5	50593	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	709	OUT	GET /usersync?b=sta&i=0-574b2083-e644-55af-4eb8-953600e21e55$ip$81.181.57.52 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:54 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:54 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.5	50596	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	691	OUT	GET /usersync?b=opx&i=7669598c-e9e1-4744-a9e6-179168743cea HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:54 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:54 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.5	50599	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	691	OUT	GET /usersync?b=vnt&i=d1de5a8b-9e01-4b61-be41-ca37f8e5e62e HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:54 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:54 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.5	50595	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	674	OUT	GET /usersync?b=sad&i=1845939505169848484 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cs=true; vst=u_bd73a985-3ef7-4416-a679-3a9309181613
2024-04-19 13:12:54 UTC	210	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-19 13:12:54 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.5	50604	34.110.253.203	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	625	OUT	GET /aadetect/px.gif?ch=1&rn=82656&adslot=hluad_728x90_ HTTP/1.1 Host: merequartz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	481	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 42 Content-Type: image/gif Last-Modified: Tue, 09 Apr 2024 18:41:30 GMT Strict-Transport-Security: max-age=15724800; preload Timing-Allow-Origin: * Vary: Accept-Encoding X-Buildname: hoothoot X-Buildnumber: 1205290244 X-Datacenter: gce-us-east1 X-Hostname: fen-hoothoot-us-east1-f00b Date: Fri, 19 Apr 2024 13:12:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.5	50603	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	596	OUT	GET /assets/smart-tag/versioned/cjs_min_1e55b565811f11b08485230cf1d150d6.js HTTP/1.1 Host: assets.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	891	IN	HTTP/1.1 200 OK x-goog-generation: 1702484591435387 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15751 Content-Encoding: gzip x-goog-hash: crc32c=3TW0yQ== x-goog-hash: md5=19x9frzE9a9fwtSATn7HNw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 15751 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: etag Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ABPtcPqRSs9nRiMR9bGxrOoC2nbmk6nnEPiNeb5K3F4hC-S8isxeod0q-BCaOXNC7JIARjswSCWo2q9iYg Server: UploadServer Date: Fri, 19 Apr 2024 02:22:39 GMT Last-Modified: Wed, 13 Dec 2023 16:23:11 GMT ETag: "d7dc7d7ebcc4f5af5fc2d4804e7ec737" Content-Type: text/javascript; charset=utf-8 Age: 39015 Cache-Control: public,max-age=31536000,no-transform Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:54 UTC	364	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 b4 5a 7d 57 e2 c8 d2 ff ff f9 14 d8 e7 1e 4e 32 b6 91 80 f8 12 27 8f 87 81 e8 64 47 81 4b d0 71 ae e3 e6 84 a4 91 ac 21 e1 26 41 9c 05 9e cf fe 54 75 5e 41 dd 71 cf 9d 7b 76 16 93 ea ea ea ea aa ea ea 5f 75 67 ff c3 4e e5 3c 08 2b 9e 6b 33 3f 62 15 d7 1f 07 e1 d4 8a dd c0 af cc 3c 66 01 29 62 ac 62 4b 53 d7 97 fe 88 a4 4b bd ad 75 0d 4d 8a 9f e3 ca 87 fd ff 11 04 51 fd df e5 93 15 56 98 ba 3c 69 d4 14 06 af 64 8e bd e2 d0 b5 63 72 ca 24 f6 3c 0b c2 38 52 97 ae ef c6 ae e5 b9 7f 32 65 3c f7 6d 1c 43 60 34 16 79 ff 50 2d 68 e2 32 0e 7f 2c 43 16 cf 43 bf f2 9b d1 eb 4a 33 2b 8c 98 c0 1f 51 b0 ff e0 8e 7f 08 6c b5 5a ae 45 71 6d 5b b1 3d c1 5e 49 8f e5 7a bd 16 58 b5 ca 24 c7 8a 61 02 b1 78 9a 8a 8a 27 6e 24 b5 fa fa 17 ed 9b 1a Data Ascii: Z}WN2'dGKq!&ATu^Aq{v_ugN<+k3?b<f)bbKSKuMQV<idcr$<8R2e<mC`4yP-h2,CCJ3+QlZEqm[=^IzX$ax'n$
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 68 b6 3f 41 83 3d 2a f7 6c 75 12 aa e5 6c d2 f5 8e 61 f6 ba 97 df 92 56 d7 89 02 df fb b1 c9 62 b4 07 7a 7f 68 c2 d8 86 de eb aa 71 4a ed 5d 0f da 9a ca 8d 1e 85 76 26 cd 34 be 75 db e6 f0 5b 5f e3 e2 e2 1f 33 56 96 f5 e9 d6 d4 bb e7 3d 75 b9 88 5c 47 59 b8 be 13 2c a4 51 00 61 c0 9e ab d5 cd 77 69 c1 46 91 1b b3 b7 e8 12 5a ea 29 70 9d 4a 6d cd a5 43 10 d0 c6 f1 89 82 11 46 43 71 3b 2c b3 60 ab f8 a5 c0 01 8d af 07 97 0a 99 c4 f1 2c 52 f6 f7 c1 02 92 ed f8 0b d7 79 60 b1 64 07 53 42 af 0d 6d b0 cd 14 6e 33 69 37 60 78 63 93 8d 3d 31 3f 8e 72 b5 7d 16 13 0a 21 a5 5d 6e b2 cd dc e7 6d 69 97 bd 8b 2d 51 db 1c bd fe b0 77 3d dc 64 0a 66 71 30 8f b7 39 3b 5d c3 ec f4 ae 5a 7a 57 21 d0 34 b2 a2 47 68 42 65 d6 77 ec 7e 8d 0b 31 50 89 69 ba 8e 1d f8 31 c4 1d a1 Data Ascii: h?A=*lulaVbzhqJ]v&4u[_3V=u\GY,QawiFZ)pJmCFCq;,`,Ry`dSBmn3i7`xc=1?r}!]nmi-Qw=dfq09;]ZzW!4GhBew~1Pi1
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 83 ae de 05 67 7e b5 42 1f f0 2e 78 b1 db ba 1e 7e ee 0d f4 7f a1 ed af 7d 6b 1e 4f 82 10 c0 34 d8 fc 5b af fd 4e 0b 02 27 0e 7b d3 ba 04 03 0e 07 ad 73 5c 52 79 a7 6e 10 57 5a 1e 18 83 39 15 70 a9 76 5d 89 43 6b 3c 76 6d 42 af 5a c3 f6 67 b3 05 08 f5 db 50 6f 1b 0a 99 22 ea 46 40 84 4e 28 d1 e7 11 5f f2 60 1d ad 3d d4 b8 97 86 d7 86 d9 ee 75 34 43 59 d6 21 91 ef d4 e8 41 4d 4e fe 34 f8 9f 7a 1d fe ac 69 bb 07 a5 45 17 d1 65 b7 03 73 d1 3b 4a bd 79 98 53 fb d7 03 6e 70 40 a9 ca 9d 4c eb f4 80 36 ef a9 de fa 64 66 1c 3f 9b 3c f0 56 da 01 94 39 7e 5c 39 0f 61 1f 59 04 e1 23 e1 22 ae 8d be 09 b0 e6 6f 89 82 3e 15 e8 43 e8 a7 de 75 b7 ad dd 9a 09 2e 52 48 fd f7 cf fa 8f c7 0e 34 24 08 17 7e 00 dc 83 cd 95 66 ad 96 13 b3 2c 77 02 49 2e a3 dd 80 57 06 da 39 c4 Data Ascii: g~B.x~}kO4[N'{s\RynWZ9pv]Ck<vmBZgPo"F@N(_`=u4CY!AMN4ziEes;JySnp@L6df?<V9~\9aY#"o>Cu.RH4$~f,wI.W9
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: c8 0e dd 59 ca 01 46 13 4a 7b 48 71 ae 6a 89 78 a0 0a af 02 66 a8 d7 b3 90 0c 59 c8 92 46 73 d7 73 10 cc 0a 33 64 4d f6 05 55 6e d0 94 4d 82 70 17 74 70 21 6e 14 72 43 49 97 d9 0c 57 2c 64 1f 3a 56 67 77 b3 fc b8 e2 9e e6 e9 4a d0 d5 de e8 0f 08 14 c9 02 c0 f3 e0 4b 16 14 c9 3f 84 84 46 ef 96 eb 7b 28 5f 7d 50 57 48 86 16 25 08 21 0c 10 30 75 c8 4f 81 d5 65 30 7b 3a 84 2d 42 d1 b3 36 98 f0 6b db 4c 1f 8a 04 28 14 48 ae 7f bd 46 b7 66 7b 94 e5 6f d0 da 19 b0 7f cf 21 ef 0f 03 bd 23 e8 b0 af c6 62 3a c1 7a 4d 81 3c 31 c9 26 67 aa 13 e9 bc bf 5a 4d 24 3c 62 c7 93 6b 3a 96 ac e4 60 29 7d c0 c3 60 88 96 6a d5 61 e8 ee ca 26 99 26 3d 37 2d 21 8c a9 29 42 0b cc 4c 5d 26 7c 80 9a 27 52 f6 48 93 d3 16 4e cb 1e d7 34 95 5f 62 cb 29 19 53 41 39 ef 27 f2 73 66 4c d9 Data Ascii: YFJ{HqjxfYFss3dMUnMptp!nrCIW,d:VgwJK?F{(_}PWH%!0uOe0{:-B6kL(HFf{o!#b:zM<1&gZM$<bk:`)}`ja&&=7-!)BL]&\|'RHN4_b)SA9'sfL
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: 05 b0 f3 bf ea 28 0e ac e4 11 c4 4d d4 e0 8c 84 44 21 36 a1 7a d2 fd 7a 70 09 8f 24 47 41 3a 25 fb 05 0a 9a 50 72 96 a1 5b b5 20 c7 39 e4 e5 a8 80 54 33 64 bc c1 93 11 53 1e f7 69 a3 d5 7d 4a e9 9b e4 8c 7a d1 fe 2c 6f 34 24 90 84 63 8d 5d 52 35 78 73 d1 9a c0 92 bc af 51 ee 3b 4e 48 f5 0d 71 60 90 94 7b c6 4a 0d f3 04 b2 e3 10 98 58 8a 21 de cc c2 99 46 b0 50 71 fe 19 7f 28 71 42 36 c7 e4 54 a0 34 d0 2c 6d 81 90 29 51 bd 22 ca 4f b6 00 9f 4e b9 bf 4a 77 b1 9b f8 2f 0b d9 93 2c 64 27 45 45 f5 a2 12 e5 f1 c5 3f 70 4b 11 e3 cf 32 1a e5 1f 56 61 5d 71 9c d6 15 2f 37 6b 4c 57 3f df ae d7 b4 01 55 cc db 5f f2 49 a6 19 d9 21 63 be 9a fc d9 ac 5f 3a 3c a6 86 3f 66 1b 77 12 a5 a4 59 7c 6f 35 b6 a6 ae f7 43 61 74 6a fd 11 84 8a fc be 23 6b f9 fe ac fc a2 10 c0 77 Data Ascii: (MD!6zzp$GA:%Pr[ 9T3dSi}Jz,o4$c]R5xsQ;NHq`{JX!FPq(qB6T4,m)Q"ONJw/,d'EE?pK2Va]q/7kLW?U_I!c_:<?fwY\|o5Catj#kw
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: ec 9c 51 c0 f6 fc 70 f8 64 c3 05 33 2a df a5 f3 e4 e4 ae ac 92 9b da 50 3e d6 f3 69 5a 80 33 34 11 5d 06 a5 32 7d f8 74 f4 ee c3 8f 1f 5f 7d fc 45 8c 44 06 a8 61 8c f6 01 3d bb 30 00 09 42 82 b4 bb 0c 8c 6a 1f 58 c5 45 02 a4 31 5b e9 8f 8d b2 be 20 ed 7b b9 9c 4e 93 b2 8c b2 3a cd 8b 53 67 33 04 e8 a6 6f a0 4c 22 31 4e d2 a6 9d 0f 0f d5 24 0b 8b c0 67 b4 c7 da 04 3c 78 75 f7 81 45 91 57 f9 34 9f 2b e9 87 9f 1b b4 10 58 89 39 29 83 00 d2 21 31 27 b0 26 03 dd bc b8 0b 0c c2 90 45 9c 6c 3f 18 54 d7 30 61 5b 76 08 ff 03 08 4a 51 88 9d 51 50 06 af a6 e5 06 45 36 1d d2 d2 0f 55 f8 c7 b0 3d 72 05 c5 28 10 4e 76 91 dc e4 b7 89 55 22 50 f6 dc b8 ee c8 e6 5e a0 a3 02 61 0d f7 1f 60 60 fc a0 75 d9 57 26 35 ae 4b 6d 66 c0 bb 4c ab 0f ef c8 80 62 65 5b f8 2c 08 21 ab Data Ascii: Qpd3*P>iZ34]2}t_}EDa=0BjXE1[ {N:Sg3oL"1N$g<xuEW4+X9)!1'&El?T0a[vJQQPE6U=r(NvU"P^a``uW&5KmfLbe[,!
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: f9 72 96 94 b8 44 ed 2e 36 4f 5b e6 b5 6e 3e 8f 9f d2 73 67 4a cf 71 4a d3 41 8b 03 14 ca 34 12 52 50 5b 4e 1f 96 25 e5 81 38 46 b8 27 c9 90 a7 4e 0d 5c a8 18 fe 20 bf 54 56 8c e7 e7 d5 f4 12 90 1d 2b b3 6b 96 64 a8 ba 4f cb 1f d1 e5 0c 76 fb e7 34 46 50 92 9e 6b be 1e f1 f6 be 3d e2 ed dd b0 26 68 1a 46 24 5f c2 54 59 64 1f 27 65 77 f8 98 f5 6d f1 b0 7b f4 a2 6e bf 70 86 f8 42 f6 bf bd 76 61 96 e5 42 2e cc 76 6d 61 76 76 ea 0b 83 30 6c 56 64 c7 31 e1 da d9 21 71 96 23 7a 53 2b b2 23 8b ec a9 11 3d 75 45 3a 1c 06 1f bd 32 3b 07 ce 50 0f 70 1c 97 96 94 2b 56 2a 6c c0 6b b6 d5 c2 9c 50 68 98 af b0 27 2b 60 07 60 b9 eb 68 c9 f7 a0 11 05 b0 53 14 e4 01 48 92 1d 7b fb dc 90 fd 77 5a 63 89 c0 75 c3 44 be fc 31 9b df bd 79 8d f7 0e ee 43 96 7c 48 80 0f cb aa 8f Data Ascii: rD.6O[n>sgJqJA4RP[N%8F'N\ TV+kdOv4FPk=&hF$_TYd'ewm{npBvaB.vmavv0lVd1!q#zS+#=uE:2;Pp+V*lkPh'+``hSH{wZcuD1yC\|H
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: b1 7a 39 ed 69 d9 bb 01 6a a5 77 1d df 26 bd b8 d7 38 33 7e d0 83 ab f0 3a 9f 0d bc 60 e5 cf 92 86 ad 31 6e 3d 3b a5 6b 63 55 4f 45 60 f4 84 37 41 bf f6 d1 99 2a b3 01 9f 74 ba 11 a3 a4 03 b8 f4 c6 7d 1f ef 6d 58 cc 80 8e cd 58 39 a6 e7 03 5a 36 e3 97 8f 58 62 0b 3d f3 3d dd 65 04 3c 4a 76 1a 9f 0e cf ce a2 18 ba b1 14 7f e9 00 ad 37 cd d1 19 5c c2 41 2a 54 98 45 5b 5f ab 94 6b c5 ca 35 0e 75 84 5b 4d 23 7b 23 f8 b5 cb 3d 3c e8 74 34 ad 64 9b cc d7 77 c7 33 5c 15 58 91 c0 2a 00 08 bc b8 3b 81 8b 18 8f 85 ff 27 f6 70 3e 2d 8b e9 9f 23 b8 ab 22 2a 7f f6 a7 00 65 78 63 23 ec a3 a8 85 64 14 47 bf 2c 33 38 59 05 80 1f 2d 25 2d 9c eb 53 c9 20 4c 00 f8 f6 5e 1c 7c 4d de 47 92 b9 5c 59 c1 a4 4a 68 17 4b 91 95 6d 5c 5b a2 59 29 c5 48 b3 65 93 88 75 ea 31 d4 0c 78 Data Ascii: z9ijw&83~:`1n=;kcUOE`7At}mXX9Z6Xb==e<Jv7\ATE[_k5u[M#{#=<t4dw3\X;'p>-#"exc#dG,38Y-%-S L^\|MG\YJhKm\[Y)Heu1x
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: c2 2e c8 cc a1 d2 a1 60 9c bb 46 50 85 9d 86 82 d3 31 7b d8 af 35 b6 ef c6 41 18 b6 9a 09 50 4d b2 97 90 a1 e6 2a d4 81 f3 f1 af 50 a9 43 c9 00 63 b0 b4 df c7 25 53 79 05 a7 9a 25 d5 39 39 e7 a0 a8 0e d8 37 f2 ec 85 0c b8 3f 8e cb 9f 51 0e ea 07 35 53 8b d1 1e d7 40 65 34 15 2f 8d 52 43 86 06 29 a3 8a ae 03 1d 18 04 23 67 2d 33 b8 11 8d 51 8d 1b 53 e7 ab da 19 19 1b 6b 28 f6 d7 f8 b0 8b ec 89 41 67 ec c5 ab 11 60 a4 2d 19 cb 90 67 65 74 cf a7 32 e4 19 26 7a aa 45 44 97 a0 9e 69 61 ce e2 75 5c cc 1e 55 c3 0a ad 27 63 96 b5 d5 31 18 bf a5 2f 1d d5 ec b1 35 75 9f b7 8f ae 72 2b d2 c7 17 4e 6f c5 c5 17 a2 0c ee 2f be 7c c6 00 2f 54 3e d5 15 d1 19 4c 19 b2 a8 6a 09 c7 c6 a1 98 22 b2 42 a5 f2 2a 0e 35 22 28 b6 48 5b e6 2d 65 1a f4 d5 56 c6 e4 42 51 83 c5 da 8a Data Ascii: .`FP1{5APMPCc%Sy%997?Q5S@e4/RC)#g-3QSk(Ag`-get2&zEDiau\U'c1/5ur+No/\|/T>Lj"B5"(H[-eVBQ
2024-04-19 13:12:54 UTC	1255	IN	Data Raw: de d9 18 dd c5 6a b0 d5 f0 bb d1 ba 36 e7 8d 76 1e 17 0f 71 c7 8e 87 b8 73 16 de af 84 7a e5 65 8c 66 ff 19 c5 23 b0 9e 15 0d 58 c2 2f f2 f6 c7 7a e0 1a 47 77 5b b4 bd 47 4f f4 a6 a7 57 7c 9a 9d 61 8c 9f 88 43 ab 44 c9 04 7f f0 a5 cc b6 c7 6a 72 27 d3 eb e4 26 f6 f1 b9 aa 4a b2 c8 00 40 2a 76 f4 9b 8b 4f c5 dd 1b 7e a5 44 64 70 d1 e5 81 b3 5e ad 45 6b eb 25 38 30 5e 5f 03 db e1 5b 34 69 80 e1 d5 d5 84 a3 87 87 99 a3 cc eb 3c 24 41 80 06 4e 3e b6 6d e2 b8 e8 24 13 ae c2 95 38 b5 4c bc 7d 6f f1 d9 cd 32 7c fa d3 07 ca a9 b6 6d dc 32 4f 68 94 13 2a 7c b3 1a 4b 7a b0 90 34 e0 8c bd 22 c2 ca f6 a6 78 ff ea 78 02 f4 a7 c1 89 a8 e8 b7 bb 37 29 56 99 20 b4 aa b8 d3 b0 65 35 33 e3 16 01 15 c8 2b 85 3b 17 33 e5 87 81 36 55 99 b2 d5 33 a6 44 99 63 b0 a2 3d 63 5a 0c Data Ascii: j6vqszef#X/zGw[GOW\|aCDjr'&J@vO~Ddp^Ek%80^_[4i<$AN>m$8L}o2\|m2Oh\|Kz4"xx7)V e53+;36U3Dc=cZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.5	50586	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	799	OUT	POST /g/v2/369.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 324 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#2; 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613; cf=gif; cip=441; cnac=8; car=2; gdpr=0\|
2024-04-19 13:12:54 UTC	324	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 33 36 39 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 74 6f 70 22 3a 31 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 2f 22 2c 22 76 22 3a 22 38 2e 33 38 2e 30 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 Data Ascii: {"partner":369,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://www.justjared.com/","ref":null,"cu":"https://www.justjared.com/","top":1,"u":"https://www.justjared.com/","v":"8.38.0","storage":{"expires":90,"name":"id5id","type":"html5","refreshInSeconds":28
2024-04-19 13:12:55 UTC	559	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:54 GMT p3p: CP="CAO PSA OUR" set-cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#3; Path=/; Domain=id5-sync.com; Expires=Thu, 18 Jul 2024 13:12:54 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://www.justjared.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:55 UTC	592	IN	Data Raw: 32 34 34 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 76 6b 47 6d 56 34 75 77 31 69 48 7a 47 31 55 50 53 46 65 75 55 6d 72 58 58 53 4c 51 51 4f 66 73 2d 47 58 70 52 59 4f 41 54 62 51 65 54 4e 73 73 54 43 4a 4d 47 46 67 4e 66 6a 35 65 53 50 54 50 34 65 59 4b 35 5f 66 42 45 49 41 30 57 51 66 33 58 72 37 2d 33 6c 33 6a 43 5f 32 4a 68 50 5a 70 48 6f 35 52 75 7a 75 34 4e 52 43 79 47 7a 4c 5a 41 36 58 4f 4e 75 6f 41 63 6e 7a 53 74 70 33 52 4c 36 44 42 61 6e 68 4f 49 5f 77 77 79 39 6b 39 64 77 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 34 2d 31 39 54 31 33 3a 31 32 3a 34 39 2e 31 30 35 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 5f 75 69 64 22 3a 22 49 44 35 2a 78 56 75 47 Data Ascii: 244{"signature":"ID5_AvkGmV4uw1iHzG1UPSFeuUmrXXSLQQOfs-GXpRYOATbQeTNssTCJMGFgNfj5eSPTP4eYK5_fBEIA0WQf3Xr7-3l3jC_2JhPZpHo5Ruzu4NRCyGzLZA6XONuoAcnzStp3RL6DBanhOI_wwy9k9dw","created_at":"2024-04-19T13:12:49.105Z","id5_consent":true,"original_uid":"ID5*xVuG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.5	50607	34.198.78.192	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	800	OUT	GET /pixel.gif?ch=185&cm=IhHYAPZHgyDtLY4rTVmqUZsu&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiJt0-EedLilJRkb8yqXAxW4; chs=[{"ch":"185","t":"2024-04-19 13:12:51"}]
2024-04-19 13:12:54 UTC	792	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: 3da5f9c4fcb9 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://ce.lijit.com/merge?pid=84&3pid=ZiJt0-EedLilJRkb8yqXAxW4 set-cookie: cb=ZiJt0-EedLilJRkb8yqXAxW4; Max-Age=63027504; Expires=Sun, 19 Apr 2026 00:51:18 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.5	50602	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	651	OUT	GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://match.sharethrough.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:54 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:54 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.5	50598	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	804	OUT	GET /sync?dsp_id=425&user_group=1&expires=365&user_id=930e97dd-c462-4cd2-a2b2-6b9aa73b2220&ssp=gumgum2&bsw_param=58637582-4b7e-42fe-b59a-889f13122ef7 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:54 UTC	537	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:54 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=58637582-4b7e-42fe-b59a-889f13122ef7&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.5	50609	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	886	OUT	GET /ps/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cs.seedtag.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:55 UTC	671	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:55 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000A server: 33XP015 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X content-length: 0 date: Fri, 19 Apr 2024 13:12:54 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.5	50608	104.244.42.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	606	OUT	GET /i/adsct?p_user_id=6fe6a4603177c372840da1d3a0d7528b&p_id=28539 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	572	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:54 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_0zJvqm+blEL8OTmURbFflg=="; Max-Age=63072000; Expires=Sun, 19 Apr 2026 13:12:55 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9c75226f8e776ccc strict-transport-security: max-age=631138519 x-response-time: 80 x-connection-hash: 74657259b70c8022ecf7ec01e6491c1c9af37b544e4a2bf58677b69e2523ed99 connection: close
2024-04-19 13:12:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.5	50614	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	548	OUT	GET /js/1928.005-3.034/ice.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	407	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: application/javascript Content-Length: 193452 Connection: close last-modified: Tue, 02 Apr 2024 06:51:03 GMT etag: "2f3ac-615178797b4f0" Cache-Control: max-age=2592000 expires: Sun, 19 May 2024 09:47:55 GMT via: 1.1 google CF-Cache-Status: HIT Age: 12300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d261fef1153ec-ATL
2024-04-19 13:12:55 UTC	962	IN	Data Raw: 76 61 72 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 Data Ascii: var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};function _defineProperty(e,t,n){return t
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 6f 6e 22 2c 74 68 69 73 29 3a 28 28 74 68 69 73 5b 65 5d 3d 74 29 2e 24 69 64 3d 65 2c 74 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2c 74 2e 24 72 6f 6f 74 3d 74 68 69 73 2e 24 72 6f 6f 74 29 29 7d 2c 24 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 65 2c 6f 2c 69 29 7b 24 72 6f 6f 74 26 26 21 24 72 6f 6f 74 2e 69 63 65 52 65 73 70 6f 6e 73 65 54 69 6d 65 26 26 28 24 72 6f 6f 74 2e 69 63 65 52 65 73 70 6f 6e 73 65 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 29 3b 76 61 72 20 72 2c 73 2c 61 3d 77 68 61 74 28 65 29 2c 64 3d 74 68 69 73 7c 7c 77 69 6e 64 6f 77 3b 69 66 28 21 2f 6f 62 6a 65 63 74 7c 66 75 6e 63 74 69 6f 6e 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 72 20 69 6e 20 73 3d 64 5b 6e 5d 7c 7c 28 61 3d Data Ascii: on",this):((this[e]=t).$id=e,t.$parent=this,t.$root=this.$root))},$create=function t(n,e,o,i){$root&&!$root.iceResponseTime&&($root.iceResponseTime=Date.now());var r,s,a=what(e),d=this\|\|window;if(!/object\|function/.test(a))return null;for(r in s=d[n]\|\|(a=
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 6f 67 67 6c 79 54 72 61 63 6b 65 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 65 74 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 65 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 29 29 3a 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 7c 7c 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 28 29 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 29 7c 7c 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 6f 2e 75 75 69 64 28 29 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 69 64 29 29 7d 2c 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 76 Data Ascii: ogglyTracker.prototype={setSession:function(e){e?(this.session_id=e,this.setCookie(this.session_id)):this.session_id\|\|(this.session_id=this.readCookie(),this.session_id)\|\|(this.session_id=o.uuid(),this.setCookie(this.session_id))},push:function(e){var t=v
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 5f 4b 45 59 2b 22 3d 22 2b 65 7d 7d 2c 74 68 69 73 2e 6c 6f 67 4c 65 76 65 6c 28 29 29 7b 63 61 73 65 22 65 72 72 6f 72 22 3a 74 68 69 73 2e 77 61 72 6e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 68 69 73 2e 74 72 61 63 65 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 61 72 6e 22 3a 74 68 69 73 2e 74 72 61 63 65 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6e 66 6f 22 3a 63 61 73 65 22 74 72 75 65 22 3a 63 61 73 65 22 6c 6f 67 22 3a 62 72 65 61 6b 3b 63 61 73 65 22 6c 6f 67 67 6c 79 22 3a 63 61 73 65 20 6e 75 6c 6c 3a 28 6c 6f 67 67 6c 79 3d 6e 65 77 20 74 68 69 73 2e 6c 6f 67 67 6c 79 54 72 61 63 6b 65 72 29 2e 70 75 73 68 28 7b 6c 6f 67 67 6c 79 4b 65 79 3a 22 Data Ascii: _KEY+"="+e}},this.logLevel()){case"error":this.warnLog=function(){},this.traceLog=function(){};break;case"warn":this.traceLog=function(){};break;case"info":case"true":case"log":break;case"loggly":case null:(loggly=new this.logglyTracker).push({logglyKey:"
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 29 7c 30 3b 72 65 74 75 72 6e 28 22 78 22 3d 3d 65 3f 74 3a 33 26 74 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 7d 2c 73 65 74 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 6b 65 79 3d 74 2c 65 2e 73 65 74 53 65 73 73 69 6f 6e 28 29 2c 74 68 69 73 2e 73 65 74 49 6e 70 75 74 55 72 6c 28 65 29 7d 2c 73 65 74 54 61 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 74 61 67 3d 74 7d 2c 73 65 74 44 6f 6d 61 69 6e 50 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 75 73 65 44 6f 6d 61 69 6e 50 72 6f 78 79 3d 74 2c 74 68 69 73 2e 73 65 74 49 6e 70 75 74 55 72 6c 28 65 29 7d 2c 73 65 74 53 65 6e 64 43 6f 6e 73 6f 6c 65 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 72 3b 69 2e 73 65 6e 64 43 6f Data Ascii: )\|0;return("x"==e?t:3&t\|8).toString(16)})},setKey:function(e,t){e.key=t,e.setSession(),this.setInputUrl(e)},setTag:function(e,t){e.tag=t},setDomainProxy:function(e,t){e.useDomainProxy=t,this.setInputUrl(e)},setSendConsoleError:function(i,e){var r;i.sendCo
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 4e 5f 4b 45 59 3a 22 6c 6f 67 67 6c 79 74 72 61 63 6b 69 6e 67 73 65 73 73 69 6f 6e 22 2c 4c 4f 47 47 4c 59 5f 53 45 53 53 49 4f 4e 5f 4b 45 59 5f 4c 45 4e 47 54 48 3a 22 6c 6f 67 67 6c 79 74 72 61 63 6b 69 6e 67 73 65 73 73 69 6f 6e 22 2e 6c 65 6e 67 74 68 2b 31 2c 4c 4f 47 47 4c 59 5f 50 52 4f 58 59 5f 44 4f 4d 41 49 4e 3a 22 6c 6f 67 67 6c 79 22 2c 6c 6f 67 67 6c 79 3a 6e 75 6c 6c 7d 7d 2c 21 30 29 29 2c 65 76 65 6e 74 3d 28 6c 6f 67 67 6c 79 2e 69 6e 69 74 28 29 2c 24 69 63 65 2e 76 65 72 73 69 6f 6e 46 69 6c 65 3d 22 69 63 65 22 2c 24 72 6f 6f 74 2e 24 63 72 65 61 74 65 28 22 65 76 65 6e 74 22 2c 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 6f 2c 69 3d 74 68 69 73 2e 24 72 6f 6f 74 2c 72 3d 69 2e 65 76 65 6e 74 2c 73 Data Ascii: N_KEY:"logglytrackingsession",LOGGLY_SESSION_KEY_LENGTH:"logglytrackingsession".length+1,LOGGLY_PROXY_DOMAIN:"loggly",loggly:null}},!0)),event=(loggly.init(),$ice.versionFile="ice",$root.$create("event",{bind:function(e){var t,n,o,i=this.$root,r=i.event,s
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 67 67 65 72 2e 6c 6f 67 28 61 2c 6f 29 2c 6f 2e 63 61 6c 6c 28 69 2c 72 29 7d 7d 2c 72 65 70 65 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 6f 29 7b 76 61 72 20 69 2c 72 2c 73 2c 61 2c 64 3d 74 68 69 73 2e 24 72 6f 6f 74 2c 6c 3d 64 2e 65 76 65 6e 74 2e 5f 6c 69 73 74 65 6e 65 72 73 5b 65 5d 2c 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 64 2e 77 68 61 74 28 6e 29 3b 69 66 28 21 65 7c 7c 64 2e 65 76 65 6e 74 2e 64 69 73 61 62 6c 65 64 7c 7c 6c 26 26 6c 2e 64 69 73 61 62 6c 65 64 7c 7c 22 61 72 72 61 79 22 21 3d 64 2e 77 68 61 74 28 6c 29 7c 7c 21 74 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 64 2e 77 68 61 74 28 74 29 29 72 65 74 75 72 6e 21 31 3b 6f 26 26 22 6e 75 6d 62 65 72 22 3d 3d 64 2e 77 68 61 74 28 6f 29 7c 7c 28 6f 3d 6e 75 6c 6c 29 3b 66 6f Data Ascii: gger.log(a,o),o.call(i,r)}},repeat:function(e,t,n,o){var i,r,s,a,d=this.$root,l=d.event._listeners[e],c="undefined"!=d.what(n);if(!e\|\|d.event.disabled\|\|l&&l.disabled\|\|"array"!=d.what(l)\|\|!t\|\|"number"!=d.what(t))return!1;o&&"number"==d.what(o)\|\|(o=null);fo
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 6e 22 22 3b 66 6f 72 28 74 20 69 6e 20 65 29 6e 3d 22 27 22 2b 28 6e 75 6c 6c 3d 3d 65 5b 74 5d 3f 22 6e 75 6c 6c 22 3a 65 5b 74 5d 2e 74 6f 53 74 72 69 6e 67 3f 74 68 69 73 2e 24 72 6f 6f 74 2e 75 74 69 6c 73 2e 73 74 72 69 6e 67 2e 74 72 75 6e 63 61 74 65 28 65 5b 74 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2c 35 30 2c 22 2e 2e 2e 22 29 3a 22 5b 55 6e 6b 6e 6f 77 6e 20 4f 62 6a 65 63 74 5d 22 29 2b 22 27 22 2c 6f 5b 6f 2e 6c 65 6e 67 74 68 5d 3d 5b 74 2c 6e 5d 2e 6a 6f 69 6e 28 22 3a 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 7d 2c 7b 5f 6c 69 73 74 65 6e 65 72 73 3a 7b 7d 2c 6d 73 67 73 3a 7b 6d 65 3a 22 45 72 72 6f 72 3a 20 4d 69 73 73 69 6e 67 20 65 76 65 6e 74 2e 22 2c 6d 6c 3a 22 45 72 72 6f 72 3a 20 4d 69 73 73 73 69 6e 67 20 Data Ascii: n"";for(t in e)n="'"+(null==e[t]?"null":e[t].toString?this.$root.utils.string.truncate(e[t].toString(),50,"..."):"[Unknown Object]")+"'",o[o.length]=[t,n].join(":");return o.join(", ")}},{_listeners:{},msgs:{me:"Error: Missing event.",ml:"Error: Misssing
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 6f 2e 65 76 65 6e 74 2c 72 2c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6f 2e 65 76 65 6e 74 2c 72 29 3b 76 61 72 20 6c 3d 65 2e 24 69 63 65 49 64 2c 63 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3b 63 5b 6c 5d 7c 7c 28 63 5b 6c 5d 3d 7b 7d 29 2c 63 5b 6c 5d 5b 6f 2e 65 76 65 6e 74 5d 7c 7c 28 63 5b 6c 5d 5b 6f 2e 65 76 65 6e 74 5d 3d 5b 5d 29 2c 73 2e 75 74 69 6c 73 2e 61 72 72 61 79 2e 70 75 73 68 28 63 5b 6c 5d 5b 6f 2e 65 76 65 6e 74 5d 2c 7b 6c 69 73 74 65 6e 65 72 3a 72 2c 6f 72 69 67 69 6e 61 6c 3a 6f 2e 6c 69 73 74 65 6e 65 72 7d 29 7d 72 65 74 75 72 6e 21 30 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 69 3d 74 68 69 73 2e Data Ascii: o.event,r,!1):e.attachEvent&&e.attachEvent("on"+o.event,r);var l=e.$iceId,c=this._listeners;c[l]\|\|(c[l]={}),c[l][o.event]\|\|(c[l][o.event]=[]),s.utils.array.push(c[l][o.event],{listener:r,original:o.listener})}return!0},unbind:function(e,t,n){var o,i=this.
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 29 7b 74 2e 6c 6f 67 67 65 72 2e 6c 6f 67 28 69 2c 6e 29 2c 6e 2e 63 61 6c 6c 28 6f 2c 65 29 7d 2c 65 2e 64 65 6c 61 79 29 3a 28 74 2e 6c 6f 67 67 65 72 2e 6c 6f 67 28 69 2c 6e 29 2c 6e 2e 63 61 6c 6c 28 6f 2c 65 29 29 7d 7d 2c 7b 5f 6c 69 73 74 65 6e 65 72 73 3a 7b 7d 2c 65 6c 65 6d 65 6e 74 42 69 6e 64 65 72 3a 30 2c 6d 73 67 73 3a 7b 6d 62 65 3a 22 45 72 72 6f 72 3a 20 4d 69 73 73 69 6e 67 20 6f 72 20 62 61 64 20 65 6c 65 6d 65 6e 74 2e 22 7d 7d 2c 21 31 29 2c 24 72 6f 6f 74 2e 24 63 72 65 61 74 65 28 22 6c 6f 67 67 65 72 22 2c 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 7b 6d 65 73 73 61 67 65 3a 65 2c 74 79 70 65 3a 6e 3d 6e 7c 7c 22 6c 6f 67 22 2c 74 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d Data Ascii: ){t.logger.log(i,n),n.call(o,e)},e.delay):(t.logger.log(i,n),n.call(o,e))}},{_listeners:{},elementBinder:0,msgs:{mbe:"Error: Missing or bad element."}},!1),$root.$create("logger",{log:function(e,t,n){var o={message:e,type:n=n\|\|"log",time:(new Date).getTim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.5	50613	104.26.9.169	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:54 UTC	844	OUT	GET /localstore.js HTTP/1.1 Host: script.4dex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uids=eyJ1aWRzIjp7ImFkYWdpbyI6eyJ1aWQiOiIxOGQ3Y2UwMy1mMmYyLTQ1NjAtYmIwYS03NzNhYWQyMjQyNTciLCJleHBpcmVzIjoiMjAyNC0wNi0xOFQxMzoxMjo0Ni45NjY5MTY2MloifX0sImJkYXkiOiIyMDI0LTA0LTE5VDEzOjEyOjQ2Ljk2Njg2NDQxNVoifQ== If-None-Match: "00a8e13a83b2bbab51af8e55f52be363" If-Modified-Since: Thu, 18 Apr 2024 08:50:22 GMT
2024-04-19 13:12:55 UTC	635	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 13:12:55 GMT Connection: close Cache-Control: public, max-age=1800 ETag: "00a8e13a83b2bbab51af8e55f52be363" Last-Modified: Thu, 18 Apr 2024 08:50:22 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 101758 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YTLB90TExAp0e3fOlPSQGFbFCEYhsa8Bjr6JseQAB0%2FIr7bqGT76vHsCsAAdsP3JSljqTrO7bfkfTmwANk6rJSkoR4Ygt9PBP2vNRjuWfnUkeIqa5sTD38KDRFYqC%2F6q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d261fed10675b-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.5	50610	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	879	OUT	GET /i/363/8.gif?o=api&id5id=ID5fdEinicZabe4p6yKMwAkY4G5iAf8hNBM7H5eX8-20ceWd9-EfkZGA9HYCvrePLIw&gdpr_consent=undefined&gdpr=false HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613; cf=gif; cip=441; cnac=8; car=2; gdpr=0\|; id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#3
2024-04-19 13:12:55 UTC	1589	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#4; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=363; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=7; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=2; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Fri, 19-Apr-2024 13:17:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy= transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:54 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.5	50616	104.26.9.169	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	564	OUT	GET /a/latest/adagio.js HTTP/1.1 Host: script.4dex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: application/javascript Content-Length: 70628 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=1800 ETag: "2cea63505a74309263526b320f034c82" Last-Modified: Thu, 18 Apr 2024 08:50:17 GMT Vary: Origin, Accept-Encoding Access-Control-Expose-Headers: CF-Cache-Status: HIT Age: 101531 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cs5BjU%2BDvjsMZhrWr8BnxpB8VsR%2FbIerGUQ8AYAI7OZXUgpzBSvJF7oJbAyUV4YuvB3%2F8O7MsW7R9D%2FPXbs3tAZ0Ve7oQbAER7fAvyQ5vj2eRa5RNqVdcRwwjaQQENtz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d2620fe40674d-ATL
2024-04-19 13:12:55 UTC	584	IN	Data Raw: 2f 2f 20 68 61 73 68 3a 20 42 50 68 6c 77 4b 35 57 66 53 34 53 51 78 67 6c 38 31 30 71 78 57 58 4a 67 37 39 62 6f 48 39 67 72 6a 43 2b 38 45 61 59 33 2b 41 5a 38 72 6d 47 7a 43 31 57 77 66 71 70 4e 64 37 4a 31 70 42 51 4c 62 79 63 30 72 53 6f 2b 4f 7a 68 50 52 73 75 55 63 70 35 33 65 4f 46 44 61 4c 31 73 70 2b 48 53 66 37 57 6e 6c 4f 41 47 36 6c 43 6e 49 4c 78 61 33 62 4f 51 30 6f 36 5a 64 39 39 37 4c 4e 54 78 6c 5a 6a 2b 34 57 49 74 78 6c 6d 77 66 70 4c 33 4d 37 56 64 56 5a 66 5a 66 61 35 6b 4a 77 32 5a 32 4c 58 79 6b 54 71 68 62 45 3d 0a 76 61 72 20 5f 41 44 41 47 49 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 Data Ascii: // hash: BPhlwK5WfS4SQxgl810qxWXJg79boH9grjC+8EaY3+AZ8rmGzC1WwfqpNd7J1pBQLbyc0rSo+OzhPRsuUcp53eOFDaL1sp+HSf7WnlOAG6lCnILxa3bOQ0o6Zd997LNTxlZj+4WItxlmwfpL3M7VdVZfZfa5kJw2Z2LXykTqhbE=var _ADAGIO=function(e){"use strict";function t(e,t){var n=Object.keys(e)
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 69 29 29 3a 74 28 4f 62 6a 65 63 74 28 69 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 69 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 Data Ascii: })):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(i,t))}))}return e}function i(e){var t=function(e,t){if("object"
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 26 26 6e 75 6c 6c 21 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c 21 3d 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 65 29 7c 7c 63 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e Data Ascii: &&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|c(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}fun
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 65 29 7d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 55 28 65 29 26 26 22 5b 6f 62 6a 65 63 74 20 53 79 6d 62 6f 6c 5d 22 3d 3d 45 28 65 29 7d 76 61 72 20 43 3d 2f 5c 2e 7c 5c 5b 28 3f 3a 5b 5e 5b 5c 5d 5d 2a 7c 28 5b 22 27 5d 29 28 3f 3a 28 3f 21 5c 31 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 5c 31 29 5c 5d 2f 2c 78 3d 2f 5e 5c 77 2a 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 7c 7c 22 66 75 Data Ascii: e)}(e)}function U(e){return null!=e&&"object"==typeof e}function S(e){return"symbol"==typeof e\|\|U(e)&&"[object Symbol]"==E(e)}var C=/\.\|\[(?:[^[\]]\|(["'])(?:(?!\1)[^\\]\|\\.)?\1)\]/,x=/^\w*$/;function G(e){var t=typeof e;return null!=e&&("object"==t\|\|"fu
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 2d 31 7d 57 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 71 3f 71 28 6e 75 6c 6c 29 3a 7b 7d 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 57 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 68 61 73 28 65 29 26 26 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 5b 65 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 7a 65 2d 3d 74 3f 31 3a 30 2c 74 7d 2c 57 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3b 69 66 28 71 29 7b 76 61 72 20 6e 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 22 5f 5f 6c Data Ascii: ;return-1}W.prototype.clear=function(){this.__data__=q?q(null):{},this.size=0},W.prototype.delete=function(e){var t=this.has(e)&&delete this.__data__[e];return this.size-=t?1:0,t},W.prototype.get=function(e){var t=this.__data__;if(q){var n=t[e];return"__l
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 73 2e 63 6c 65 61 72 28 29 3b 2b 2b 74 3c 6e 3b 29 7b 76 61 72 20 69 3d 65 5b 74 5d 3b 74 68 69 73 2e 73 65 74 28 69 5b 30 5d 2c 69 5b 31 5d 29 7d 7d 65 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 69 7a 65 3d 30 2c 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 7b 68 61 73 68 3a 6e 65 77 20 57 2c 6d 61 70 3a 6e 65 77 28 59 7c 7c 5a 29 2c 73 74 72 69 6e 67 3a 6e 65 77 20 57 7d 7d 2c 65 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 58 28 74 68 69 73 2c 65 29 2e 64 65 6c 65 74 65 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 7a 65 2d 3d 74 3f 31 3a 30 2c 74 7d 2c 65 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 Data Ascii: s.clear();++t<n;){var i=e[t];this.set(i[0],i[1])}}ee.prototype.clear=function(){this.size=0,this.__data__={hash:new W,map:new(Y\|\|Z),string:new W}},ee.prototype.delete=function(e){var t=X(this,e).delete(e);return this.size-=t?1:0,t},ee.prototype.get=functi
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 74 75 72 6e 22 30 22 3d 3d 74 26 26 31 2f 65 3d 3d 2d 31 2f 30 3f 22 2d 30 22 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 70 28 65 29 3f 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 70 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 21 28 22 6e 75 6d 62 65 72 22 21 3d 6e 26 26 22 73 79 6d 62 6f 6c 22 21 3d 6e 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 6e 26 26 6e 75 6c 6c 21 3d 65 26 26 21 53 28 65 29 29 7c 7c 28 78 2e 74 65 73 74 28 65 29 7c 7c 21 43 2e 74 65 73 74 28 65 29 7c 7c 6e 75 6c 6c 21 3d 74 26 26 65 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 7d 28 65 2c 74 29 3f 5b 65 5d 3a 61 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: turn"0"==t&&1/e==-1/0?"-0":t}function de(e,t){return p(e)?e:function(e,t){if(p(e))return!1;var n=typeof e;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=e&&!S(e))\|\|(x.test(e)\|\|!C.test(e)\|\|null!=t&&e in Object(t))}(e,t)?[e]:ae(function(e){return nul
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 20 5f 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 65 5b 74 5d 3b 49 65 2e 63 61 6c 6c 28 65 2c 74 29 26 26 4a 28 69 2c 6e 29 26 26 28 76 6f 69 64 20 30 21 3d 3d 6e 7c 7c 74 20 69 6e 20 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 5f 5f 70 72 6f 74 6f 5f 5f 22 3d 3d 74 26 26 77 65 3f 77 65 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 7d 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 69 66 28 21 47 28 65 29 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 Data Ascii: _e(e,t,n){var i=e[t];Ie.call(e,t)&&J(i,n)&&(void 0!==n\|\|t in e)\|\|function(e,t,n){"__proto__"==t&&we?we(e,t,{configurable:!0,enumerable:!0,value:n,writable:!0}):e[t]=n}(e,t,n)}function Oe(e,t,n){return null==e?e:function(e,t,n,i){if(!G(e))return e;for(var
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 28 65 29 7b 74 68 69 73 2e 69 6e 73 75 72 65 53 63 68 65 6d 61 28 29 3b 76 61 72 20 74 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 68 69 73 2e 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 61 64 61 67 69 6f 22 29 29 3b 72 65 74 75 72 6e 20 65 3f 41 65 28 74 2c 65 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 63 65 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 69 3f 6e 3a 69 7d 28 74 2c 65 29 3a 6e 75 6c 6c 3a 74 7d 7d 2c 7b 6b 65 79 3a 22 73 74 6f 72 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 69 6e 73 75 72 65 53 63 68 65 6d 61 28 29 3b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 68 69 73 2e 77 Data Ascii: (e){this.insureSchema();var t=JSON.parse(this.w.localStorage.getItem("adagio"));return e?Ae(t,e)?function(e,t,n){var i=null==e?void 0:ce(e,t);return void 0===i?n:i}(t,e):null:t}},{key:"store",value:function(e,t){this.insureSchema();var n=JSON.parse(this.w
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 6f 72 6f 3b 5c 6e 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 34 70 78 20 34 70 78 20 30 3b 5c 6e 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 20 34 70 78 20 32 70 78 3b 5c 6e 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 5c 6e 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 5c 6e 20 20 22 7d 2c 47 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 7c 7c 22 64 65 62 75 67 22 3b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 69 3d 31 3b 69 3c 74 3b 69 2b 2b 29 6e 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 61 3b 22 73 74 72 69 6e 67 22 3d Data Ascii: oro;\n border-radius: 0 4px 4px 0;\n padding: 3px 4px 2px;\n margin-right: 10px;\n font-weight: normal;\n "},Ge=function(e){e=e\|\|"debug";for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];var a;"string"=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.5	50617	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	2269	OUT	GET /gampad/ads?pvsid=1528228483345781&correlator=2643220993256660&eid=44809527%2C31081518%2C95330210%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_3&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=1&didk=570410213&sfv=1-0-40&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532373527&lmt=1713532373&adxs=820&adys=564&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=0&ucis=tw3qlj9kv5i5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=336x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1842863151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356335&idt=16616&prev_scp=tg%3D4%26shb%3D1%26it%3Dil&adks=1494241348&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:55 UTC	791	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Google-LineItem-Id: -1 Google-Creative-Id: -1 Date: Fri, 19 Apr 2024 13:12:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	464	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 35 30 37 32 34 36 2f 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 33 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 31 32 32 35 37 30 33 34 5d 2c 5b 36 31 35 31 38 31 36 34 38 37 5d 2c 5b 34 39 37 33 37 33 37 36 5d 2c 5b 32 38 39 36 32 31 37 32 34 30 5d 2c 5b 34 36 39 38 39 30 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 4d 57 5a 70 4d 53 74 7a 6f 55 44 46 52 34 57 69 67 4d 64 67 66 67 42 79 41 22 Data Ascii: 8000{"/2507246/justjared.com_Web_300x250_3":["html",0,null,null,1,250,300,0,1,null,null,1,1,null,[138412257034],[6151816487],[49737376],[2896217240],[469890],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMWZpMStzoUDFR4WigMdgfgByA"
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 34 31 37 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 30 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 34 31 Data Ascii: ead><script>var jscVersion = 'r20240417';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r2024041
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 61 22 29 29 7c 7c 28 77 28 29 3f 30 3a 76 28 22 45 64 67 65 22 29 29 7c 7c 28 77 28 29 3f 65 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 76 28 22 45 64 67 2f 22 29 29 7c 7c 77 28 29 26 26 65 61 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 69 61 3d 7b 7d 2c 78 3d 6e 75 6c 6c 3b 76 61 72 20 79 3d 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 6a 61 3d 7b 7d 2c 6b 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 3d 3d 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 Data Ascii: a"))\|\|(w()?0:v("Edge"))\|\|(w()?ea("Microsoft Edge"):v("Edg/"))\|\|w()&&ea("Opera"));var ia={},x=null;var y=Symbol();var ja={},ka={};function la(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==ka)}function ma(a){return null!==a&&"object"===typeof a&&!Array.isArray(
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 79 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 72 65 74 75 72 6e Data Ascii: ={};for(let g in a)f[g]=xa(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function ya(a,b,c,d,e){const f=d\|\|c?a[y]\|0:0;d=d?!!(f&32):void 0;a=Array.prototype.slice.call(a);for(let g=0;g<a.length;g++)a[g]=xa(a[g],b,c,d,e);c&&c(f,a);return a}function za(a){return
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 42 3d 6a 61 3b 20 46 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 61 28 74 68 69 73 2c 74 68 69 73 2e 6d 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 43 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6d 3a 62 29 5b 79 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 6d 61 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 68 3d 63 3b 6c 65 74 20 6e 3d 7b 7d 2c 70 3d 21 31 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 68 29 7b 6c 65 74 20 6d 3d 68 5b 6b 5d 3b 69 66 28 Data Ascii: B=ja; F.prototype.toString=function(){return Ca(this,this.m,!1).toString()}; function Ca(a,b,c){var d=ca?void 0:a.constructor.C;const e=(c?a.m:b)[y];a=b.length;if(!a)return b;let f,g;if(ma(c=b[a-1])){a:{var h=c;let n={},p=!1;for(var k in h){let m=h[k];if(
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 61 72 20 62 3d 22 76 22 3b 69 66 28 61 2e 76 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 29 72 65 74 75 72 6e 20 61 2e 76 3b 62 3d 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 76 3d 62 7d 3b 76 61 72 20 4e 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 2c 63 2c 64 29 Data Ascii: ar b="v";if(a.v&&a.hasOwnProperty(b))return a.v;b=new a;return a.v=b};var Na=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$");function Oa(a,b,c,d)
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 21 31 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 3d 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 67 3d 57 61 28 22 49 4d 47 22 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 63 7c 7c 65 29 7b 63 6f 6e 73 74 20 68 3d 6b 3d 3e 7b 63 26 26 63 28 6b 29 3b 69 66 28 65 29 7b 6b 3d 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3b 63 6f 6e 73 74 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 6b 2c 67 2c 76 6f 69 64 20 30 29 3b 30 3c 3d 6c 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 Data Ascii: !1,d,e)}function Xa(a,b,c,d,e,f=!1){a.google_image_requests\|\|(a.google_image_requests=[]);const g=Wa("IMG",a.document);if(c\|\|e){const h=k=>{c&&c(k);if(e){k=a.google_image_requests;const l=Array.prototype.indexOf.call(k,g,void 0);0<=l&&Array.prototype.spli
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 69 62 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 6a 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 69 3d 62 7d 7d 2c 6b 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 Data Ascii: is.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const ib=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var jb=class{constructor(a,b){this.g=a;this.i=b}},kb=class{constructor(
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 53 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 6e 62 28 61 2c 62 29 3b 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 52 26 26 53 28 29 26 26 52 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 6d 62 28 29 7c 7c 6c 62 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 Data Ascii: sure_js_timing);this.g=S()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new nb(a,b);b=`goog_${a.label}_${a.uniqueId}_start`;R&&S()&&R.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a.duration=(mb()\|\|lb())-a.value;var b=`
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 3d 6c 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 6c 2e 6c 65 6e 67 74 68 3b 63 2b 3d 6c 3b 65 3d 61 2e 6a 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 65 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 76 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6a 3d 22 26 22 3b 74 68 69 73 2e 69 3d 7b 7d 3b 74 68 69 73 2e 6c 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d Data Ascii: =l.length){d-=l.length;c+=l;e=a.j;break}b=null==b?g:b}}}a="";null!=b&&(a=e+"trn="+b);return c+a}class vb{constructor(){this.j="&";this.i={};this.l=0;this.g=[]}};function wb(a){let b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.5	50620	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	2278	OUT	GET /gampad/ads?pvsid=3204156870783777&correlator=2500520077255298&eid=31079956%2C31082853%2C95330210%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_4&enc_prev_ius=%2F0%2F1&prev_iu_szs=320x50%7C300x250&fluid=height&ifi=1&didk=570410212&sfv=1-0-40&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532373613&lmt=1713532373&adxs=820&adys=3374&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=1&ucis=a7z9a7r64ysj&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=336x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=124864849&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532356162&idt=16827&prev_scp=tg%3D0%26shb%3D1%26it%3Dil&adks=76579100&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:55 UTC	867	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Google-LineItem-Id: 5747548770 Google-Creative-Id: 138471003221 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	388	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 35 30 37 32 34 36 2f 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 34 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 37 31 30 30 33 32 32 31 5d 2c 5b 35 37 34 37 35 34 38 37 37 30 5d 2c 5b 35 30 34 36 37 34 36 31 30 33 5d 2c 5b 32 38 38 34 39 31 35 36 30 38 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6d 6d 77 45 6a 4b 35 6f 49 74 4e 77 4b 32 52 6c 74 6f 70 41 6d 68 45 4c 50 Data Ascii: 8000{"/2507246/justjared.com_Web_300x250_4":["html",0,null,null,0,250,300,0,0,null,null,null,1,null,[138471003221],[5747548770],[5046746103],[2884915608],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsmmwEjK5oItNwK2RltopAmhELP
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 61 37 7a 39 61 37 72 36 34 79 73 6a 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 41 2d 56 34 71 4d 56 6a 4e 31 4f 59 36 52 6f 72 66 36 64 76 65 4b 31 38 44 38 58 4c 75 6d 64 4b 6e 53 7a 31 77 47 6c 71 64 5a 78 79 54 55 51 52 69 6f 57 41 58 56 79 46 44 36 44 50 49 38 56 5a 5f 45 50 6b 58 71 4f 55 57 65 4a 37 32 38 4a 43 70 31 78 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 7d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 Data Ascii: ,null,null,null,null,"a7z9a7r64ysj",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMVjN1OY6Rorf6dveK18D8XLumdKnSz1wGlqdZxyTUQRioWAXVyFD6DPI8VZ_EPkXqOUWeJ728JCp1x",null,null,null,null,null,null,null,[]]}<!doctype html><html><head><script>va
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 76 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 76 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 72 65 74 75 72 6e 20 62 61 3f 76 3f 76 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 Data Ascii: ++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var v;const da=u.navigator;v=da?da.userAgentData\|\|null:null;function w(a){return ba?v?v.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}fu
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 71 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 29 72 65 74 75 72 6e 7d 65 6c Data Ascii: sArray(a)?"array":b:"null"}: ${a}`);}return a};let oa;function pa(a,b){return qa(b)}function qa(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(K(a,void 0,0))return}el
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 4c 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 4f 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 61 29 3b 6f 61 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 47 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f Data Ascii: lete a[c])}function N(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();return L(a,b,c)};var O=class{constructor(){a:{var a=void 0;null==a&&(a=oa);oa=void 0;if(null==a){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[G]\|0;if(b&2048)thro
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 3b 63 6f 6e 73 74 20 7a 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 3b 76 61 72 20 51 3d 28 61 2c 62 29 3d 3e 22 26 61 64 75 72 6c 3d 22 3d 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: 56",!0),xa=new P("45350890"),ya=new P("45414892");const za=RegExp("ad\\\\.doubleclick\\\\.net/ddm/trackimp");var Q=(a,b)=>"&adurl="==a.substring(a.length-7)?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Aa(a,b,c){a.addEventListener&&a.addEventListene
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 Data Ascii: a;return b};function Ha(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{return Math.random()}}function Ia(a,b){if(a)for(const c in a)Object.prototype.hasOwnProp
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c 75 30 30 30 35 5c 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 53 61 3b 63 6c 61 73 73 20 56 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 Data Ascii: tring.fromCharCode(b.charCodeAt(c)^"\\u0003\\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\u0005\\u0003".charCodeAt(c%10));this.g=JSON.parse(a)}catch(b){}}},Sa;class Va{constructor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.i
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 64 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 61 7c 7c 75 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 69 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 Data Ascii: uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class db{constructor(){var a=window;this.i=[];this.j=a\|\|u;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.i=a.google_js_reporting_queue,b=a.google_measur
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 67 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 29 3b 62 3d 6e 75 6c 6c 3b 6c 65 74 20 65 3d 22 22 3b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 61 2e 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 63 6f 6e 73 74 20 67 3d 61 2e 67 5b 66 5d 2c 70 3d 61 2e 69 5b 67 5d 3b 66 6f 72 28 6c 65 74 20 6b 3d 30 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 69 66 28 21 64 29 7b 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 3b 62 72 65 61 6b 7d 6c 65 74 20 68 3d 65 62 28 70 5b 6b 5d 2c 61 2e 6a 2c 22 2c 24 22 29 3b 69 66 28 68 29 7b 68 3d 65 2b 68 3b 69 66 28 64 3e 3d 68 2e Data Ascii: ndication.com"+b,d=gb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g});b=null;let e="";for(let f=0;f<a.g.length;f++){const g=a.g[f],p=a.i[g];for(let k=0;k<p.length;k++){if(!d){b=null==b?g:b;break}let h=eb(p[k],a.j,",$");if(h){h=e+h;if(d>=h.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.5	50600	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	630	OUT	GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: mc=66226dd7-316ee-387e9-0d055; expires=Tue, 20-May-2025 13:12:55 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-04-19 13:12:55 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.5	50621	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	2247	OUT	GET /gampad/ads?pvsid=3310372320495227&correlator=1921322138726702&eid=31079956%2C31082852%2C31082859%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404150101&ptt=17&impl=fif&gdpr=0&iu_parts=2507246%3A22973718026%2Cjustjared.com_Web_300x250_5&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250&ifi=1&didk=570410215&sfv=1-0-40&sc=1&cookie=ID%3Da0851a657bc4653b%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MZiOfdIFsWiv5W8xa80Vkb2erewVg&gpic=UID%3D00000de1029e4627%3AT%3D1713532354%3ART%3D1713532354%3AS%3DALNI_MYI6msOtfEaAeJK5hQSW0z_6LsFww&abxe=1&dt=1713532373672&lmt=1713532373&adxs=309&adys=1231&biw=1280&bih=907&isw=300&ish=250&scr_x=0&scr_y=0&btvi=1&ucis=emlo9kwgzbx5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&nhd=1&url=https%3A%2F%2Fwww.justjared.com%2F&ref=https%3A%2F%2Fwww.justjared.com%2F&top=https%3A%2F%2Fwww.justjared.com%2F&vis=1&psz=300x-1&msz=336x-1&fws=256&ohw=0&ga_vid=315527398.1713532348&ga_sid=1713532374&ga_hid=1626008654&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1713532359339&idt=13739&prev_scp=tg%3D4%26shb%3D1%26it%3Dil&adks=737501260&frm=23&eo_id_str=ID%3D587298d337b0834e%3AT%3D1713532354%3ART%3D1713532354%3AS%3DAA-AfjYdCb6DRON6I7oXbGE3RbZ- HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://www.justjared.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:55 UTC	867	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.justjared.com Google-LineItem-Id: 5747548770 Google-Creative-Id: 138471003221 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Fri, 19 Apr 2024 13:12:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	388	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 35 30 37 32 34 36 2f 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 5f 57 65 62 5f 33 30 30 78 32 35 30 5f 35 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 37 31 30 30 33 32 32 31 5d 2c 5b 35 37 34 37 35 34 38 37 37 30 5d 2c 5b 35 30 34 36 37 34 36 31 30 33 5d 2c 5b 32 38 38 34 39 31 35 36 30 38 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 4a 34 5f 56 48 34 47 41 59 64 45 35 30 42 6d 47 4a 48 53 68 6b 76 59 4f Data Ascii: 8000{"/2507246/justjared.com_Web_300x250_5":["html",0,null,null,0,250,300,0,0,null,null,null,1,null,[138471003221],[5747548770],[5046746103],[2884915608],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslJ4_VH4GAYdE50BmGJHShkvYO
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6d 6c 6f 39 6b 77 67 7a 62 78 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 41 2d 56 34 71 4f 4c 74 65 57 6d 33 47 37 35 37 4b 31 33 59 6e 65 4f 73 4d 48 32 63 49 69 62 37 61 77 47 4d 61 66 4c 6e 48 39 6a 4f 74 6c 7a 36 75 38 53 5f 6e 6d 30 39 59 37 77 4f 54 47 66 6f 36 4f 46 63 7a 79 63 35 68 39 50 6e 75 68 5f 51 54 6b 46 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5d 5d 7d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 Data Ascii: ,null,null,null,null,"emlo9kwgzbx5",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOLteWm3G757K13YneOsMH2cIib7awGMafLnH9jOtlz6u8S_nm09Y7wOTGfo6OFczyc5h9Pnuh_QTkF",null,null,null,null,null,null,null,[]]}<!doctype html><html><head><script>va
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 76 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 76 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 72 65 74 75 72 6e 20 62 61 3f 76 3f 76 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 Data Ascii: ++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var v;const da=u.navigator;v=da?da.userAgentData\|\|null:null;function w(a){return ba?v?v.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}fu
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 71 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 4b 28 61 2c 76 6f 69 64 20 30 2c 30 29 29 72 65 74 75 72 6e 7d 65 6c Data Ascii: sArray(a)?"array":b:"null"}: ${a}`);}return a};let oa;function pa(a,b){return qa(b)}function qa(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(K(a,void 0,0))return}el
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 4c 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 4f 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 6f 61 29 3b 6f 61 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 47 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f Data Ascii: lete a[c])}function N(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();return L(a,b,c)};var O=class{constructor(){a:{var a=void 0;null==a&&(a=oa);oa=void 0;if(null==a){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[G]\|0;if(b&2048)thro
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 3b 63 6f 6e 73 74 20 7a 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 3b 76 61 72 20 51 3d 28 61 2c 62 29 3d 3e 22 26 61 64 75 72 6c 3d 22 3d 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: 56",!0),xa=new P("45350890"),ya=new P("45414892");const za=RegExp("ad\\\\.doubleclick\\\\.net/ddm/trackimp");var Q=(a,b)=>"&adurl="==a.substring(a.length-7)?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Aa(a,b,c){a.addEventListener&&a.addEventListene
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 Data Ascii: a;return b};function Ha(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{return Math.random()}}function Ia(a,b){if(a)for(const c in a)Object.prototype.hasOwnProp
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c 75 30 30 30 35 5c 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 53 61 3b 63 6c 61 73 73 20 56 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 Data Ascii: tring.fromCharCode(b.charCodeAt(c)^"\\u0003\\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\u0005\\u0003".charCodeAt(c%10));this.g=JSON.parse(a)}catch(b){}}},Sa;class Va{constructor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.i
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 64 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 61 7c 7c 75 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 69 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 Data Ascii: uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class db{constructor(){var a=window;this.i=[];this.j=a\|\|u;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.i=a.google_js_reporting_queue,b=a.google_measur
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 67 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 29 3b 62 3d 6e 75 6c 6c 3b 6c 65 74 20 65 3d 22 22 3b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 61 2e 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 63 6f 6e 73 74 20 67 3d 61 2e 67 5b 66 5d 2c 70 3d 61 2e 69 5b 67 5d 3b 66 6f 72 28 6c 65 74 20 6b 3d 30 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 69 66 28 21 64 29 7b 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 3b 62 72 65 61 6b 7d 6c 65 74 20 68 3d 65 62 28 70 5b 6b 5d 2c 61 2e 6a 2c 22 2c 24 22 29 3b 69 66 28 68 29 7b 68 3d 65 2b 68 3b 69 66 28 64 3e 3d 68 2e Data Ascii: ndication.com"+b,d=gb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g});b=null;let e="";for(let f=0;f<a.g.length;f++){const g=a.g[f],p=a.i[g];for(let k=0;k<p.length;k++){if(!d){b=null==b?g:b;break}let h=eb(p[k],a.j,",$");if(h){h=e+h;if(d>=h.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.5	50623	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	1338	OUT	GET /pcs/view?xai=AKAOjsuepWHCdHI0shB17tvH9UHaZVXrEloNqNdgzUzLDJIk3taTPXyBlTRqFCYnJLResmroxGORevGqUL8D4rGYVgM_3w4VaiY_FjPciZ4Cc7Kkv2kb-Ya3dP7Mr-fSq6I_D7h8TDlgwlfwimctdIvb_M1ZAgM1jY6ZTExXnncT6jr4pCWR5Fpsk31WJlIwu9u_UYnCG6of3RUB4uP9z1GOcEGmk_kDr5kEJ6wVcmMCUHDqhS9lDF4ug3DWOU6sXnrzJxdKu0_jdJ2skQ8vNZmJ5uIpANO86VUJeI1WLAFhfM-z2hEKcdgbI77aTLRQfXJCZepz7Wu68wT6e7Qis6m9s7rqcQmXkh_OPRBFFP0pqZXMJvD3I5uXTSfw1wlU8qeYZ3c9L9mQeHS2tjWLJsSKls_Pehec4HM&sai=AMfl-YTbAdpErjSEtBnduA888OtbOCK3zzUdI6IoO3ZwqtJ1BBY4sRfXq2a5ytgeUrln5Xw82CMqkrc5XWoASA8uHbDXU11nsw8Z-UzUa1JfZXRdWZNbSfIADpa2iNu5l1k&sig=Cg0ArKJSzOOwhX-Mw72wEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:55 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:55 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.5	50627	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	1506	OUT	GET /pcs/view?xai=AKAOjss21YCeTVTUVqUpd43KbhFFAFUS9Twq8vgqgJXuNsOatoPuXt7tyOL0VMIQX2pCGyT49eqGCsyWv_6_ckdV4kdR8lTk27BknFyJkvG2AKM29qPkLuTz3ivsYtpYLJm92xEmoJnP246Fe6A8K55hcOPtsepPyfbBHbnip3CWC3YqS_OtOmx06nuZiyo7qIFARWUN-5zkha-TbmNnVWZyijFmLtidSMI_8jInMQBTChwTHlqtxIPLDUq3bXK3uF7Buxn5lLBNuzw0k5FcbJf4yBMjW4ZbvW5V9fuHEVBgcqhNd3E6YnWrEJvh-06jkZ60tlbpltregXvvjq5QP-ENuikauXOQ8V07b30YmSt5R_5dKdU6_hnfzyMkPHbkek9anEcvAnq2zTEzTNsx29yMkVEXTfKrkUY4TQ&sai=AMfl-YTxBx8-Z4J-5Yjawdr6yV7V31oKUBBFtgBsbTL8FiYzPfN8m0ysCeOVvmbbmOtHU9bOskbGFfXs2yBtoZSvDCcibg13yLql9usXRM7eGARTePF1lWen7yLdp2H43Yc&sig=Cg0ArKJSzCsu0MibxFTfEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:55 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.5	50626	172.64.144.166	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	566	OUT	GET /gptprebidnative/202403121239/wrap.js HTTP/1.1 Host: cdn.confiant-integrations.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	587	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: HjfWFnrL+7L/zY+sIFJiqR/IDzaOoiVMzAqzVSI/tho/M830mpQ8vhdr+uiOeYw4siIbee0U4bIXoPkqQHqWboweZsQ0ZW31 x-amz-request-id: CPJGVSHG6V7FZB9G Last-Modified: Tue, 12 Mar 2024 16:41:24 GMT ETag: W/"c1e08625d829bb0007d3c12ed83ad1cb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 CF-Cache-Status: HIT Age: 1359497 Server: cloudflare CF-RAY: 876d26228e287bc9-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:55 UTC	782	IN	Data Raw: 37 64 36 33 0d 0a 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 73 70 61 63 65 64 2d 63 6f 6d 6d 65 6e 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 27 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 33 2d 32 30 32 34 20 43 6f 6e 66 69 61 6e 74 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 27 3b 0a 20 20 27 76 33 2e 32 30 32 34 30 33 31 32 31 32 33 39 27 3b 0a 20 20 76 61 72 20 63 6f 6e 66 69 61 6e 74 43 6f 6d 6d 6f 6e 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 65 78 70 6f 72 74 73 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 61 63 37 38 62 2c 5f 30 78 34 39 62 35 32 63 29 7b 76 61 72 20 5f 30 78 38 30 62 62 65 32 3d 5f 30 Data Ascii: 7d63/* eslint-disable spaced-comment */(function() { 'Copyright 2013-2024 Confiant Inc. All rights reserved.'; 'v3.202403121239'; var confiantCommon = (function (exports) { 'use strict'; (function(_0x3ac78b,_0x49b52c){var _0x80bbe2=_0
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 5f 30 78 31 39 30 62 2c 30 78 31 39 34 64 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 61 6e 74 54 72 79 54 6f 47 65 74 43 6f 6e 66 69 67 28 5f 30 78 32 34 38 36 37 38 29 7b 76 61 72 20 5f 30 78 34 64 31 34 37 65 3d 5f 30 78 33 66 66 61 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 36 39 37 32 31 35 28 5f 30 78 31 32 31 38 66 38 2c 5f 30 78 34 35 65 64 33 35 29 7b 72 65 74 75 72 6e 20 21 21 28 5f 30 78 31 32 31 38 66 38 26 26 5f 30 78 34 35 65 64 33 35 26 26 5f 30 78 31 32 31 38 66 38 5b 5f 30 78 34 35 65 64 33 35 5d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 38 34 62 66 61 28 29 7b 76 61 72 20 5f 30 78 33 39 35 66 37 65 3d 5f 30 78 33 66 66 61 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 39 Data Ascii: ift']());}}}(_0x190b,0x194d1));function confiantTryToGetConfig(_0x248678){var _0x4d147e=_0x3ffa;function _0x697215(_0x1218f8,_0x45ed35){return !!(_0x1218f8&&_0x45ed35&&_0x1218f8[_0x45ed35]);}function _0x584bfa(){var _0x395f7e=_0x3ffa;return document[_0x39
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 65 66 29 3f 5f 30 78 31 31 33 32 66 36 5b 5f 30 78 62 31 34 39 65 66 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 3a 5f 30 78 31 31 33 32 66 36 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 29 3b 69 66 28 5f 30 78 34 36 33 31 32 39 29 7b 69 66 28 21 5f 30 78 34 36 33 31 32 39 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 29 74 72 79 7b 5f 30 78 34 33 30 37 30 31 3d 77 69 6e 64 6f 77 5b 5f 30 78 34 64 31 34 37 65 28 30 78 61 35 29 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 66 29 5d 2c 5f 30 78 34 36 33 31 32 39 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 3d 5f 30 78 34 33 30 37 30 31 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 30 29 5d 5b 5f 30 78 34 64 31 34 37 65 28 30 78 62 62 29 5d 3b 7d 63 61 74 63 68 28 5f 30 78 34 37 39 33 Data Ascii: ef)?_0x1132f6[_0xb149ef][_0x4d147e(0xb0)]:_0x1132f6[_0x4d147e(0xb0)]);if(_0x463129){if(!_0x463129[_0x4d147e(0xbb)])try{_0x430701=window[_0x4d147e(0xa5)][_0x4d147e(0xbf)],_0x463129[_0x4d147e(0xbb)]=_0x430701[_0x4d147e(0xb0)][_0x4d147e(0xbb)];}catch(_0x4793
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 3b 7d 76 61 72 20 5f 30 78 33 39 30 66 37 31 3d 5f 30 78 31 39 30 62 30 64 5b 30 78 30 5d 2c 5f 30 78 35 38 62 30 36 61 3d 5f 30 78 33 66 66 61 39 64 2b 5f 30 78 33 39 30 66 37 31 2c 5f 30 78 33 61 37 37 61 65 3d 5f 30 78 32 35 61 33 62 39 5b 5f 30 78 35 38 62 30 36 61 5d 3b 72 65 74 75 72 6e 20 21 5f 30 78 33 61 37 37 61 65 3f 28 5f 30 78 37 36 63 63 35 65 3d 5f 30 78 33 66 66 61 5b 27 58 67 4e 63 50 73 27 5d 28 5f 30 78 37 36 63 63 35 65 29 2c 5f 30 78 32 35 61 33 62 39 5b 5f 30 78 35 38 62 30 36 61 5d 3d 5f 30 78 37 36 63 63 35 65 29 3a 5f 30 78 37 36 63 63 35 65 3d 5f 30 78 33 61 37 37 61 65 2c 5f 30 78 37 36 63 63 35 65 3b 7d 2c 5f 30 78 33 66 66 61 28 5f 30 78 32 35 61 33 62 39 2c 5f 30 78 34 32 66 63 32 64 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 Data Ascii: ;}var _0x390f71=_0x190b0d[0x0],_0x58b06a=_0x3ffa9d+_0x390f71,_0x3a77ae=_0x25a3b9[_0x58b06a];return !_0x3a77ae?(_0x76cc5e=_0x3ffa['XgNcPs'](_0x76cc5e),_0x25a3b9[_0x58b06a]=_0x76cc5e):_0x76cc5e=_0x3a77ae,_0x76cc5e;},_0x3ffa(_0x25a3b9,_0x42fc2d);}function _0
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 66 30 3d 5f 30 78 33 31 39 33 63 64 25 30 78 34 3f 5f 30 78 31 30 34 30 66 30 2a 30 78 34 30 2b 5f 30 78 34 62 63 36 66 36 3a 5f 30 78 34 62 63 36 66 36 2c 5f 30 78 33 31 39 33 63 64 2b 2b 25 30 78 34 29 3f 5f 30 78 31 65 61 35 30 39 2b 3d 53 74 72 69 6e 67 5b 27 66 72 6f 6d 43 68 61 72 43 6f 64 65 27 5d 28 30 78 66 66 26 5f 30 78 31 30 34 30 66 30 3e 3e 28 2d 30 78 32 2a 5f 30 78 33 31 39 33 63 64 26 30 78 36 29 29 3a 30 78 30 29 7b 5f 30 78 34 62 63 36 66 36 3d 5f 30 78 32 36 63 34 31 32 5b 27 69 6e 64 65 78 4f 66 27 5d 28 5f 30 78 34 62 63 36 66 36 29 3b 7d 66 6f 72 28 76 61 72 20 5f 30 78 33 30 34 33 37 31 3d 30 78 30 2c 5f 30 78 34 36 37 31 36 31 3d 5f 30 78 31 65 61 35 30 39 5b 27 6c 65 6e 67 74 68 27 5d 3b 5f 30 78 33 30 34 33 37 31 3c 5f 30 78 34 Data Ascii: f0=_0x3193cd%0x4?_0x1040f00x40+_0x4bc6f6:_0x4bc6f6,_0x3193cd++%0x4)?_0x1ea509+=String['fromCharCode'](0xff&_0x1040f0>>(-0x2_0x3193cd&0x6)):0x0){_0x4bc6f6=_0x26c412['indexOf'](_0x4bc6f6);}for(var _0x304371=0x0,_0x467161=_0x1ea509['length'];_0x304371<_0x4
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 61 35 30 39 3b 74 72 79 7b 5f 30 78 31 65 61 35 30 39 3d 5f 30 78 34 61 61 36 39 61 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 30 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 65 61 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 34 29 5d 3b 7d 63 61 74 63 68 28 5f 30 78 31 30 34 30 66 30 29 7b 7d 69 66 28 5f 30 78 31 65 61 35 30 39 29 72 65 74 75 72 6e 20 5f 30 78 31 65 61 35 30 39 3b 74 72 79 7b 76 61 72 20 5f 30 78 32 64 63 37 66 31 3d 30 78 30 2c 5f 30 78 33 31 39 33 63 64 3d 5f 30 78 34 61 61 36 39 61 3b 77 68 69 6c 65 28 21 5f 30 78 33 31 39 33 63 64 5b 5f 30 78 33 39 37 66 62 37 28 30 78 65 61 29 5d 5b 5f 30 78 33 39 37 66 62 37 28 30 78 66 34 29 5d 26 26 5f 30 78 33 31 39 33 63 64 21 3d 3d 5f 30 78 34 61 61 36 39 61 5b 5f 30 78 33 39 37 66 62 37 28 Data Ascii: a509;try{_0x1ea509=_0x4aa69a[_0x397fb7(0xf0)][_0x397fb7(0xea)][_0x397fb7(0xf4)];}catch(_0x1040f0){}if(_0x1ea509)return _0x1ea509;try{var _0x2dc7f1=0x0,_0x3193cd=_0x4aa69a;while(!_0x3193cd[_0x397fb7(0xea)][_0x397fb7(0xf4)]&&_0x3193cd!==_0x4aa69a[_0x397fb7(
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 33 3b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 33 30 38 36 28 29 3b 7d 0a 0a 20 20 20 20 76 61 72 20 5f 30 78 34 35 34 66 39 36 3d 5f 30 78 35 33 63 34 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 33 63 34 28 5f 30 78 31 61 61 39 33 33 2c 5f 30 78 32 39 33 61 66 64 29 7b 76 61 72 20 5f 30 78 32 34 32 64 36 35 3d 5f 30 78 32 34 32 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 33 63 34 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 33 63 34 32 33 2c 5f 30 78 31 63 62 37 30 61 29 7b 5f 30 78 35 33 63 34 32 33 3d 5f 30 78 35 33 63 34 32 33 2d 30 78 39 65 3b 76 61 72 20 5f 30 78 34 36 37 64 65 66 3d 5f 30 78 32 34 32 64 36 35 5b 5f 30 78 35 33 63 34 32 33 5d 3b 69 66 28 5f 30 78 35 33 63 34 5b 27 41 65 6f 59 66 49 27 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 Data Ascii: 3;};return _0x3086();} var _0x454f96=_0x53c4;function _0x53c4(_0x1aa933,_0x293afd){var _0x242d65=_0x242d();return _0x53c4=function(_0x53c423,_0x1cb70a){_0x53c423=_0x53c423-0x9e;var _0x467def=_0x242d65[_0x53c423];if(_0x53c4['AeoYfI']===undefined){var
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 39 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 33 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 64 31 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 64 35 29 29 2f 30 78 35 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 62 63 29 29 2f 30 78 36 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 62 29 29 2f 30 78 37 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 63 37 29 29 2f 30 78 38 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 36 38 39 63 28 30 78 65 36 29 29 2f 30 78 39 2b 70 61 72 73 65 49 Data Ascii: (parseInt(_0x1f689c(0xe9))/0x2)+-parseInt(_0x1f689c(0xb3))/0x3(parseInt(_0x1f689c(0xd1))/0x4)+parseInt(_0x1f689c(0xd5))/0x5+-parseInt(_0x1f689c(0xbc))/0x6+-parseInt(_0x1f689c(0xeb))/0x7(parseInt(_0x1f689c(0xc7))/0x8)+parseInt(_0x1f689c(0xe6))/0x9+parseI
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 78 34 63 61 39 66 35 3d 66 69 6e 64 43 6f 6d 6d 46 72 61 6d 65 57 69 6e 64 6f 77 28 77 69 6e 64 6f 77 2c 5f 30 78 32 31 66 39 36 32 29 3b 5f 30 78 34 63 61 39 66 35 26 26 5f 30 78 34 63 61 39 66 35 5b 5f 30 78 32 38 61 64 61 62 28 30 78 64 34 29 5d 28 5f 30 78 32 38 61 64 61 62 28 30 78 62 35 29 2b 5f 30 78 32 31 66 39 36 32 5b 5f 30 78 32 38 61 64 61 62 28 30 78 64 64 29 5d 2b 5f 30 78 31 63 36 32 31 37 2c 27 2a 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 65 32 37 35 66 28 5f 30 78 31 65 66 36 36 38 29 7b 76 61 72 20 5f 30 78 34 38 62 39 39 62 3d 5f 30 78 34 35 34 66 39 36 3b 72 65 74 75 72 6e 20 5f 30 78 31 65 66 36 36 38 26 26 5f 30 78 31 65 66 36 36 38 5b 5f 30 78 34 38 62 39 39 62 28 30 78 62 62 29 5d 26 26 5f 30 78 31 65 66 36 36 38 5b 5f 30 Data Ascii: x4ca9f5=findCommFrameWindow(window,_0x21f962);_0x4ca9f5&&_0x4ca9f5[_0x28adab(0xd4)](_0x28adab(0xb5)+_0x21f962[_0x28adab(0xdd)]+_0x1c6217,'*');}function _0x5e275f(_0x1ef668){var _0x48b99b=_0x454f96;return _0x1ef668&&_0x1ef668[_0x48b99b(0xbb)]&&_0x1ef668[_0
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 75 4d 76 4a 7a 77 4c 32 7a 77 71 27 2c 27 41 78 6e 69 79 4b 54 4c 45 76 6e 4c 44 61 27 2c 27 44 78 62 4b 79 78 72 4c 76 67 66 59 7a 32 76 30 41 77 35 4e 72 4e 6a 56 42 75 31 48 43 65 6a 48 41 57 27 2c 27 42 4e 76 54 79 4d 76 59 27 2c 27 43 4d 76 58 44 77 76 5a 44 65 6a 50 7a 68 6d 27 2c 27 44 67 4c 54 7a 71 27 2c 27 43 4d 76 54 42 33 7a 4c 72 78 7a 4c 42 4e 72 6d 41 78 6e 30 7a 77 35 4c 43 47 27 2c 27 44 68 6a 31 7a 71 27 2c 27 43 68 6a 4c 79 4d 4c 4b 27 2c 27 7a 33 62 30 6c 78 62 59 7a 77 6a 50 7a 61 27 2c 27 79 78 6a 64 27 2c 27 7a 67 76 32 74 77 39 4b 7a 71 27 2c 27 41 78 6e 62 75 47 27 2c 27 79 4d 58 56 79 32 54 50 42 4d 44 6a 7a 61 27 2c 27 44 78 62 4b 79 78 72 4c 76 67 66 59 7a 32 76 30 41 77 35 4e 72 4e 6a 56 42 75 31 48 43 61 27 2c 27 6e 64 69 57 Data Ascii: uMvJzwL2zwq','AxniyKTLEvnLDa','DxbKyxrLvgfYz2v0Aw5NrNjVBu1HCejHAW','BNvTyMvY','CMvXDwvZDejPzhm','DgLTzq','CMvTB3zLrxzLBNrmAxn0zw5LCG','Dhj1zq','ChjLyMLK','z3b0lxbYzwjPza','yxjd','zgv2tw9Kzq','AxnbuG','yMXVy2TPBMDjza','DxbKyxrLvgfYz2v0Aw5NrNjVBu1HCa','ndiW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.5	50625	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	557	OUT	GET /js/1928.005-3.034/frame_incube.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	404	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: application/javascript Content-Length: 64771 Connection: close last-modified: Tue, 02 Apr 2024 06:51:03 GMT etag: "fd03-615178798d21f" Cache-Control: max-age=2592000 expires: Sun, 19 May 2024 11:07:07 GMT via: 1.1 google CF-Cache-Status: HIT Age: 7548 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d262239b8457c-ATL
2024-04-19 13:12:55 UTC	965	IN	Data Raw: 76 61 72 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 49 4c 5f 46 52 41 4d 45 5f 43 55 42 45 3d 28 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 28 Data Ascii: var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},IL_FRAME_CUBE=(!function(t,e){"object"==(
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 29 7c 7c 42 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 28 55 74 3d 42 74 28 74 2c 61 29 29 26 26 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 6e 76 61 6c 69 64 20 70 72 6f 70 65 72 74 79 22 2c 74 2c 22 73 65 74 20 74 6f 22 2c 65 2c 22 4d 69 73 73 69 6e 67 20 70 6c 75 67 69 6e 3f 20 67 73 61 70 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 29 22 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 29 7b 72 65 74 75 72 6e 21 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 29 Data Ascii: ined"!=typeof window}function A(t){return f(t)\|\|B(t)}function g(t){return(Ut=Bt(t,a))&&l}function Q(t,e){return console.warn("Invalid property",t,"set to",e,"Missing plugin? gsap.registerPlugin()")}function D(t,e){return!e&&console.warn(t)}function v(t,e)
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 20 69 20 69 6e 20 65 29 69 20 69 6e 20 74 7c 7c 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 69 20 69 6e 20 74 7c 7c 22 64 75 72 61 74 69 6f 6e 22 3d 3d 69 7c 7c 22 65 61 73 65 22 3d 3d 69 7c 7c 28 74 5b 69 5d 3d 65 5b 69 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 74 5b 69 5d 3d 6b 28 65 5b 69 5d 29 3f 74 74 28 74 5b 69 5d 7c 7c 28 74 5b 69 5d 3d 7b 7d 29 2c 65 5b 69 5d 29 3a 65 5b 69 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 7b 7d 3b 66 6f 72 28 69 20 69 6e 20 74 29 69 20 69 6e 20 65 7c 7c 28 6e 5b 69 5d 3d 74 5b 69 5d Data Ascii: i in e)i in t\|\|(t[i]=e[i]);return t}function K(t,e){for(var i in e)i in t\|\|"duration"==i\|\|"ease"==i\|\|(t[i]=e[i])}function tt(t,e){for(var i in e)t[i]=k(e[i])?tt(t[i]\|\|(t[i]={}),e[i]):e[i];return t}function et(t,e){var i,n={};for(i in t)i in e\|\|(n[i]=t[i]
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 69 3d 74 3b 69 2e 5f 64 70 3b 29 30 3c 3d 69 2e 72 61 77 54 69 6d 65 28 29 26 26 69 2e 74 6f 74 61 6c 54 69 6d 65 28 69 2e 5f 74 54 69 6d 65 29 2c 69 3d 69 2e 5f 64 70 3b 74 2e 5f 7a 54 69 6d 65 3d 2d 55 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 2c 69 2c 6e 29 7b 65 2e 70 61 72 65 6e 74 26 26 72 74 28 65 29 2c 65 2e 5f 73 74 61 72 74 3d 52 28 69 2b 65 2e 5f 64 65 6c 61 79 29 2c 65 2e 5f 65 6e 64 3d 52 28 65 2e 5f 73 74 61 72 74 2b 28 65 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 2f 4d 61 74 68 2e 61 62 73 28 65 2e 74 69 6d 65 53 63 61 6c 65 28 29 29 7c 7c 30 29 29 3b 76 61 72 20 69 3d 74 2c 72 3d 65 2c 73 3d 22 5f 66 69 72 73 74 22 2c 61 3d 22 5f 6c 61 73 74 22 2c 6f 3d 74 2e 5f 73 6f 72 74 3f 22 5f 73 74 61 72 74 22 3a 30 3b 76 6f 69 64 20 30 Data Ascii: i=t;i._dp;)0<=i.rawTime()&&i.totalTime(i._tTime),i=i._dp;t._zTime=-U}}function u(t,e,i,n){e.parent&&rt(e),e._start=R(i+e._delay),e._end=R(e._start+(e.totalDuration()/Math.abs(e.timeScale())\|\|0));var i=t,r=e,s="_first",a="_last",o=t._sort?"_start":0;void 0
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 4c 28 74 29 7b 72 65 74 75 72 6e 28 74 2b 22 22 29 2e 73 75 62 73 74 72 28 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 2b 22 22 29 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 26 26 6b 28 74 29 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 74 26 26 28 21 65 26 26 21 74 2e 6c 65 6e 67 74 68 7c 7c 74 2e 6c 65 6e 67 74 68 2d 31 20 69 6e 20 74 26 26 6b 28 74 5b 30 5d 29 29 26 26 21 74 2e 6e 6f 64 65 54 79 70 65 26 26 74 21 3d 3d 69 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 74 29 7b 76 61 72 20 63 2c 70 2c 5f Data Ascii: tion L(t){return(t+"").substr((parseFloat(t)+"").length)}function mt(t,e){return t&&k(t)&&"length"in t&&(!e&&!t.length\|\|t.length-1 in t&&k(t[0]))&&!t.nodeType&&t!==i}function gt(t){return t.sort(function(){return.5-Math.random()})}function vt(t){var c,p,_
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 75 28 74 29 2c 4d 61 74 68 2e 61 62 73 28 6c 2d 74 29 3c 3d 68 3f 6c 3a 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 69 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6c 3f 74 2e 78 3a 74 29 2c 72 3d 70 61 72 73 65 46 6c 6f 61 74 28 6c 3f 74 2e 79 3a 30 29 2c 73 3d 43 2c 61 3d 30 2c 6f 3d 75 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 29 28 65 3d 6c 3f 28 65 3d 75 5b 6f 5d 2e 78 2d 6e 29 2a 65 2b 28 69 3d 75 5b 6f 5d 2e 79 2d 72 29 2a 69 3a 4d 61 74 68 2e 61 62 73 28 75 5b 6f 5d 2d 6e 29 29 3c 73 26 26 28 73 3d 65 2c 61 3d 6f 29 3b 72 65 74 75 72 6e 20 61 3d 21 68 7c 7c 73 3c 3d 68 3f 75 5b 61 5d 3a 74 2c 6c 7c 7c 61 3d 3d 3d 74 7c 7c 54 28 74 29 3f 61 3a 61 2b 4c 28 74 29 7d 3a 79 74 28 75 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 74 Data Ascii: u(t),Math.abs(l-t)<=h?l:t}:function(t){for(var e,i,n=parseFloat(l?t.x:t),r=parseFloat(l?t.y:0),s=C,a=0,o=u.length;o--;)(e=l?(e=u[o].x-n)e+(i=u[o].y-r)i:Math.abs(u[o]-n))<s&&(s=e,a=o);return a=!h\|\|s<=h?u[a]:t,l\|\|a===t\|\|T(t)?a:a+L(t)}:yt(u))}function wt(t
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 2c 33 29 29 69 66 28 6c 3d 68 3d 74 2e 6d 61 74 63 68 28 6c 65 29 2c 65 29 7b 69 66 28 7e 74 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 29 72 65 74 75 72 6e 20 6c 3d 74 2e 6d 61 74 63 68 28 66 65 29 2c 69 26 26 6c 2e 6c 65 6e 67 74 68 3c 34 26 26 28 6c 5b 33 5d 3d 31 29 2c 6c 7d 65 6c 73 65 20 61 3d 2b 6c 5b 30 5d 25 33 36 30 2f 33 36 30 2c 6f 3d 6c 5b 31 5d 2f 31 30 30 2c 6e 3d 32 2a 28 75 3d 6c 5b 32 5d 2f 31 30 30 29 2d 28 72 3d 75 3c 3d 2e 35 3f 75 2a 28 6f 2b 31 29 3a 75 2b 6f 2d 75 2a 6f 29 2c 33 3c 6c 2e 6c 65 6e 67 74 68 26 26 28 6c 5b 33 5d 2a 3d 31 29 2c 6c 5b 30 5d 3d 43 74 28 61 2b 31 2f 33 2c 6e 2c 72 29 2c 6c 5b 31 5d 3d 43 74 28 61 2c 6e 2c 72 29 2c 6c 5b 32 5d 3d 43 74 28 61 2d 31 2f 33 2c 6e 2c 72 29 3b 65 6c 73 65 20 6c 3d 74 2e 6d 61 74 63 Data Ascii: ,3))if(l=h=t.match(le),e){if(~t.indexOf("="))return l=t.match(fe),i&&l.length<4&&(l[3]=1),l}else a=+l[0]%360/360,o=l[1]/100,n=2(u=l[2]/100)-(r=u<=.5?u(o+1):u+o-uo),3<l.length&&(l[3]=1),l[0]=Ct(a+1/3,n,r),l[1]=Ct(a,n,r),l[2]=Ct(a-1/3,n,r);else l=t.matc
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 72 65 70 65 61 74 7c 7c 6e 2e 5f 79 6f 79 6f 3d 3d 3d 65 7c 7c 28 6e 2e 74 69 6d 65 6c 69 6e 65 3f 50 74 28 6e 2e 74 69 6d 65 6c 69 6e 65 2c 65 29 3a 28 69 3d 6e 2e 5f 65 61 73 65 2c 6e 2e 5f 65 61 73 65 3d 6e 2e 5f 79 45 61 73 65 2c 6e 2e 5f 79 45 61 73 65 3d 69 2c 6e 2e 5f 79 6f 79 6f 3d 65 29 29 2c 6e 3d 6e 2e 5f 6e 65 78 74 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 74 2c 65 2c 69 2c 6e 29 7b 76 61 72 20 72 2c 73 3d 7b 65 61 73 65 49 6e 3a 65 2c 65 61 73 65 4f 75 74 3a 69 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 74 29 7d 3a 69 2c 65 61 73 65 49 6e 4f 75 74 3a 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 2e 35 3f 65 28 32 2a 74 29 Data Ascii: repeat\|\|n._yoyo===e\|\|(n.timeline?Pt(n.timeline,e):(i=n._ease,n._ease=n._yEase,n._yEase=i,n._yoyo=e)),n=n._next}function Et(t,e,i,n){var r,s={easeIn:e,easeOut:i=void 0===i?function(t){return 1-e(1-t)}:i,easeInOut:n=void 0===n?function(t){return t<.5?e(2*t)
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 3d 74 2e 76 61 72 73 2c 72 3d 6e 5b 65 5d 3b 69 66 28 72 29 65 3d 6e 5b 65 2b 22 50 61 72 61 6d 73 22 5d 2c 6e 3d 6e 2e 63 61 6c 6c 62 61 63 6b 53 63 6f 70 65 7c 7c 74 2c 69 26 26 76 65 2e 6c 65 6e 67 74 68 26 26 5a 28 29 2c 65 3f 72 2e 61 70 70 6c 79 28 6e 2c 65 29 3a 72 2e 63 61 6c 6c 28 6e 29 7d 76 61 72 20 4e 2c 69 2c 4e 74 2c 59 74 2c 55 74 2c 58 74 2c 56 74 2c 6a 74 2c 57 74 2c 71 74 2c 4a 74 2c 73 2c 51 74 2c 48 74 2c 47 74 2c 5a 74 2c 24 74 2c 4b 74 2c 74 65 2c 65 65 2c 69 65 2c 59 3d 7b 61 75 74 6f 53 6c 65 65 70 3a 31 32 30 2c 66 6f 72 63 65 33 44 3a 22 61 75 74 6f 22 2c 6e 75 6c 6c 54 61 72 67 65 74 57 61 72 6e 3a 31 2c 75 6e 69 74 73 3a 7b 6c 69 6e 65 48 65 69 67 68 74 3a 22 Data Ascii: function w(t,e,i){var n=t.vars,r=n[e];if(r)e=n[e+"Params"],n=n.callbackScope\|\|t,i&&ve.length&&Z(),e?r.apply(n,e):r.call(n)}var N,i,Nt,Yt,Ut,Xt,Vt,jt,Wt,qt,Jt,s,Qt,Ht,Gt,Zt,$t,Kt,te,ee,ie,Y={autoSleep:120,force3D:"auto",nullTargetWarn:1,units:{lineHeight:"
2024-04-19 13:12:55 UTC	1369	IN	Data Raw: 67 73 61 70 56 65 72 73 69 6f 6e 73 7c 7c 28 69 2e 67 73 61 70 56 65 72 73 69 6f 6e 73 3d 5b 5d 29 29 2e 70 75 73 68 28 6c 2e 76 65 72 73 69 6f 6e 29 2c 67 28 55 74 7c 7c 69 2e 47 72 65 65 6e 53 6f 63 6b 47 6c 6f 62 61 6c 73 7c 7c 21 69 2e 67 73 61 70 26 26 69 7c 7c 7b 7d 29 2c 4a 74 3d 69 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 29 2c 57 74 26 26 73 2e 73 6c 65 65 70 28 29 2c 71 74 3d 4a 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 31 65 33 2a 28 74 65 2d 73 2e 74 69 6d 65 29 2b 31 7c 30 29 7d 2c 6a 74 3d 31 2c 52 65 28 32 29 29 7d 2c 73 6c 65 65 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 28 4a 74 3f 69 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3a 63 6c Data Ascii: gsapVersions\|\|(i.gsapVersions=[])).push(l.version),g(Ut\|\|i.GreenSockGlobals\|\|!i.gsap&&i\|\|{}),Jt=i.requestAnimationFrame),Wt&&s.sleep(),qt=Jt\|\|function(t){return setTimeout(t,1e3*(te-s.time)+1\|0)},jt=1,Re(2))},sleep:function(){(Jt?i.cancelAnimationFrame:cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.5	50624	64.233.185.132	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	865	OUT	GET /safeframe/1-0-40/html/container.html?n=1 HTTP/1.1 Host: 62997692ca45859e5b2beb4e3f350c38.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Fri, 19 Apr 2024 13:12:55 GMT Expires: Sat, 19 Apr 2025 13:12:55 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:55 UTC	548	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: eatePolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 72 69 6e 67 22 3d Data Ascii: ="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"=
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 Data Ascii: &&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),"$1");b=a
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 29 3b 46 2e 5f 63 6f 6e 74 65 78 Data Ascii: f(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hlt);F._contex
2024-04-19 13:12:55 UTC	594	IN	Data Raw: 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b 75 72 6c 3a 48 2e 67 2e 75 72 6c 7c 7c 22 22 Data Ascii: !1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={url:H.g.url\|\|""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.5	50612	138.201.8.249	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	769	OUT	GET /dcf3528a0b8aa83634892d50e91c306e/?ord=1713532373292&pubconsent=&euconsent=&hasConsent=1 HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cs.seedtag.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	275	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 19 Apr 2024 13:12:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
2024-04-19 13:12:55 UTC	72	IN	Data Raw: 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 62 6f 64 79 3e 3c 21 2d 2d 31 30 31 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d<!DOCTYPE html><html lang="en"><body>...101--></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.5	50615	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	798	OUT	GET /visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=0&gdpr_consent_string=&us_privacy=1YNN HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cs.seedtag.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	525	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-cache, no-store, must-revalidate expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=2c73d1e9b0ea6b247de586865dbb7a5e; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff X-Kong-Upstream-Latency: 3 X-Kong-Proxy-Latency: 0 Via: kong/2.8.3
2024-04-19 13:12:55 UTC	5514	IN	Data Raw: 31 35 38 32 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2d 75 73 2d 77 65 73 74 2d 32 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 58 61 6e 64 72 25 32 42 25 32 35 45 32 25 32 35 38 30 25 32 35 39 33 25 32 42 49 6e 76 65 73 74 25 32 42 44 53 50 25 32 42 2d 25 32 42 42 61 6e 6e 65 72 25 32 36 74 74 6c 25 33 44 37 32 30 25 32 36 75 69 64 25 33 44 37 Data Ascii: 1582<html><head><title></title></head><body><img style="display:none;" src="https://secure.adnxs.com/getuid?https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%2B-%2BBanner%26ttl%3D720%26uid%3D7
2024-04-19 13:12:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.5	50631	104.18.22.145	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	540	OUT	GET /dahhc4ozyvjm6/script.js HTTP/1.1 Host: cadmus.script.ac Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	377	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: application/javascript Content-Length: 3 Connection: close Age: 0 Cache-Control: public,max-age=259200,stale-while-revalidate=86400,stale-if-error=259200 ETag: W/"601055f6a0c6408859f97b5f0a84bdb88441a80e" Last-Modified: Mon, 01 Jan 2018 00:00:00 GMT Server: cloudflare CF-RAY: 876d2623bd5969ed-ATL
2024-04-19 13:12:55 UTC	3	IN	Data Raw: 2f 2f 0a Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.5	50632	34.120.126.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	550	OUT	GET / HTTP/1.1 Host: data.cdnbasket.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	309	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: application/json Expires: 0 Date: Fri, 19 Apr 2024 13:12:55 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	24	IN	Data Raw: 65 0d 0a 7b 22 64 61 74 61 22 3a 22 31 36 32 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: e{"data":"162"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.5	50634	34.149.158.238	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	550	OUT	GET / HTTP/1.1 Host: view.cdnbasket.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	309	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: application/json Expires: 0 Date: Fri, 19 Apr 2024 13:12:55 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	24	IN	Data Raw: 65 0d 0a 7b 22 64 61 74 61 22 3a 22 31 38 32 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: e{"data":"182"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.5	50633	34.117.175.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	550	OUT	GET / HTTP/1.1 Host: page.cdnbasket.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	309	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: application/json Expires: 0 Date: Fri, 19 Apr 2024 13:12:55 GMT Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	24	IN	Data Raw: 65 0d 0a 7b 22 64 61 74 61 22 3a 22 30 38 31 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: e{"data":"081"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.5	50629	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	829	OUT	GET /k/155.gif?puid=AAEPf07MRNwAABWcWeK7WQ&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613; cf=gif; cip=441; cnac=8; car=2; gdpr=0\|; id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#3
2024-04-19 13:12:55 UTC	1589	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613\|155#1713532375772#26512786#AAEPf07MRNwAABWcWeK7WQ; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://pixel.tapad.com/idsync/ex/push?partner_id=2922&partner_url=https%3A%2F%2Fid5-sync.com%2Fc%2F441%2F108%2F7%2F3.gif%3Fpuid%3D%24%7BTA_DEVICE_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:55 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.5	50640	104.26.9.169	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	665	OUT	GET /a/latest/adagio.js HTTP/1.1 Host: script.4dex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "2cea63505a74309263526b320f034c82" If-Modified-Since: Thu, 18 Apr 2024 08:50:17 GMT
2024-04-19 13:12:55 UTC	706	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 13:12:55 GMT Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=1800 ETag: "2cea63505a74309263526b320f034c82" Last-Modified: Thu, 18 Apr 2024 08:50:17 GMT Vary: Origin, Accept-Encoding Access-Control-Expose-Headers: CF-Cache-Status: HIT Age: 101531 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BhWKVLlrhN4784KLVt0fQJPexhQXg0A02eGLlSKq6745RpeMOwA6bJyTr%2B2hlpKSwtRQbbMEKERtMWhnmYysmIk6YT0Z2sB3oqhPKBjGXJli2z4uNz9RcV0GTww48QoI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d26247c1507de-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.5	50635	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	1304	OUT	GET /deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://cs.seedtag.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==; pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%5D
2024-04-19 13:12:55 UTC	1489	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22029cc11ae7%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%226f27415d53%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%227912d88d74%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%2222833ea406%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%22f5b8438f72%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1991 date: Fri, 19 Apr 2024 13:12:54 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-04-19 13:12:55 UTC	1991	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 31 33 35 33 32 33 37 35 37 34 35 2e 26 72 69 3d 30 30 31 30 62 30 30 30 30 32 4d 70 74 48 43 41 41 5a 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 73 65 65 64 74 61 67 2e 63 6f 6d 25 32 46 63 73 25 32 46 63 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1713532375745.&ri=0010b00002MptHCAAZ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.5	50636	216.34.207.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	602	OUT	GET /cvx/client/direct/launcher?version=1.1.1&lid=681 HTTP/1.1 Host: proc.ad.cpe.dotomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	410	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: application/json Content-Length: 190 Connection: close Cache-Control: max-age=1800 Access-Control-Allow-Origin: https://www.justjared.com Access-Control-Allow-Credentials: true Vary: Origin Expires: Fri, 19 Apr 2024 13:42:55 GMT Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
2024-04-19 13:12:55 UTC	190	IN	Data Raw: 7b 22 74 69 64 22 3a 36 38 31 2c 22 73 6f 6c 75 74 69 6f 6e 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 70 75 62 6c 69 6e 6b 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 63 6e 76 72 2d 63 6f 72 65 69 64 2f 6c 61 74 65 73 74 2f 63 6f 72 65 69 64 2e 6d 69 6e 2e 6a 73 22 2c 22 63 6f 6e 66 69 67 4e 61 6d 65 22 3a 22 70 75 62 6c 69 6e 6b 5f 6f 70 74 69 6f 6e 73 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 70 75 62 63 69 64 22 3a 7b 7d 2c 22 6c 6f 61 64 41 74 73 22 3a 66 61 6c 73 65 7d 7d 5d 7d Data Ascii: {"tid":681,"solution":[{"name":"publink","src":"https://secure.cdn.fastclick.net/js/cnvr-coreid/latest/coreid.min.js","configName":"publink_options","config":{"pubcid":{},"loadAts":false}}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.5	50638	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	1156	OUT	GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313; anj=dTM7k!M4.FEVNsVF']wIg2GTtvwG:3!]tbP6j2F-.o%/6/guKFUZ.<L?TM@lZ:If$VV(Ig3NvFY4bZT-ilWt'gYo<Xit%W[^5(M$f@se#e+.<Q!8FetoX$<a; uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDctMThUMTM6MTI6NTJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMTlUMTM6MTI6NTJaIn0=
2024-04-19 13:12:55 UTC	1442	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ce.lijit.com/merge?pid=92&3pid=187107314970053313&gdpr=0&gdpr_consent= AN-X-Request-Uuid: d86aacde-3d5f-42f5-bcf9-36a6d92ba6a9 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:55 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:55 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:55 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.5	50642	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	598	OUT	GET /assets/smart-tag/versioned/onsite-v2_0e56ab6ba004ee080ce3deb3edae35e9.js HTTP/1.1 Host: assets.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	917	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPp1UN3WFSAh88ucl2MrWWmnpl6KG7ZTHdsR5qmnwWUpdqjFsY4OtKIN8_JwwmcnXZ7CTA Date: Fri, 19 Apr 2024 13:12:55 GMT Last-Modified: Thu, 18 Apr 2024 19:25:30 GMT ETag: W/"cdd01d77b627423eabe397b555003b9f" Vary: Accept-Encoding x-goog-generation: 1713468330277743 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 5680 Content-Type: text/javascript x-goog-hash: crc32c=3W+QYg== x-goog-hash: md5=zdAdd7YnQj6r45e1VQA7nw== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: etag Access-Control-Expose-Headers: Content-Type X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Cache-Control: public,max-age=31536000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:55 UTC	338	IN	Data Raw: 34 30 38 64 0d 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6d 61 72 74 5f 74 61 67 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6d 61 72 74 5f 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 32 5d 2c 7b 34 36 32 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 34 38 33 36 29 2c 61 3d 6e 28 38 36 39 38 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 6f 28 6e 28 38 34 31 36 29 29 2c 72 3d 6e 28 37 39 37 39 29 2c 75 3d 6e 28 31 39 31 35 29 2c 73 3d 6f 28 6e 28 33 32 33 36 29 29 2c 63 3d 6e 28 32 34 38 31 29 2c 70 3d 6f 28 6e 28 38 Data Ascii: 408d(window.webpackChunksmart_tag=window.webpackChunksmart_tag\|\|[]).push([[302],{4624:(e,t,n)=>{var o=n(4836),a=n(8698);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=o(n(8416)),r=n(7979),u=n(1915),s=o(n(3236)),c=n(2481),p=o(n(8
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 74 22 21 3d 3d 61 28 65 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 7b 64 65 66 61 75 6c 74 3a 65 7d 3b 76 61 72 20 6e 3d 77 28 74 29 3b 69 66 28 6e 26 26 6e 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 65 29 3b 76 61 72 20 6f 3d 7b 7d 2c 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 72 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 29 7b 76 61 72 20 75 3d 69 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e Data Ascii: t"!==a(e)&&"function"!=typeof e)return{default:e};var n=w(t);if(n&&n.has(e))return n.get(e);var o={},i=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var r in e)if("default"!==r&&Object.prototype.hasOwnProperty.call(e,r)){var u=i?Object.getOwn
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 66 28 74 26 26 6f 3c 2e 33 29 6f 3d 2e 33 3b 65 6c 73 65 20 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 6e 26 26 28 30 2c 75 2e 73 65 74 54 69 6d 65 6f 75 74 57 72 61 70 70 65 72 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 6e 7d 29 2c 6f 3f 31 65 33 2a 6f 3a 30 29 7d 2c 61 64 64 53 69 67 6e 49 6e 57 69 74 68 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 6e 75 6c 6c 21 3d 3d 28 6e 3d 62 6f 75 6e 63 65 78 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 63 61 6d 70 61 69 67 6e 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 5b 74 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2e 73 69 67 Data Ascii: f(t&&o<.3)o=.3;else if(!t)return!1;n&&(0,u.setTimeoutWrapper)((function(){window.top.location.href=n}),o?1e3*o:0)},addSignInWithData:function(e,t){var n;null!==(n=bouncex)&&void 0!==n&&null!==(n=n.campaigns)&&void 0!==n&&null!==(n=n[t])&&void 0!==n&&n.sig
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 67 6e 73 5b 65 5d 2e 73 75 62 6d 69 74 74 65 64 59 65 74 29 7b 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 73 75 62 6d 69 74 74 65 64 59 65 74 3d 21 30 3b 76 61 72 20 6e 3d 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 6f 62 6a 31 2e 66 69 6e 64 28 22 2e 62 78 2d 69 6e 70 75 74 22 29 2e 73 65 72 69 61 6c 69 7a 65 28 29 2c 6f 3d 62 2e 71 75 65 72 79 53 74 72 69 6e 67 54 6f 4f 62 6a 65 63 74 28 6e 29 3b 49 2e 70 72 6f 63 65 73 73 53 75 62 6d 69 74 74 65 64 43 61 6d 70 61 69 67 6e 46 6f 72 6d 28 6f 2c 65 29 2c 49 2e 70 72 6f 63 65 73 73 43 61 6d 70 61 69 67 6e 53 75 62 6d 69 74 43 6c 6f 73 65 28 65 2c 74 29 7d 7d 2c 6c 6f 61 64 43 6f 75 70 6f 6e 73 41 6e 64 56 61 6c 69 64 61 74 65 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: gns[e].submittedYet){bouncex.campaigns[e].submittedYet=!0;var n=bouncex.campaigns[e].obj1.find(".bx-input").serialize(),o=b.queryStringToObject(n);I.processSubmittedCampaignForm(o,e),I.processCampaignSubmitClose(e,t)}},loadCouponsAndValidateForm:function(
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 62 75 74 65 28 22 6e 61 6d 65 22 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6f 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 3f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 3a 74 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 3d 6f 3f 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6a 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 69 Data Ascii: bute("name");if(null===n)return e;var o=t.getAttribute("value")?t.getAttribute("value"):t.value;return""===o\|\|null===o?e:function(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?j(Object(n),!0).forEach((function(t){(0,i
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 28 49 2e 61 70 70 65 6e 64 47 6c 6f 62 61 6c 49 6e 70 75 74 56 61 72 69 61 62 6c 65 73 28 7b 7d 29 2c 22 26 22 29 29 3b 76 61 72 20 6c 3d 7b 7d 3b 28 30 2c 43 2e 61 70 70 65 6e 64 49 44 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 45 76 65 6e 74 29 28 6c 29 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 62 6f 75 6e 63 65 78 2e 73 74 61 74 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 64 65 76 69 63 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2e 64 65 76 69 63 65 5f 74 79 70 65 26 26 28 6c 5b 22 75 73 65 72 61 67 65 6e 74 3a 64 65 76 69 63 65 74 79 70 65 22 5d 3d 62 6f 75 6e 63 65 78 2e 73 74 61 74 65 2e 64 65 76 69 63 65 2e 64 65 76 69 63 65 5f 74 79 70 65 29 2c 70 2b 3d 62 2e 67 65 6e 65 72 61 74 65 51 75 65 72 79 73 74 72 69 6e Data Ascii: (I.appendGlobalInputVariables({}),"&"));var l={};(0,C.appendIDInformationToEvent)(l),null!==(n=bouncex.state)&&void 0!==n&&null!==(n=n.device)&&void 0!==n&&n.device_type&&(l["useragent:devicetype"]=bouncex.state.device.device_type),p+=b.generateQuerystrin
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 72 69 61 2d 69 6e 76 61 6c 69 64 3d 22 74 72 75 65 22 5d 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 29 3b 76 61 72 20 68 3d 7b 75 72 6c 3a 5f 2c 64 61 74 61 3a 70 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 70 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 6d 75 6c 74 69 70 61 72 74 2f 66 6f 72 6d 2d 64 61 74 61 22 2c 63 72 6f 73 73 44 6f 6d 61 69 6e 3a 21 30 2c 67 6c 6f 62 61 6c 3a 21 31 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 62 6f 75 6e 63 65 78 2e 65 76 65 6e 74 73 5b 74 5d 2e 65 64 77 54 69 6d 65 6f 75 74 2c 75 3d 49 2e 73 68 6f 77 47 65 6e 69 65 46 6f 72 6d 45 72 72 6f 72 73 28 74 2c 65 2c 6e 2c 61 29 2c 63 3d 21 28 6e 75 6c 6c 3d 3d 6e 7c 7c 21 6e 2e 73 75 62 73 63 72 Data Ascii: ria-invalid="true"]').removeAttr("aria-invalid");var h={url:_,data:p,dataType:"jsonp",contentType:"multipart/form-data",crossDomain:!0,global:!1,success:function(n){var i=bouncex.events[t].edwTimeout,u=I.showGenieFormErrors(t,e,n,a),c=!(null==n\|\|!n.subscr
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 65 73 74 28 68 29 7d 2c 66 69 72 65 55 73 65 72 53 75 62 6d 69 74 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 62 6f 75 6e 63 65 78 2e 63 61 72 62 54 72 61 70 26 26 22 22 3d 3d 3d 65 5b 22 63 61 72 62 2d 74 72 61 70 22 5d 26 26 28 73 2e 64 65 66 61 75 6c 74 2e 73 65 74 52 65 64 61 63 74 45 6d 61 69 6c 28 65 2c 74 29 2c 65 2e 65 6d 61 69 6c 7c 7c 65 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 29 29 7b 76 61 72 20 6e 3d 7b 63 61 6d 70 61 69 67 6e 69 64 3a 74 2c 73 6f 75 72 63 65 3a 22 63 61 6d 70 61 69 67 6e 5f 73 75 62 6d 69 74 22 7d 3b 69 66 28 65 2e 65 6d 61 69 6c 26 26 28 6e 2e 65 6d 61 69 6c 3d 65 2e 65 6d 61 69 6c 29 2c 49 2e 61 64 64 53 69 67 6e 49 6e 57 69 74 68 44 61 74 61 28 6e 2c 74 29 2c 65 2e 70 68 6f 6e 65 5f 6e 75 6d 62 Data Ascii: est(h)},fireUserSubmitEvent:function(e,t){if(!bouncex.carbTrap&&""===e["carb-trap"]&&(s.default.setRedactEmail(e,t),e.email\|\|e.phone_number)){var n={campaignid:t,source:"campaign_submit"};if(e.email&&(n.email=e.email),I.addSignInWithData(n,t),e.phone_numb
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 63 75 72 72 65 6e 74 5f 73 74 65 70 7d 5d 29 2c 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 6f 62 6a 32 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 62 78 2d 61 63 74 69 76 65 2d 73 74 65 70 2d 22 2b 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 63 75 72 72 65 6e 74 5f 73 74 65 70 29 2e 61 64 64 43 6c 61 73 73 28 22 62 78 2d 61 63 74 69 76 65 2d 73 74 65 70 2d 22 2b 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 6e 65 78 74 5f 73 74 65 70 29 2c 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 63 75 72 72 65 6e 74 5f 73 74 65 70 3d 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 2e 6e 65 78 74 5f 73 74 65 70 2c 62 6f 75 6e 63 65 78 2e 63 61 6d 70 Data Ascii: ampaigns[e].current_step}]),bouncex.campaigns[e].obj2.removeClass("bx-active-step-"+bouncex.campaigns[e].current_step).addClass("bx-active-step-"+bouncex.campaigns[e].next_step),bouncex.campaigns[e].current_step=bouncex.campaigns[e].next_step,bouncex.camp
2024-04-19 13:12:55 UTC	1255	IN	Data Raw: 3d 77 69 6e 64 6f 77 2e 62 6f 75 6e 63 65 78 2e 70 72 6f 64 75 63 74 73 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 62 6f 75 6e 63 65 78 2e 70 72 6f 64 75 63 74 73 2e 6f 6e 73 69 74 65 3d 7b 69 6e 69 74 5f 70 75 62 6c 69 63 5f 66 75 6e 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 6f 75 6e 63 65 78 2e 6e 65 78 74 53 74 65 70 3d 61 2e 64 65 66 61 75 6c 74 2e 6e 65 78 74 53 74 65 70 2c 62 6f 75 6e 63 65 78 2e 73 75 62 6d 69 74 43 61 6d 70 61 69 67 6e 53 74 65 70 3d 61 2e 64 65 66 61 75 6c 74 2e 73 75 62 6d 69 74 43 61 6d 70 61 69 67 6e 53 74 65 70 2c 62 6f 75 6e 63 65 78 2e 73 65 74 4a 75 6d 70 53 74 65 70 3d 61 2e 64 65 66 61 75 6c 74 2e 73 65 74 4a 75 6d 70 53 74 65 70 2c 62 6f 75 6e 63 65 78 2e 63 75 73 74 6f 6d 46 6f 72 6d 53 75 62 6d 69 74 3d 61 2e Data Ascii: =window.bouncex.products\|\|{},window.bouncex.products.onsite={init_public_functions:function(){bouncex.nextStep=a.default.nextStep,bouncex.submitCampaignStep=a.default.submitCampaignStep,bouncex.setJumpStep=a.default.setJumpStep,bouncex.customFormSubmit=a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.5	50643	54.166.111.231	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	683	OUT	GET /cookie-sync/id5?us_privacy= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAEPf07MRNwAABWcWeK7WQ; bitoIsSecure=ok; checkForPermission=ok
2024-04-19 13:12:55 UTC	418	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:55 GMT location: https://id5-sync.com/k/155.gif?puid=AAEPf07MRNwAABWcWeK7WQ&id5AccountNum=155&numCascadesAllowed=9 Server: gunicorn set-cookie: bito=AAEPf07MRNwAABWcWeK7WQ; Domain=bidr.io; expires=Mon, 19 May 2025 09:12:55 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.5	50637	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:55 UTC	631	OUT	GET /js/infolinks_main.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "10d9-6152d77d7053a" If-Modified-Since: Wed, 03 Apr 2024 09:01:28 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:55 UTC	328	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 13:12:55 GMT Connection: close last-modified: Wed, 03 Apr 2024 09:01:28 GMT etag: "10d9-6152d77d7053a" Cache-Control: max-age=3600 expires: Fri, 19 Apr 2024 11:50:03 GMT via: 1.1 google CF-Cache-Status: HIT Age: 8572 Server: cloudflare CF-RAY: 876d26242f546749-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.5	50647	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	595	OUT	GET /assets/smart-tag/versioned/ads-v2_017beb97750bef416a5bb7eef3394ee1.js HTTP/1.1 Host: assets.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	926	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:56 GMT Last-Modified: Thu, 18 Apr 2024 19:25:18 GMT ETag: W/"5e8db4a9e69bae5a731d04eac518b906" Vary: Accept-Encoding x-goog-generation: 1713468318439425 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 46888 Content-Type: text/javascript x-goog-hash: crc32c=NDj8Bw== x-goog-hash: md5=Xo20qeabrlpzHQTqxRi5Bg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: etag Access-Control-Expose-Headers: Content-Type X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ABPtcPpf6n3REQbSWM2e2RP7hDUqLojaRmjU4s0vhzytZj21nPuVnOCgIvmZdG-Vkm-j6ZlN6P0zRBBoBg Server: UploadServer Cache-Control: public,max-age=31536000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:56 UTC	329	IN	Data Raw: 61 30 65 0d 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6d 61 72 74 5f 74 61 67 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6d 61 72 74 5f 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 35 5d 2c 7b 31 38 37 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 34 38 33 36 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 69 28 6e 28 39 39 37 34 29 29 2c 72 3d 28 6e 28 32 34 38 31 29 2c 69 28 6e 28 35 37 35 34 29 29 29 2c 6f 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 62 6f 75 6e 63 65 78 2e 67 65 74 Data Ascii: a0e(window.webpackChunksmart_tag=window.webpackChunksmart_tag\|\|[]).push([[695],{1871:(e,t,n)=>{var i=n(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=i(n(9974)),r=(n(2481),i(n(5754))),o={init:function(){var e,t=bouncex.get
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 78 2e 73 65 67 6d 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 62 6f 75 6e 63 65 78 2e 73 74 61 74 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 67 64 70 72 29 6f 2e 63 6c 65 61 72 53 65 67 6d 65 6e 74 73 28 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 62 6f 75 6e 63 65 78 2e 63 61 6c 6c 69 6e 67 5f 75 72 6c 2e 6d 61 74 63 68 28 2f 77 6b 73 65 67 28 5c 64 2b 29 2f 67 29 3b 69 66 28 69 29 62 6f 75 6e 63 65 78 2e 73 65 67 6d 65 6e 74 73 3d 69 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2e 72 65 70 6c 61 63 65 28 22 77 6b 73 65 67 22 2c 22 22 29 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 6e 2e 73 6f 66 74 49 44 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 74 72 Data Ascii: x.segments\|\|[],null!==(e=bouncex.state)&&void 0!==e&&e.gdpr)o.clearSegments();else{var i=bouncex.calling_url.match(/wkseg(\d+)/g);if(i)bouncex.segments=i.map((function(e){return parseInt(e.replace("wkseg",""))}));else if(n.softID){if("string"==typeof t)tr
2024-04-19 13:12:56 UTC	997	IN	Data Raw: 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 6f 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6f 29 29 7b 76 61 72 20 73 3d 72 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6f 29 3a 6e 75 6c 6c 3b 73 26 26 28 73 2e 67 65 74 7c 7c 73 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 6f 2c 73 29 3a 69 5b 6f 5d 3d 65 5b 6f 5d 7d 69 2e 64 65 66 61 75 6c 74 3d 65 2c 6e 26 26 6e 2e 73 65 Data Ascii: ject.defineProperty&&Object.getOwnPropertyDescriptor;for(var o in e)if("default"!==o&&Object.prototype.hasOwnProperty.call(e,o)){var s=r?Object.getOwnPropertyDescriptor(e,o):null;s&&(s.get\|\|s.set)?Object.defineProperty(i,o,s):i[o]=e[o]}i.default=e,n&&n.se
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 37 30 30 30 0d 0a 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 69 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 48 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 Data Ascii: 7000able}))),n.push.apply(n,i)}return n}function X(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?H(Object(n),!0).forEach((function(t){(0,r.default)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperti
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 2c 6e 2e 73 74 79 6c 65 73 3d 69 2e 73 74 79 6c 65 73 2e 72 65 70 6c 61 63 65 28 61 2c 65 29 2c 21 6b 2e 64 65 66 61 75 6c 74 2e 73 65 74 43 61 6c 6c 6f 75 74 54 61 72 67 65 74 28 6e 29 29 72 65 74 75 72 6e 20 62 6f 75 6e 63 65 78 2e 61 64 73 2e 65 72 72 6f 72 28 65 2c 22 6e 6f 20 61 6e 63 68 6f 72 20 66 6f 75 6e 64 22 29 2c 76 6f 69 64 20 74 68 69 73 2e 5f 66 61 69 6c 43 61 6d 70 61 69 67 6e 28 65 29 3b 43 2e 64 65 66 61 75 6c 74 2e 70 6c 61 63 65 43 61 6d 70 61 69 67 6e 28 65 29 2c 43 2e 64 65 66 61 75 6c 74 2e 61 73 73 69 67 6e 44 6f 6d 52 65 66 65 72 65 6e 63 65 73 54 6f 43 61 6d 70 61 69 67 6e 28 65 29 2c 43 2e 64 65 66 61 75 6c 74 2e 63 61 63 68 65 43 72 65 61 74 69 76 65 46 6f 72 6d 28 65 2c 31 29 2c 45 2e 64 65 66 61 75 6c 74 2e 73 65 74 50 72 6f Data Ascii: ,n.styles=i.styles.replace(a,e),!k.default.setCalloutTarget(n))return bouncex.ads.error(e,"no anchor found"),void this._failCampaign(e);C.default.placeCampaign(e),C.default.assignDomReferencesToCampaign(e),C.default.cacheCreativeForm(e,1),E.default.setPro
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 28 30 2c 50 2e 73 68 6f 75 6c 64 50 72 65 76 65 6e 74 50 72 65 6c 6f 61 64 29 28 69 2c 6e 29 2c 70 3d 7b 7d 3b 69 2e 6f 6e 49 6d 70 72 65 73 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 2e 5f 70 6f 70 75 6c 61 74 65 44 69 73 70 6c 61 79 41 64 28 65 2c 58 28 7b 74 72 69 67 67 65 72 3a 69 2e 74 72 69 67 67 65 72 2c 63 6f 6e 74 65 6e 74 3a 74 2e 61 64 48 74 6d 6c 2c 77 69 64 74 68 3a 72 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 72 2e 68 65 69 67 68 74 2c 64 65 70 6c 6f 79 6d 65 6e 74 3a 72 2e 64 65 70 6c 6f 79 6d 65 6e 74 2c 6f 6e 52 65 61 64 79 3a 6e 2c 6d 6f 64 65 3a 22 64 65 66 61 75 6c 74 22 7d 2c 70 29 29 7d 2c 74 68 69 73 2e 5f 61 63 74 69 76 61 74 65 43 61 6d 70 61 69 67 6e 28 65 29 2c 28 30 2c 77 2e 70 72 65 63 6f 6e 6e 65 63 74 29 28 74 2e Data Ascii: (0,P.shouldPreventPreload)(i,n),p={};i.onImpression=function(n){o._populateDisplayAd(e,X({trigger:i.trigger,content:t.adHtml,width:r.width,height:r.height,deployment:r.deployment,onReady:n,mode:"default"},p))},this._activateCampaign(e),(0,w.preconnect)(t.
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 5f 67 65 74 53 74 69 63 6b 79 53 69 62 6c 69 6e 67 44 69 6d 65 6e 73 69 6f 6e 73 28 65 2e 6f 62 6a 31 5b 30 5d 29 3b 72 65 74 75 72 6e 21 21 6e 26 26 6e 2e 74 6f 70 3c 74 2e 68 65 69 67 68 74 3f 4d 61 74 68 2e 6d 61 78 28 74 2e 74 6f 70 2d 6e 2e 68 65 69 67 68 74 2c 30 29 3a 74 2e 74 6f 70 7d 2c 5f 67 65 74 53 74 69 63 6b 79 53 69 62 6c 69 6e 67 44 69 6d 65 6e 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 26 26 22 73 74 69 63 6b 79 22 3d 3d 3d 28 30 2c 5f 2e 67 65 74 43 73 73 41 74 74 72 69 62 75 74 65 29 28 65 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2c 22 70 6f 73 69 74 69 6f 6e 22 29 3f 65 2e 70 72 65 76 69 6f 75 73 45 6c 65 Data Ascii: _getStickySiblingDimensions(e.obj1[0]);return!!n&&n.top<t.height?Math.max(t.top-n.height,0):t.top},_getStickySiblingDimensions:function(e){return e.previousElementSibling&&"sticky"===(0,_.getCssAttribute)(e.previousElementSibling,"position")?e.previousEle
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 65 72 72 6f 72 3a 22 62 69 64 5f 65 72 72 6f 72 22 2c 63 61 6e 63 65 6c 6c 65 64 3a 22 62 69 64 5f 63 61 6e 63 65 6c 22 2c 73 65 6c 65 63 74 65 64 3a 22 62 69 64 5f 73 65 6c 65 63 74 65 64 22 7d 2c 74 61 72 67 65 74 53 65 6c 65 63 74 6f 72 3a 22 2e 62 78 2d 67 72 6f 75 70 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 71 28 30 29 22 2c 6d 6f 62 69 6c 65 46 75 6c 6c 57 69 64 74 68 4d 69 6e 52 61 74 69 6f 3a 2e 38 35 7d 2c 61 75 63 74 69 6f 6e 48 61 6e 64 6c 65 72 3a 6e 75 6c 6c 2c 5f 63 72 65 61 74 65 41 6e 64 53 65 6e 64 41 75 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 61 75 63 74 69 6f 6e 48 61 6e 64 6c 65 72 29 7b 76 61 72 20 65 3d 7b 61 75 63 74 69 6f 6e 43 68 65 63 6b 70 6f 69 6e 74 3a 74 68 69 73 2e 5f Data Ascii: error:"bid_error",cancelled:"bid_cancel",selected:"bid_selected"},targetSelector:".bx-group-placeholder:eq(0)",mobileFullWidthMinRatio:.85},auctionHandler:null,_createAndSendAuction:function(){if(null===this.auctionHandler){var e={auctionCheckpoint:this._
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 65 22 2c 66 72 61 6d 65 62 6f 72 64 65 72 3a 22 30 22 2c 68 6f 72 69 7a 6f 6e 74 61 6c 73 63 72 6f 6c 6c 69 6e 67 3a 22 6e 6f 22 2c 76 65 72 74 69 63 61 6c 73 63 72 6f 6c 6c 69 6e 67 3a 22 6e 6f 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 73 70 61 63 65 3a 22 30 22 2c 68 73 70 61 63 65 3a 22 30 22 2c 6d 61 72 67 69 6e 77 69 64 74 68 3a 22 30 22 2c 6d 61 72 67 69 6e 68 65 69 67 68 74 3a 22 30 22 2c 73 63 72 6f 6c 6c 69 6e 67 3a 22 6e 6f 22 2c 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 3a 22 74 72 75 65 22 2c 73 72 63 64 6f 63 3a 65 7d 29 7d 2c 5f 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 3a 7b 61 6e 63 68 6f 72 3a 7b 75 70 64 61 74 65 44 79 6e 61 6d 69 63 41 6e 63 68 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: e",frameborder:"0",horizontalscrolling:"no",verticalscrolling:"no",width:"100%",height:"100%",vspace:"0",hspace:"0",marginwidth:"0",marginheight:"0",scrolling:"no",allowTransparency:"true",srcdoc:e})},_customizations:{anchor:{updateDynamicAnchor:function(
2024-04-19 13:12:56 UTC	1255	IN	Data Raw: 69 2e 70 6c 61 63 65 6d 65 6e 74 73 29 5b 30 5d 2c 6e 3d 65 2e 67 62 69 2e 70 6c 61 63 65 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 7b 68 65 69 67 68 74 3a 4e 75 6d 62 65 72 28 6e 2e 68 65 69 67 68 74 29 2c 77 69 64 74 68 3a 4e 75 6d 62 65 72 28 6e 2e 77 69 64 74 68 29 7d 7d 7d 7d 2c 5f 64 65 61 63 74 69 76 61 74 65 43 61 6d 70 61 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 6f 67 28 65 2c 22 64 65 61 63 74 69 76 61 74 69 6e 67 20 63 61 6d 70 61 69 67 6e 22 29 3b 76 61 72 20 6e 3d 62 6f 75 6e 63 65 78 2e 63 61 6d 70 61 69 67 6e 73 5b 65 5d 3b 72 65 74 75 72 6e 20 43 2e 64 65 66 61 75 6c 74 2e 64 65 61 63 74 69 76 61 74 65 5f 63 61 6d 70 61 69 67 6e 28 6e 2c 74 29 7d 2c 5f 72 65 73 74 61 72 74 43 61 6d 70 61 69 67 6e 3a 66 75 Data Ascii: i.placements)[0],n=e.gbi.placements[t];return{height:Number(n.height),width:Number(n.width)}}}},_deactivateCampaign:function(e,t){this.log(e,"deactivating campaign");var n=bouncex.campaigns[e];return C.default.deactivate_campaign(n,t)},_restartCampaign:fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.5	50648	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1502	OUT	GET /pcs/view?xai=AKAOjstS2Yhxk5cJBN8jVlsvcnL447r92VKdQ-DDqLtaYfLIDQpnsqjf7XRINEx1gLvDdjmOsYHYFiZmmXY6-DffNV60vlOO2CkSVuufPH7XDftTMcNZMsVHfiAznSpVPhRV2l2O0nE6XzJtHW2S-T1K9WcrtTKeSTfwdmI1D6WUzhvusyS_-Kl_9qaxZQ0bHON7nh6GJfipjMs76miY9ondOYLwSAZOxU9wqw3w9MEOOx_cDVb9cv4_zhuWSO4pmRV27s4nEzHPGo7CAQdFG39ktLzriX6gtSjSTAJEB2IUTruY0IxYZTBl53U5s_QwENjtJsqStCmLdk5ZW12QifhWUBPtUGdLbvb0yw7Sab5aeT8-ncBbNgudds-wAUXD72c6RzWvkvehA4c8X5McAhTdz6qz4W130g&sai=AMfl-YRO_EEqO4DqAhRgqnCm_w8NbMZvqMiPkjIXngFisFGdyXPpkJ_9E-Vi2W742fsX-gR-0esk_GkCbVQGYJK4c4AgkWlFzF7ZL87SRejJY2GHl6PFoxkzuuzegpq_UaY&sig=Cg0ArKJSzKpo4hLoTD7mEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:56 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.5	50644	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	778	OUT	GET /usync/manage?pid=3320940&wsid=0&pdom=www.justjared.com&purl=https%3A%2F%2Fwww.justjared.com%2F HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	286	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:56 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 12935 Connection: close Cache-Control: no-store p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d2628ec3c8bb8-ATL
2024-04-19 13:12:56 UTC	1083	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 65 6e 63 55 72 6c 3d 27 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6a 75 73 74 6a 61 72 65 64 2e 63 6f 6d 25 32 46 27 3b 74 72 79 20 7b 0a 76 61 72 20 70 62 6d 52 54 42 55 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 70 62 6d 52 54 42 55 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 70 62 6d 52 54 42 55 73 79 6e 63 2e 69 64 20 3d 20 22 70 62 6d 52 54 42 55 73 79 6e 63 22 3b 0a 70 62 6d 52 54 42 55 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 70 62 Data Ascii: <!doctype html><html><head></head><body><script> var encUrl='https%3A%2F%2Fwww.justjared.com%2F';try {var pbmRTBUsync = document.createElement('img');pbmRTBUsync.style.width = '1px';pbmRTBUsync.id = "pbmRTBUsync";pbmRTBUsync.style.height = '1px';pb
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 22 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 68 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 73 68 61 72 65 74 68 72 6f 75 67 Data Ascii: console.log(err.message);}try {var sharethroughImgUsersync = document.createElement('img');sharethroughImgUsersync.style.width = '1px';sharethroughImgUsersync.id = "sharethroughImgUsersync";sharethroughImgUsersync.style.height = '1px';sharethroug
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 70 78 27 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 6f 78 55 73 65 72 73 79 6e 63 22 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 6f 78 55 73 65 72 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 39 62 35 39 39 34 66 32 2d 30 33 35 64 2d 34 36 64 65 2d 38 63 31 32 2d 62 63 30 65 39 61 34 65 36 36 63 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 32 46 6f 78 2d 75 73 79 6e 63 25 33 46 75 69 64 25 33 44 22 3b Data Ascii: px';oxUsersync.id = "oxUsersync";oxUsersync.style.height = '1px';oxUsersync.style.display = 'none';oxUsersync.src = "https://u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D";
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 32 46 7a 6d 6e 2d 75 73 79 6e 63 25 33 46 75 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 22 3b 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 7a 6d 6e 49 6d 67 55 73 65 72 73 79 6e 63 29 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 74 6c 69 66 74 75 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 74 6c 69 66 74 75 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 Data Ascii: ps%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__";if (document.body) document.body.appendChild(zmnImgUsersync);} catch( err ) { console.log(err.message);}try {var tliftusync = document.createElement('img');tliftusync.style.widt
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 41 63 72 6f 73 73 49 66 72 61 6d 65 55 73 65 72 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 64 65 2e 74 79 6e 74 2e 63 6f 6d 2f 64 65 62 2f 3f 6d 3d 78 63 68 26 72 74 3d 68 74 6d 6c 26 73 69 64 3d 30 30 31 30 62 30 30 30 30 32 43 70 59 68 45 41 41 56 22 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 66 72 61 6d 65 55 73 65 72 73 79 6e 63 2e 73 61 6e 64 62 6f 78 20 3d 20 27 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 27 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 66 72 61 6d 65 55 73 65 72 73 79 6e Data Ascii: AcrossIframeUsersync.src = "https://de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV";thirtyThreeAcrossIframeUsersync.sandbox = 'allow-forms allow-scripts allow-same-origin'if (document.body) document.body.appendChild(thirtyThreeAcrossIframeUsersyn
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 71 6f 72 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 71 6f 72 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 64 6b 65 72 6e 65 6c 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 3f 7a 6f 6e 65 3d 32 30 38 39 31 32 26 74 3d 69 6d 61 67 65 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 25 32 46 64 79 6e 25 32 46 71 6f 72 61 2d 75 73 79 6e 63 25 33 46 75 69 64 25 33 44 25 37 42 55 49 44 25 37 44 22 3b 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 71 Data Ascii: eight = '1px';qorImgUsersync.style.display = 'none';qorImgUsersync.src = "https://sync.adkernel.com/user-sync?zone=208912&t=image&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fqora-usync%3Fuid%3D%7BUID%7D";if (document.body) document.body.appendChild(q
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 32 53 55 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 70 62 6d 53 32 53 55 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 70 62 6d 53 32 53 55 73 79 6e 63 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 36 30 38 30 39 26 67 64 70 72 3d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 53 50 75 67 25 33 46 70 25 33 44 36 30 38 30 39 25 32 36 70 6d 63 25 33 44 50 4d 5f 50 4d 43 25 32 36 70 72 25 33 44 68 74 74 70 73 25 32 Data Ascii: 2SUsync.style.height = '1px';pbmS2SUsync.style.display = 'none';pbmS2SUsync.src = "https://image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%2
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 2d 6f 72 69 67 69 6e 27 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 74 49 66 72 61 6d 65 55 73 65 72 73 79 6e 63 29 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 6d 6e 65 74 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 6d 6e 65 74 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 6d 6e 65 74 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 6d 6e 65 74 55 73 65 72 73 79 6e 63 22 3b 0a 6d 6e 65 74 55 73 65 72 73 Data Ascii: -origin'if (document.body) document.body.appendChild(otIframeUsersync);} catch( err ) { console.log(err.message);}try {var mnetUsersync = document.createElement('img');mnetUsersync.style.width = '1px';mnetUsersync.id = "mnetUsersync";mnetUsers
2024-04-19 13:12:56 UTC	1369	IN	Data Raw: 62 6f 64 79 29 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 6e 72 75 6c 79 55 73 65 72 73 79 6e 63 29 3b 0a 7d 20 63 61 74 63 68 28 20 65 72 72 20 29 20 7b 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 2e 6d 65 73 73 61 67 65 29 3b 0a 7d 0a 0a 74 72 79 20 7b 0a 76 61 72 20 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 71 75 61 6e 74 73 65 72 76 65 55 73 65 72 73 79 6e 63 22 3b 0a 71 75 61 6e 74 73 65 72 76 Data Ascii: body) document.body.appendChild(unrulyUsersync);} catch( err ) { console.log(err.message);}try {var quantserveUsersync = document.createElement('img');quantserveUsersync.style.width = '1px';quantserveUsersync.id = "quantserveUsersync";quantserv
2024-04-19 13:12:56 UTC	900	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 27 31 70 78 27 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 69 64 20 3d 20 22 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 22 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 20 3d 20 27 31 70 78 27 3b 0a 74 68 69 72 74 79 54 68 72 65 65 41 63 72 6f 73 73 49 6d 67 55 73 65 72 73 79 6e 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 20 27 6e 6f 6e 65 27 3b 0a 74 68 69 72 74 79 54 68 72 65 65 Data Ascii: .createElement('img');thirtyThreeAcrossImgUsersync.style.width = '1px';thirtyThreeAcrossImgUsersync.id = "thirtyThreeAcrossImgUsersync";thirtyThreeAcrossImgUsersync.style.height = '1px';thirtyThreeAcrossImgUsersync.style.display = 'none';thirtyThree

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.5	50649	3.161.193.77	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	689	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LV6OX7LS-1U-G1TB HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	675	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 19 Apr 2024 13:12:56 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sun, 19 Apr 2026 13:12:56 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 ecc45566326108f132b952c9faf74048.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fGBLEdyGAN327Yrmmx-G66fZEcyCF4Hqd-9UbWrsnqwoL9_aIYRrgg==
2024-04-19 13:12:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.5	50660	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1316	OUT	GET /pcs/view?xai=AKAOjstCDx_DtUONDKdU51r6EHEpLCscXEESTFkrwGhEoXiN-Q9vzsKrPQLFHx1y25eaLTPF8b8WInVqXrB03Tl-O-DqBP2zTIMs-OK44nBdVVrIUynnVm7jbgD5GmDSJWcww2BIhnBtlQ9CeL319ABL8ark1a4JQ-2OPeBs98geOvF9U3Qy1s9Nhql4q0IX23X_8lZ3a4s6sphHMJMbCbpBAlCNPk3HU_sc_TwkIIEJEB5A_L6cZ0pf5P1VWyvEuhfY4lBM5AzdWKv71rFLUrt6-9LM275k-pSgM8Np1OsL0GbQJn0NmUZ-ZHm1iRAtj3o4juK4Pd7FppFKqPVb7ixjlm3G5R4K5kP3E7EG1hoNdMCAo-PKE9k0V7Ok7v64QigvU9m2r-TfHGp59FX4cA&sai=AMfl-YTiTxLCidzr_-bOzhaEZScU66A6w37V4MsUJ2u2JQEcRRZondvroLmUrq-msZC8fEs8UsNRncVCDJVyDafv84R7WlPz2BcqcSe_XqcyJ1m7jyoRR3sVnPhkiXOSxjA&sig=Cg0ArKJSzIa0nCSVthIGEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:56 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:56 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.5	50657	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	902	OUT	GET /getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:56 UTC	677	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:56 GMT Content-Length: 0 Connection: close Location: https://ssc-cms.33across.com/ps/?us_privacy=&xi=33&xu=3059573620546902553906 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:56 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:56 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.5	50651	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	617	OUT	GET /usync/lcmanage?pid=3320940&wsid=0&pdom=www.justjared.com&purl=https%3A%2F%2Fwww.justjared.com%2F HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	302	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:56 GMT Content-Type: application/javascript;charset=ISO-8859-1 Content-Length: 283 Connection: close Cache-Control: no-store p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d262abbc44581-ATL
2024-04-19 13:12:56 UTC	283	IN	Data Raw: 74 72 79 7b 76 61 72 20 69 71 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 71 73 63 72 69 70 74 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 75 73 79 6e 63 2f 69 71 75 73 79 6e 63 2d 31 2e 32 39 2e 6d 69 6e 2e 6a 73 22 3b 69 71 73 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 66 62 69 70 22 2c 22 31 33 37 30 38 33 31 31 35 36 22 29 3b 69 71 73 63 72 69 70 74 2e 61 73 79 6e 63 20 3d 20 21 30 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 71 73 63 72 69 70 74 29 7d 63 61 74 63 68 Data Ascii: try{var iqscript=document.createElement("script");iqscript.src="https://resources.infolinks.com/static/usync/iqusync-1.29.min.js";iqscript.setAttribute("data-ifbip","1370831156");iqscript.async = !0;document.body&&document.body.appendChild(iqscript)}catch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.5	50655	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	716	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	230	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:56 GMT Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.5	50652	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	650	OUT	GET /gsd?evt=afterGSD&pid=3320940&pdom=www.justjared.com&purl=https%3A%2F%2Fwww.justjared.com%2F&jsv=1928.005-3.034&_cb=17135323743620 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	496	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:56 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 328 Connection: close pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: max-age=0 p3p: CP="NON DSP NID OUR COR" set-cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; Domain=infolinks.com; Expires=Sun, 19-Apr-2026 13:12:56 GMT; Path=/; SameSite=None; Secure via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d262ace774505-ATL
2024-04-19 13:12:56 UTC	328	IN	Data Raw: 77 69 6e 64 6f 77 2e 24 69 63 65 2e 65 76 65 6e 74 2e 66 69 72 65 28 27 61 66 74 65 72 47 53 44 27 2c 7b 72 69 64 3a 27 64 39 39 39 62 65 32 61 2d 34 31 34 34 2d 34 62 61 34 2d 38 64 36 61 2d 34 32 34 38 64 62 64 61 35 34 31 64 27 2c 72 73 3a 27 72 74 33 30 34 37 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 27 2c 6d 61 6b 65 79 3a 27 34 63 34 35 35 61 34 35 34 63 34 35 35 61 34 31 34 33 35 61 34 31 34 36 35 62 34 35 34 33 34 35 34 37 34 31 34 37 34 36 34 64 34 33 34 32 34 63 34 33 34 31 35 62 36 39 37 35 37 36 37 30 27 2c 6d 73 3a 27 34 30 30 31 27 2c 70 72 73 3a 27 73 2c 6f 2c 70 2c 64 2c 78 2c 6b 27 2c 66 62 63 3a 74 72 75 65 2c 63 6b 73 3a 7b 63 75 69 64 3a 27 62 31 35 62 61 33 36 61 2d 64 30 30 31 2d 34 33 65 33 2d 61 39 61 37 2d 31 62 64 36 35 38 30 31 Data Ascii: window.$ice.event.fire('afterGSD',{rid:'d999be2a-4144-4ba4-8d6a-4248dbda541d',rs:'rt3047.infolinks.com',makey:'4c455a454c455a41435a41465b454345474147464d43424c43415b69757670',ms:'4001',prs:'s,o,p,d,x,k',fbc:true,cks:{cuid:'b15ba36a-d001-43e3-a9a7-1bd65801

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.5	50656	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1195	OUT	GET /ps/?us_privacy=&ts=1713532372908.1&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dg%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:56 UTC	727	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:56 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP001 location: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.5	50658	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1009	OUT	GET /ps/?us_privacy=&ts=1713532372889.5&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dg%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:56 UTC	677	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:56 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP002 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Fri, 19 Apr 2024 13:12:55 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.5	50659	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1009	OUT	GET /ps/?us_privacy=&ts=1713532372908.5&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dg%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:56 UTC	677	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:56 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP007 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.5	50530	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	754	OUT	GET /idsync/ex/push?partner_id=2922&partner_url=https%3A%2F%2Fid5-sync.com%2Fc%2F441%2F108%2F7%2F3.gif%3Fpuid%3D%24%7BTA_DEVICE_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 13:12:56 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:56 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.5	50663	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	772	OUT	GET /ads/measurement/l?ebcid=ALh7CaSO9X-nl9Yc0wb5wGPxHZ6pVhUpYDwcNf1fuK3PHaUNLS0VjsSOlOpIpdXFlEYRglCs5Vyl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:56 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.5	50665	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1316	OUT	GET /pcs/view?xai=AKAOjsuoGe2Y-zau-phbKeMvrvA7lfbpAHt8EkMmctYwdre0-JNDYAosMDKrC3-2A9Ms_BF5IO2TcguKDIGKye1CO3NGWKNwwTv-j6ZMWCw_4AQZcbKBNc2pqWY4D5MtQOEXOWZolr0rkPeqVtZFP4G8-EPkk0qp4ZZ4cs4p32FJcGQJng-__wDiVjT1a4mTVA151Hjf9wG5lc7xsFj2SfrB3eT5f9qoz2QfHTtbEzB8J7zs2qpnqa7Bp5DKuDZfuaIqn5q2MnWv-YLGQl5dPV4379JWcBdtGMdaqIZiuJs8yY7UeTYVwKbGJCq_vvUb7xr-No0ndcNb85RleD5Wk7w1JH5rj1UoJ_WBMdIu74n26XaCUkU9US8T5eCvO7iMZqiTOoj2I9Cdl5WOFAQm3A&sai=AMfl-YSQvtrVmvklp7LHLl7dOzdzhQQWW3hOmbUgMqYmuBimVuLnuBtIPQWPi5Q3bgnk1HFjVbXShujsQR7lsGIrCZK1NZaUq-NpJ2xFydUclIjuf5GHirghCnS0edWb-CM&sig=Cg0ArKJSzAEJiaMn_aRfEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:57 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:56 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.5	50666	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	772	OUT	GET /ads/measurement/l?ebcid=ALh7CaTxkybff5ScFOgxsfYgpuQisqIViRWb6hp-Xj2RkvZB-oAV_8KbI4iLhGkZ7MiJRVQyl0Zp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:56 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:56 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.5	50341	52.5.14.134	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	738	OUT	GET /ping_match.gif?scc=1&ei=CASALE&rurl=https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=_wfivefivec_&gdpr=0 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=SrCpyrdV1RXO2T5
2024-04-19 13:12:56 UTC	716	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 19 Apr 2024 13:12:56 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=47&external_user_id=SrCpyrdV1RXO2T5&gdpr=0 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-04b092fca740533b7@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=SrCpyrdV1RXO2T5; Domain=.w55c.net; Expires=Mon, 19 May 2025 13:12:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchcasale=5; Domain=.w55c.net; Expires=Sun, 19 May 2024 13:12:56 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.5	50654	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	802	OUT	GET /sync?ssp=the33across&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:56 UTC	280	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:56 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cms.quantserve.com/pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=the33across&gdpr=&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.5	50671	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	835	OUT	GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:57 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 876d262d28b26748-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:57 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PoTZCJX2rvm6WohHdGdIwhVhE0DtzCtcWHqIL8HyEX7yZANUhq7DSOKMOwTHiLr%2B4UjEOW6udoDcsj4VxnD%2FxZj4Un4miznGKHV9d9jiTkIDLN4nT7HPwryV7LKN6BfVSoGEJc3MaiQHLA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:57 UTC	379	IN	Data Raw: 37 36 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 70 69 78 65 6c 2f 70 2d 5a 38 50 75 4a 45 6b 36 55 37 48 79 71 2e 67 69 66 3f 69 64 6d 61 74 63 68 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 31 30 32 35 Data Ascii: 766<html><head><title></title></head><body><img src="https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025
2024-04-19 13:12:57 UTC	1369	IN	Data Raw: 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 73 61 6c 65 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 39 39 39 38 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 75 70 69 2f 70 69 64 Data Ascii: ay:none" width="0" height="0" alt="" border="0" /><img src="https://casale-match.dotomi.com/match/bounce/current?networkId=19998&version=1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://sync-tm.everesttech.net/upi/pid
2024-04-19 13:12:57 UTC	153	IN	Data Raw: 73 3a 2f 2f 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 64 79 6e 2f 69 78 2d 75 73 79 6e 63 3f 75 69 64 3d 5a 69 4a 74 79 73 41 6f 49 70 30 41 41 43 54 7a 41 73 42 65 4f 41 41 41 25 32 36 32 35 38 34 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: s://router.infolinks.com/dyn/ix-usync?uid=ZiJtysAoIp0AACTzAsBeOAAA%262584" style="display:none" width="0" height="0" alt="" border="0" /></body></html>
2024-04-19 13:12:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.5	50677	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	776	OUT	GET /w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usync%3Fuid%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; pd=v2\|1713532373\|vMgavPkWgyiK
2024-04-19 13:12:57 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.5	50670	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	1679	OUT	GET /deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV HTTP/1.1 Host: de.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=Vz/bJWYibdPMu3ZvZk8k2Q==; pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22029cc11ae7%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%226f27415d53%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%227912d88d74%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%2222833ea406%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%22f5b8438f72%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%5D
2024-04-19 13:12:57 UTC	1945	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22f46c881bee%22%2C%22f%22%3A1%2C%22ts%22%3A1713532377157%7D%2C%7B%22p%22%3A%22632381c622%22%2C%22f%22%3A1%2C%22ts%22%3A1713532377157%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%226f27415d53%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%227912d88d74%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%22f5b8438f72%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%22baebe6454b%22%2C%22f%22%3A1%2C%22ts%22%3A1713532377157%7D%2C%7B%22p%22%3A%22029cc11ae7%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%220f90caf3cf%22%2C%22f%22%3A1%2C%22ts%22%3A1713532377157%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%2295c591d034%22%2C%22f%22%3A1%2C%22ts%22%3A1713532377157%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%2222833ea406%22%2C%22f%22%3A1%2C%22ts%22%3A1713532375745%7D%2C%7B%22p%22%3A%225cb91279ed%22%2C%22f%22%3A1%2C%22ts%22%3A1713532377157%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1713532372908%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1529 date: Fri, 19 Apr 2024 13:12:57 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-04-19 13:12:57 UTC	1529	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 64 2e 74 75 72 6e 2e 63 6f 6d 2f 72 2f 64 64 2f 69 64 2f 4c 32 4e 7a 61 57 51 76 4d 53 39 6a 61 57 51 76 4d 54 63 31 4d 44 49 32 4e 7a 55 34 4d 69 39 30 4c 7a 49 2f 75 72 6c 2f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 25 32 46 70 73 25 32 46 25 33 46 78 69 25 33 44 34 34 25 32 36 74 73 25 33 44 31 37 31 33 35 33 32 33 37 37 31 35 37 2e 31 25 32 36 75 73 5f 70 72 69 76 61 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc1MDI2NzU4Mi90LzI/url/https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D44%26ts%3D1713532377157.1%26us_priva

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.5	50673	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	804	OUT	GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:56 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.5	50675	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:56 UTC	675	OUT	GET /universal/v1?supply_id=k0cy4N0g HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd
2024-04-19 13:12:57 UTC	368	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Length: 0 Connection: close Location: https://router.infolinks.com/dyn/sthr-us?user_id=7456771a-49ee-4e2a-b013-668de61e15dd Set-Cookie: stx_user_id=7456771a-49ee-4e2a-b013-668de61e15dd; Max-Age=2592000; Expires=Sun, 19 May 2024 13:12:57 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.5	50676	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	664	OUT	GET /api/sync?callerId=112&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=1845939505169848484
2024-04-19 13:12:57 UTC	197	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 19 Apr 2024 13:12:57 GMT location: https://router.infolinks.com/dyn/eqv-us?user_id=1845939505169848484&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.5	50685	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	747	OUT	GET /crum?cm_dsp_id=18&expiration=1729343571&external_user_id=ddb37c3d-7862-43a9-8061-ddaca97c3bfa HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:57 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d262d7bfbb0e7-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:57 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r6eAm1%2BBFJACnDMdLldDTUfKDO34QHwOT6cd%2BJ936KnUdr4zH8043lcVrTpUpiiAXtUs45QLhYJdrNjlMNiyzuprJrqyL5YaEA%2BpsxzWdqxuJEXc08LLrfqlSQqbYj%2Bs7Qs%2Bv98ODbphEg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.5	50678	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	612	OUT	GET /ups/58786/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	230	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:57 GMT Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.5	50687	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	765	OUT	GET /pixel?gdpr=0&google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZiJtysAoIp0AACTzAsBeOAAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:57 UTC	686	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEMb0jRzCLadNKj4MBxK3qsk&google_cver=1&gdpr=0 Date: Fri, 19 Apr 2024 13:12:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:57 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 4d 62 30 6a 52 7a 43 4c 61 64 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEMb0jRzCLad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.5	50681	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	753	OUT	GET /getuid?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Ftplift%3Fuid%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:57 UTC	667	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Length: 0 Connection: close Location: https://router.infolinks.com/dyn/tplift?uid=3059573620546902553906 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.5	50690	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	768	OUT	GET /dmp/pixelSync?nid=48&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=43832ec9-23ab-4e6d-8de1-1752b7609838#1713532369099; _ssuma=eyI0OCI6MTcxMzUzMjM3MzQ5OSwiMzkiOjE3MTM1MzIzNzM0OTksIjciOjE3MTM1MzIzNzM0OTl9
2024-04-19 13:12:57 UTC	871	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=43832ec9-23ab-4e6d-8de1-1752b7609838#1713532369099; Domain=.sitescout.com; Expires=Sat, 19-Apr-2025 13:12:57 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIyNCI6MTcxMzUzMjM3NzE3MywiNDgiOjE3MTM1MzIzNzM0OTksIjM5IjoxNzEzNTMyMzczNDk5LCI3IjoxNzEzNTMyMzczNDk5fQ; Domain=.sitescout.com; Expires=Sun, 19-May-2024 13:12:57 GMT; Path=/; Secure; SameSite=None location: https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.5	50674	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1153	OUT	GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313; anj=dTM7k!M4.FEVNsVF']wIg2GTtvwG:3!]tbP6j2F-.o%/6/guKFUZ.<L?TM@lZ:If$VV(Ig3NvFY4bZT-ilWt'gYo<Xit%W[^5(M$f@se#e+.<Q!8FetoX$<a; uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDctMThUMTM6MTI6NTJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMTlUMTM6MTI6NTJaIn0=
2024-04-19 13:12:57 UTC	1433	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://router.infolinks.com/dyn/apn-usync?user_id=187107314970053313 AN-X-Request-Uuid: 7ee0e8c4-17ec-416b-a0a4-9767b36a88d1 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:57 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.5	50672	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	709	OUT	GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	166	IN	HTTP/1.1 204 No Content cache-control: no-store strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.5	50696	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1254	OUT	GET /ps/?us_privacy=&ts=1713532375745.5&ri=70&ru=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fcm%3Fid%3Dc6a5ba0d-ce02-41bd-a1ea-842c68bd5108%26ph%3D8f5ed5d4-642c-4222-968a-d709c87ac3c8%26us_privacy%3D%24%7BUS_PRIVACY%7D%26r%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D70%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:57 UTC	769	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:57 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP012 location: https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D70%26external_user_id%3D content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.5	50691	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1313	OUT	GET /sync?nid=68&gdpr=0 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCDO24mxBjABOgT87-jmQgSwjqr5.X83Pz6A4AQmZe%2Fn1cl2kjy3N4EXgCO2Lj%2FiLAeOuFY0
2024-04-19 13:12:57 UTC	246	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 13:12:57 GMT Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ Content-Length: 122 Connection: Close
2024-04-19 13:12:57 UTC	122	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 32 33 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 56 30 73 67 67 2d 5a 45 56 61 39 4f 75 4a 55 32 41 4f 49 65 56 56 47 31 4f 54 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.5	50683	34.232.139.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	678	OUT	GET /sync/casale/ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB?gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 13:12:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.5	50694	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	702	OUT	GET /ecm3?gdpr=0&ex=index.com&id=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:57 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: HB177Z7R4D8H2SEF4J3Q Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.5	50689	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	711	OUT	GET /ups/55940/sync?_origin=1&redir2=true&uid=ZiJtysAoIp0AACTzAsBeOAAAChgAAAAB&gdpr_consent=&us_privacy=&gdpr=0&gpp=&gpp_sid= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	230	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:57 GMT Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.5	50688	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	684	OUT	GET /cookie-sync/ie?gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAEPf07MRNwAABWcWeK7WQ; bitoIsSecure=ok; checkForPermission=ok
2024-04-19 13:12:57 UTC	441	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:57 GMT location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=130&external_user_id=AAEPf07MRNwAABWcWeK7WQ&expiration=1714741977&gdpr=0 Server: gunicorn set-cookie: bito=AAEPf07MRNwAABWcWeK7WQ; Domain=bidr.io; expires=Mon, 19 May 2025 09:12:57 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.5	50695	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	953	OUT	GET /ps/?_=1713532375745.&ri=0010b00002MptHCAAZ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:57 UTC	605	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:57 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP009 location: https://s.seedtag.com/cs/cookiesync/33across?channeluid=212568969054924 content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.5	50684	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1169	OUT	GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID&gdpr=0 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313; anj=dTM7k!M4.FEVNsVF']wIg2GTtvwG:3!]tbP6j2F-.o%/6/guKFUZ.<L?TM@lZ:If$VV(Ig3NvFY4bZT-ilWt'gYo<Xit%W[^5(M$f@se#e+.<Q!8FetoX$<a; uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDctMThUMTM6MTI6NTJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMTlUMTM6MTI6NTJaIn0=
2024-04-19 13:12:57 UTC	1457	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=187107314970053313&gdpr=0 AN-X-Request-Uuid: b6eb5318-81ff-4415-bc89-0a2d9b127317 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:57 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.5	50697	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	970	OUT	GET /bh/rtset?pid=561516&ev=1&us_privacy=&rurl=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fxi%3D5%26xu%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VP=part_d3pYBt4hoB3q; INGRESSCOOKIE=b98004473a01b4c2; pb_rtb_ev_part=3-1qw8\|7bq.0.1\|7LJ.0.8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb\|8i8.0.1\|7dW.0.1
2024-04-19 13:12:57 UTC	1260	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-pdcph Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: VP=part_d3pYBt4hoB3q;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 14-Apr-2025 13:12:57 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev_part=3-1qw8\|7bq.0.1\|80p.0.1\|7LJ.0.8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb\|8i8.0.1\|7dW.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 19-Apr-2025 13:12:57 GMT;SameSite=None;Partitioned Set-Cookie: VP=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:57 GMT;Max-Age=0;SameSite=None Set-Cookie: pb_rtb_ev_part=;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 19-Apr-2024 13:12:57 GMT;Max-Age=0;SameSite=None Location: https://ssc-cms.33across.com/ps/?xi=5&xu=part_d3pYBt4hoB3q&ev=1&us_privacy=&pid=561516 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.5	50705	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	989	OUT	GET /sid/json?origin=publishertagids&domain=justjared.com&sn=ChromeSyncframe&so=3&topUrl=www.justjared.com&bundle=r2dEhF82MGEweVgzWll2Z1YlMkJlc3FvY3lzVDcwTFNCNTQlMkJNNkw1T09pckVYUlhWaUNyUUdpeWJhNWYwRENqZElOUiUyRjdTMjZ3cXQ5WGxrTFdWVzZ3MFdvJTJCSEEzYW11ejZOWnBXcXBuY1ZVdVFlNkVlT2VGS1V0cXpyd3locndRT2NrQWdT&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=www.justjared.com&gdpr=0&gdpr_consent=&us_privacy=1YNN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff
2024-04-19 13:12:57 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Fri, 19 Apr 2024 13:12:56 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 1525995 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:57 UTC	458	IN	Data Raw: 31 42 45 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 49 54 6e 34 4a 56 38 32 4d 47 45 77 65 56 67 7a 57 6c 6c 32 5a 31 59 6c 4d 6b 4a 6c 63 33 46 76 59 33 6c 7a 56 44 46 72 62 33 4e 42 55 6a 49 7a 64 56 42 35 53 33 4e 42 52 32 4e 48 65 56 70 56 5a 6c 6c 6b 4e 33 70 70 63 58 64 76 62 32 6f 7a 4f 58 42 43 56 6e 6c 7a 54 32 74 49 54 57 6c 42 61 48 46 43 61 56 6b 33 51 33 42 33 4e 55 46 74 64 48 6c 4f 61 45 64 61 63 57 56 79 52 46 68 33 63 55 70 52 64 57 4e 44 55 32 68 6d 4f 48 56 78 51 58 6b 30 61 33 52 78 52 7a 51 77 61 56 42 4d 4e 7a 64 72 56 32 74 79 51 79 55 79 51 6d 68 61 61 47 31 55 64 45 5a 34 4d 48 46 79 55 58 4e 45 63 6b 56 5a 55 47 46 6c 5a 7a 5a 4c 65 55 68 5a 63 54 Data Ascii: 1BE{"sid":null,"removeSid":false,"bundle":"ITn4JV82MGEweVgzWll2Z1YlMkJlc3FvY3lzVDFrb3NBUjIzdVB5S3NBR2NHeVpVZllkN3ppcXdvb2ozOXBCVnlzT2tITWlBaHFCaVk3Q3B3NUFtdHlOaEdacWVyRFh3cUpRdWNDU2hmOHVxQXk0a3RxRzQwaVBMNzdrV2tyQyUyQmhaaG1UdEZ4MHFyUXNEckVZUGFlZzZLeUhZcT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.5	50706	54.88.142.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	672	OUT	GET /i/ck/infolink?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fiqm-us%3Fuid%3D%7BIQM_COOKIE%7D%20 HTTP/1.1 Host: pxl.iqm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	755	IN	HTTP/1.1 302 Found Server: openresty Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/avif;charset=UTF-8 Content-Length: 81 Connection: close Set-Cookie: infolink=MTcxNDc0MTk3NzI3MA==; Domain=.pxl.iqm.com; Path=/; max-age=2592000; SameSite=None; Secure; Set-Cookie: iqm.retarget.uid=8597407f-382f-4152-97fa-68cf7fa48a6d; Domain=.pxl.iqm.com; Path=/; max-age=2592000; SameSite=None; Secure; Location: https://router.infolinks.com/dyn/iqm-us?uid=8597407f-382f-4152-97fa-68cf7fa48a6d Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-19 13:12:57 UTC	81	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 64 79 6e 2f 69 71 6d 2d 75 73 3f 75 69 64 3d 38 35 39 37 34 30 37 66 2d 33 38 32 66 2d 34 31 35 32 2d 39 37 66 61 2d 36 38 63 66 37 66 61 34 38 61 36 64 20 Data Ascii: https://router.infolinks.com/dyn/iqm-us?uid=8597407f-382f-4152-97fa-68cf7fa48a6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.5	50679	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	737	OUT	GET /usersync2/infolinks HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222069.80%22%2C%22nxtrdr%22%3Afalse%7D
2024-04-19 13:12:57 UTC	642	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:56 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dd40f750-a014-4531-a2f1-8878dd503e55-005%22%2C%22zdxidn%22%3A%222109%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 19 Apr 2025 13:12:56 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=6154575079 etag: RXdd40f750a0144531a2f18878dd503e55005 connection: close
2024-04-19 13:12:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.5	50680	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	709	OUT	GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ew75cZqQhtpEcO-Pru61
2024-04-19 13:12:57 UTC	588	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 90 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://router.infolinks.com/dyn/zmn-usync?uid=Ew75cZqQhtpEcO-Pru61 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ew75cZqQhtpEcO-Pru61; Path=/; Domain=zemanta.com; Expires=Sat, 19 Apr 2025 13:12:57 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 19 Apr 2024 13:12:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 13:12:57 UTC	90	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 6f 75 74 65 72 2e 69 6e 66 6f 6c 69 6e 6b 73 2e 63 6f 6d 2f 64 79 6e 2f 7a 6d 6e 2d 75 73 79 6e 63 3f 75 69 64 3d 45 77 37 35 63 5a 71 51 68 74 70 45 63 4f 2d 50 72 75 36 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://router.infolinks.com/dyn/zmn-usync?uid=Ew75cZqQhtpEcO-Pru61">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.5	50709	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	711	OUT	GET /crum?cm_dsp_id=47&external_user_id=SrCpyrdV1RXO2T5&gdpr=0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:57 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d262e5fe4b0af-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:57 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xJUNclOqBqozixbY2QKK2W5xJFOlEBXEbE1qu25AWnLKd%2FkRxkWzFRQpWzFElqKtujTDkQpswAUVIvmfXuItit0wWi5vuTZqu9eyCJP15SqkfBym7DW6hNtJoNSuW6%2BFBSHZ7bjFNepKmw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.5	50693	216.200.232.249	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	790	OUT	GET /sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D3%26external_user_id%3D%5BMM_UUID%5D&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=58876622-6dd1-4d00-bd2b-ad74dd749760
2024-04-19 13:12:57 UTC	519	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x8 config_version:"2517" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=3&external_user_id=58876622-6dd1-4d00-bd2b-ad74dd749760&gdpr=0&gdpr_consent= Expires: Fri, 19 Apr 2024 13:12:56 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.5	50710	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	902	OUT	GET /getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=3059573620546902553906; tluidp=3059573620546902553906
2024-04-19 13:12:57 UTC	677	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Length: 0 Connection: close Location: https://ssc-cms.33across.com/ps/?us_privacy=&xi=33&xu=3059573620546902553906 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3059573620546902553906; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3059573620546902553906; Max-Age=7776000; Expires=Thu, 18 Jul 2024 13:12:57 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.5	50698	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	754	OUT	GET /track/cmf/generic?ttd_pid=f0v35ew&ttd_tpi=1&us_privacy= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:57 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.5	50711	74.119.117.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	2414	OUT	GET /delivery/r/afr.php?z=ZiJt1wADKQUDihYeAAH4gUQ0BldrvpnnQt6NEQ&u=%7C0mn%2BJyOlAeei%2F7LXkfWDtZNRGBAfQjspV%2BxzGLyskh0%3D%7C&c1=jWCgqsKSUoXC60NcOL-y1fMy5lnEQC-emXTZYJoBCoL4aT06iT7RqKm1slCvpf7kti9G_6O_UP5p12Z73twtJHwJHoh6Za-1SWIuyjnMa7oT0qNfGkgZ83AQipjktRKLHt0m-GdgI5nqczNmE8bjWEsTOJ1uOHZorOe-kHaKYwbgiS6-yBNciVOGyqjKQGu0ZeZBbziUEekgFLQcG31jwdyfP--585CwK8tIKOdvtPmJ0kO2jpeBbSbLvZL1_RYpcZmDXXaGlu810VaDj4xzpJXLqyankCZ5FwX7lVs39_1EXY48JFdR_ztWm00U1cqhS3UyH2o_UINSoz7UmB_Nm3fyXAg0cJXA-XNNDRvRQTJHIKbQ1jKZK0cRu4ydgyZFcICtKAxdebqufv4SmGoTwvcZqNFyllPUj5xCxSbS8Tc-DdUcIU-bH_UA7H5Ddz5ztoMw644F9FxEhFTl8Tz773ZbBX1lgWRgCaOsMo7LP-6E9e3r1wMyPI_pGyb_I1pWUGJMzYswCmxY2Iok7MATu0Yscd6DbKYDdf6Pgm1QZkd7QLWtXciZJ0kLZLanKiGWccgrOEkDk3gYGUf7QhKotABBWn8LCTX2mk6yesMjrYlAAm_P02L25mPXUgmlLbcyNQgPlytJEDB2sE-uyrZSOw&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCw6l9120iZoXSDJ6sqMwPgfGHwAycge-wXKLKp6p0wI23ARABIABgyQaCARdjYS1wdWItMjY5NzY3OTUxODUxNTg4NsgBCeACAKgDAcgDAqoEqwJP0BoA-WBtNwrPzv1WiWmeslfatVFSCscS5LcFTzK3qiHSqIfu4NZqI_s7Pw9H7gzm65Lx5rXwMqYcCZb4s0Jph7HhESxHiRocuxxzxmMgiTeljz12qVX5WlwK_rnJQX-5NPkJpvjtLRQ5W_jaQGns0qK9za0_TRt_2SsmIL0lgKaKQlxSyfDiJCNEzpoU-jwibJUtr1GJ85LSV4FngqpGzcjA-PyJFjgEfSMe8ArzN9Sd6F_a9lGmJg0REOAvIW2FkrjG2xJx2Qb_OIFlDIBHY7uAJCz_bbS4FpVdNt-rncUixzFxnGRbUrKfAJrFNDN3GsaQLqDCzie5Gn7mZBqrwVZvV22atZerkfBoBx-fJt7CZGZnYtR9Vu2Rl0i0O_qOapxkjAh5BSKdFuAEAYAG4vDtld3JgpIFoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiA4YBgEAEyAssCOgmAQIDAgICAoChIvf3BOlilhKPErc6FA_oLAggBgAwB4g0TCOqqo8StzoUDFR4WigMdgfgByNAVAYAXAQ%26num%3D1%26sig%3DAOD64_2BP31eMlfO2EW0KcOKvKAoQseqxw%26client%3Dca-pub-2697679518515886%26adurl%3D HTTP/1.1 Host: ads.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://8183519846118c3ad02c79d383614f63.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff
2024-04-19 13:12:57 UTC	1129	IN	HTTP/1.1 200 OK content-type: text/html date: Fri, 19 Apr 2024 13:12:57 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-max-age: 1000 cache-control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT pragma: no-cache transfer-encoding: chunked cross-origin-resource-policy: cross-origin p3p: CP='CUR ADM OUR NOR STA NID' report-to: {"endpoints":[{"url":"https://csm.us.criteo.net/heavyad?cppv=3&cpp=2DOeSDRkmqKW0zTgy3qXG2ItKMOnfZt5VmzQwj9lpjPcm3F3iTBihPA7aAU4m-1WJD0kOykEnWUhiPJeIIRYmBcw7SGrqfSEgA4VTlDTZ_Tha-YbkRTfev37-tV36X-slLTcja0NrgdbejORgdpx-bPggzGDdGzO9K0Je4gMgPIXB1KZm3Ad1ccl5KFXWDxWKJXcd3QCwLPwG3l7i_n0KEsoKYLnzTN0M2iSOQjYdJ8ABrrrTIhYjk1dsYr7G0Q8KUSSfg"}], "max_age": 86400} link: <pix.us.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin server-processing-duration-in-ticks: 44784499 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:57 UTC	15255	IN	Data Raw: 37 42 33 45 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c Data Ascii: 7B3E<!DOCTYPE html><html><head><title>Advertisement</title><meta charset="utf-8"><meta name="format-detection" content="telephone=no"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,
2024-04-19 13:12:57 UTC	16303	IN	Data Raw: 69 67 68 74 3a 32 30 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6d 20 3e 20 2a 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 6e 7b 77 69 64 74 68 3a 31 35 39 70 78 3b 68 65 69 67 68 74 3a 32 30 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6e 20 3e 20 2a 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 6f 7b 77 69 64 74 68 3a 31 35 39 70 78 3b 68 65 69 67 68 74 3a 32 30 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6f 20 3e 20 2a 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 70 7b 77 69 64 74 68 3a 31 35 39 70 78 3b 68 65 69 67 68 74 3a 32 30 39 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d Data Ascii: ight:209px;text-align:center}.m > {vertical-align:middle}.n{width:159px;height:209px;text-align:center}.n > {vertical-align:middle}.o{width:159px;height:209px;text-align:center}.o > *{vertical-align:middle}.p{width:159px;height:209px;white-space:nowrap}
2024-04-19 13:12:57 UTC	16384	IN	Data Raw: 38 33 42 30 0d 0a 2c 74 29 7b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 74 72 69 67 67 65 72 65 64 26 26 74 2e 74 72 69 67 67 65 72 65 64 4f 6e 63 65 3f 6e 28 74 2e 73 74 6f 72 65 64 44 61 74 61 29 3a 74 2e 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 6e 29 7d 3b 74 68 69 73 2e 74 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 2e 74 72 69 67 67 65 72 65 64 4f 6e 63 65 29 7b 69 66 28 74 2e 74 72 69 67 67 65 72 65 64 29 72 65 74 75 72 6e 3b 74 2e 74 72 69 67 67 65 72 65 64 3d 21 30 3b 74 2e 73 74 6f 72 65 64 44 61 74 61 Data Ascii: 83B0,t){t.__esModule=!0;var r=function(){function n(n){var t=this;this.subscribe=function(n){t.triggered&&t.triggeredOnce?n(t.storedData):t.listeners.push(n)};this.trigger=function(n){if(t.triggeredOnce){if(t.triggered)return;t.triggered=!0;t.storedData
2024-04-19 13:12:57 UTC	16384	IN	Data Raw: 65 6e 74 29 7c 7c 28 72 2e 69 73 4f 76 65 72 3d 21 31 2c 72 2e 63 61 6c 6c 62 61 63 6b 28 21 31 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 29 7b 6e 2e 69 73 4f 76 65 72 3d 21 30 3b 6e 2e 63 61 6c 6c 62 61 63 6b 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 69 2c 72 2c 75 29 7b 75 3f 64 28 72 29 3a 6b 28 74 7c 7c 6e 2e 65 76 65 6e 74 2c 69 2c 72 29 7d 76 61 72 20 73 3b 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 61 3d 21 21 75 2e 67 6c 6f 62 61 6c 2e 69 2c 76 3d 21 21 75 2e 67 6c 6f 62 61 6c 2e 68 2c 79 3d 21 21 75 2e 67 6c 6f 62 61 6c 2e 6b 2c 70 3d 21 21 75 2e 67 6c 6f 62 61 6c 2e 61 66 2c 68 3d 79 3f 21 31 3a 7b 63 61 70 74 75 72 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 2c 63 3d 5b 5d 2c 77 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ent)\|\|(r.isOver=!1,r.callback(!1)))}function d(n){n.isOver=!0;n.callback(!0)}function l(t,i,r,u){u?d(r):k(t\|\|n.event,i,r)}var s;r.__esModule=!0;var a=!!u.global.i,v=!!u.global.h,y=!!u.global.k,p=!!u.global.af,h=y?!1:{capture:!1,passive:!0},c=[],w=function
2024-04-19 13:12:57 UTC	952	IN	Data Raw: 74 65 72 6e 61 6c 28 6e 2c 65 3f 30 3a 74 2e 64 75 72 61 74 69 6f 6e 53 65 63 6f 6e 64 73 2c 74 2e 64 65 6c 61 79 53 65 63 6f 6e 64 73 2c 68 2c 6f 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 46 6f 72 45 61 63 68 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 2c 66 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 73 43 6f 6d 70 6f 6e 65 6e 74 73 5b 6e 5d 5b 74 5d 5b 69 5d 2c 65 2c 6f 3b 73 26 26 28 65 3d 73 5b 72 5d 2c 6f 3d 74 68 69 73 2e 61 6e 69 6d 65 6a 73 45 66 66 65 63 74 73 5b 74 5d 2c 65 26 26 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 2e 65 66 66 65 63 74 73 29 7b 76 61 72 20 74 3d 65 3b 69 66 28 65 2e 63 68 Data Ascii: ternal(n,e?0:t.durationSeconds,t.delaySeconds,h,o)})},t.prototype.applyForEachEffect=function(n,t,i,r,f){var s=this.animationsComponents[n][t][i],e,o;s&&(e=s[r],o=this.animejsEffects[t],e&&o&&o.length>0&&o.forEach(function(n){if(n.effects){var t=e;if(e.ch
2024-04-19 13:12:57 UTC	16384	IN	Data Raw: 38 33 41 38 0d 0a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 66 2e 69 6e 64 65 78 4f 66 28 69 29 21 3d 3d 2d 31 3f 72 2e 70 75 73 68 28 69 2b 22 28 22 2b 74 5b 69 5d 2b 22 29 22 29 3a 73 2e 69 6e 64 65 78 4f 66 28 69 29 21 3d 3d 2d 31 3f 75 5b 69 5d 3d 74 5b 69 5d 3a 6e 2e 73 74 79 6c 65 5b 69 5d 3d 74 5b 69 5d 29 3b 72 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 72 2e 6a 6f 69 6e 28 22 20 22 29 29 3b 74 68 69 73 2e 61 70 70 6c 79 49 6e 73 74 61 6e 74 6c 79 4d 61 6e 75 61 6c 45 66 66 65 63 74 73 28 6e 2c 75 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 49 6e 73 74 61 6e 74 6c 79 4d 61 6e 75 61 6c 45 66 66 65 63 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 2e 68 61 Data Ascii: 83A8t.hasOwnProperty(i)&&(f.indexOf(i)!==-1?r.push(i+"("+t[i]+")"):s.indexOf(i)!==-1?u[i]=t[i]:n.style[i]=t[i]);r.length>0&&(n.style.transform=r.join(" "));this.applyInstantlyManualEffects(n,u)},t.prototype.applyInstantlyManualEffects=function(n,t){t.ha
2024-04-19 13:12:57 UTC	16384	IN	Data Raw: 2e 69 6e 6e 65 72 57 69 64 74 68 2c 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 29 7b 75 74 28 65 2e 63 72 65 61 74 65 42 61 6e 6e 65 72 50 6f 69 6e 74 65 72 28 63 2c 6c 2c 31 32 29 29 3b 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 72 65 74 75 72 6e 7d 76 61 72 20 61 3d 69 2e 74 61 72 67 65 74 7c 7c 69 2e 73 72 63 45 6c 65 6d 65 6e 74 2c 69 74 3d 73 2e 67 65 74 54 61 67 28 61 29 2c 77 3d 66 2e 67 65 74 41 6e 63 65 73 74 6f 72 45 6c 65 6d 65 6e 74 28 22 61 22 2c 61 29 3b 69 66 28 21 77 29 7b 76 28 22 6e 6f 74 61 72 67 65 74 2e 64 22 2c 22 6e 6f 20 74 61 72 67 65 74 20 77 69 74 68 20 64 61 74 61 2d 63 72 74 6f 2d 69 64 20 66 6f 75 6e 64 22 29 3b 72 65 74 75 72 6e 7d 6b 3d 73 2e 67 65 74 42 61 6e 6e 65 72 53 63 6f 70 65 28 61 29 3b 6e 74 3d 72 2e Data Ascii: .innerWidth,n.innerHeight)){ut(e.createBannerPointer(c,l,12));i.preventDefault();return}var a=i.target\|\|i.srcElement,it=s.getTag(a),w=f.getAncestorElement("a",a);if(!w){v("notarget.d","no target with data-crto-id found");return}k=s.getBannerScope(a);nt=r.
2024-04-19 13:12:57 UTC	982	IN	Data Raw: 66 3d 74 68 69 73 2e 70 72 69 76 61 63 79 43 6c 69 63 6b 55 72 6c 2c 6f 5b 63 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 65 74 22 2c 22 5f 62 6c 61 6e 6b 22 29 3b 74 68 69 73 2e 64 69 73 70 6c 61 79 41 6e 73 77 65 72 73 26 26 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 61 64 5f 63 6c 6f 73 65 64 22 29 7c 7c 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 28 29 29 7d 29 7d 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 2c 6e 2c 69 2c 6f 29 7b 74 68 69 73 2e 6c 6f 67 49 6e 74 65 72 61 63 74 69 6f 6e 3d 74 2c 74 68 69 73 2e 69 73 49 6e 54 6f 75 63 Data Ascii: f=this.privacyClickUrl,o[c].setAttribute("target","_blank");this.displayAnswers&&i.addEventListener("click",function(t){document.body.classList.contains("ad_closed")\|\|(t.preventDefault(),e())})},t);function t(t,e,n,i,o){this.logInteraction=t,this.isInTouc
2024-04-19 13:12:57 UTC	42	IN	Data Raw: 28 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 28 6e 3d 7b 7d 29 2e 72 5f 63 3d 65 2e 72 65 64 69 72 65 63 74 43 6f 75 0d 0a Data Ascii: (e){var n;return(n={}).r_c=e.redirectCou
2024-04-19 13:12:57 UTC	16384	IN	Data Raw: 34 36 36 38 0d 0a 6e 74 2c 6e 2e 72 5f 73 3d 65 2e 72 65 64 69 72 65 63 74 53 74 61 72 74 2c 6e 2e 72 5f 65 3d 65 2e 72 65 64 69 72 65 63 74 45 6e 64 2c 6e 2e 66 5f 73 3d 65 2e 66 65 74 63 68 53 74 61 72 74 2c 6e 2e 64 6c 5f 73 3d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 2c 6e 2e 64 6c 5f 65 3d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 2c 6e 2e 63 5f 73 3d 65 2e 63 6f 6e 6e 65 63 74 53 74 61 72 74 2c 6e 2e 63 5f 65 3d 65 2e 63 6f 6e 6e 65 63 74 45 6e 64 2c 6e 2e 73 63 5f 73 3d 65 2e 73 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 2c 6e 2e 72 65 71 5f 73 3d 65 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 6e 2e 72 65 73 5f 73 3d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 6e 2e 72 65 73 5f 65 3d 65 2e 72 65 73 70 6f Data Ascii: 4668nt,n.r_s=e.redirectStart,n.r_e=e.redirectEnd,n.f_s=e.fetchStart,n.dl_s=e.domainLookupStart,n.dl_e=e.domainLookupEnd,n.c_s=e.connectStart,n.c_e=e.connectEnd,n.sc_s=e.secureConnectionStart,n.req_s=e.requestStart,n.res_s=e.responseStart,n.res_e=e.respo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.5	50712	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1087	OUT	GET /ps/?us_privacy=&ts=1713532375745.3&ri=2&ru=https%3A%2F%2Fssum-sec.casalemedia.com%2Fusermatchredir%3Fs%3D191740%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cb%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D2%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:57 UTC	714	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:57 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP015 location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&us_privacy=&cb=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D2%26external_user_id%3D content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.5	50692	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	735	OUT	GET /cm-notify?pi=index&gpdr=0&gdpr_consent=&us_privacy=&user_id=ZiJtysAoIp0AACTzAsBeOAAA%262584 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Il6FFBA5OgJVHqi4wEmA_1713532366322; ts=1713532366
2024-04-19 13:12:57 UTC	493	IN	HTTP/1.1 302 Found date: Fri, 19 Apr 2024 13:12:57 GMT vary: Accept-Encoding location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=V5CzMJvao0JnKjLtN757PRlCqz_U2j7UPSJX9WYa4Ss&pi=index&gpdr=0&gdpr_consent=&us_privacy=&user_id=ZiJtysAoIp0AACTzAsBeOAAA%262584 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 19 Apr 2024 13:12:57 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.5	50713	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	716	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:57 UTC	230	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 13:12:57 GMT Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.5	50714	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	898	OUT	GET /ps/?us_privacy=&ts=1713532375745.7&ri=85&ru=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%2F33across%3Fus_privacy%3D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:57 UTC	592	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:57 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP003 location: https://match.prod.bidr.io/cookie-sync/33across?us_privacy= content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.5	50716	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1302	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313; anj=dTM7k!M4.FEVNsVF']wIg2GTtvwG:3!]tbP6j2F-.o%/6/guKFUZ.<L?TM@lZ:If$VV(Ig3NvFY4bZT-ilWt'gYo<Xit%W[^5(M$f@se#e+.<Q!8FetoX$<a; uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDctMThUMTM6MTI6NTJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMTlUMTM6MTI6NTJaIn0=
2024-04-19 13:12:57 UTC	1468	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=g&us_privacy=&bidder_id=90&external_user_id=187107314970053313 AN-X-Request-Uuid: 59283601-da22-499a-98bc-ba55a767a037 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:57 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.5	50715	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	813	OUT	GET /ps/?us_privacy=&xi=33&xu=3059573620546902553906 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:57 UTC	678	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352; Domain=.33across.com; Expires=Sat, 19-Apr-2025 13:12:57 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP005 location: https://events-ssc.33across.com/match?bidder_id=33&external_user_id=3059573620546902553906&ts=1713532377&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Fri, 19 Apr 2024 13:12:56 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.5	50700	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	838	OUT	GET /k/155.gif?puid=AAEPf07MRNwAABWcWeK7WQ&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=a91c18b4-f2b3-7227-a404-4a82312ffc3a#1713532369105#4; 3pi=441#1713532371973#1020838439#u_bd73a985-3ef7-4416-a679-3a9309181613\|155#1713532375772#26512786#AAEPf07MRNwAABWcWeK7WQ
2024-04-19 13:12:57 UTC	304	IN	HTTP/1.1 404 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Fri, 19 Apr 2024 13:12:56 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-19 13:12:57 UTC	49	IN	Data Raw: 32 42 0d 0a 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 69 6e 69 74 69 61 74 69 6e 67 20 73 79 6e 63 20 70 61 72 74 6e 65 72 20 6e 75 6c 6c 0d 0a Data Ascii: 2Bcould not find initiating sync partner null
2024-04-19 13:12:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.5	50718	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	796	OUT	GET /pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=the33across&gdpr=&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=66226dd7-316ee-387e9-0d055
2024-04-19 13:12:57 UTC	282	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-19 13:12:57 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.5	50342	54.211.215.248	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	710	OUT	GET /s/53233?bidder_id=183658&bidder_uuid=3070155006354058421 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjSARDcFw; lidid=ce1549f6-5f69-408d-8be4-53070adcf92a
2024-04-19 13:12:57 UTC	578	IN	HTTP/1.1 303 See Other Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Length: 0 Connection: close Location: https://x.dlx.addthis.com/e/live_intent_sync?na_exid=ce1549f6-5f69-408d-8be4-53070adcf92a Set-Cookie: _li_ss=ChAKBgjSARDcFwoGCIsBENwX; Max-Age=2592000; Expires=Sun, 19 May 2024 13:12:57 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a; Max-Age=63072000; Expires=Sun, 19 Apr 2026 13:12:57 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.5	50717	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	802	OUT	GET /sync?ssp=the33across&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=blT_xWDBar6yooaKlId8sQ&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=58637582-4b7e-42fe-b59a-889f13122ef7; c=1713532362; tuuid_lu=1713532367
2024-04-19 13:12:57 UTC	261	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=the33across

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.5	50722	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1103	OUT	GET /w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D70%26external_user_id%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=52f8c2a5-6873-40e5-944b-cf94c4030e51\|1713532359; pd=v2\|1713532373\|vMgavPkWgyiK
2024-04-19 13:12:57 UTC	246	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: text/html Content-Length: 199 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:57 UTC	199	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.5	50719	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	926	OUT	GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uqc=1; __uis=8c2fa56c-2166-4fab-86e9-e02ffd9fa6cb; __uin_ex=1; __uir_ex=40997562; __uin_a9=1; __uir_a9=40997562; __uin_cx=1; __uir_cx=40997562; __uin_z1=1; __uir_z1=40997562; HAPLB8G=s85197\|ZiJt0; _usd_justjared.com=1df90e2f-8482-4a03-a221-2cb3848e46db
2024-04-19 13:12:57 UTC	519	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:57 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-197 x-xss-protection: 0 set-cookie: HAPLB8G=s85197\|ZiJt3; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.5	50720	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	672	OUT	GET /dyn/tplift?uid=3059573620546902553906 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841
2024-04-19 13:12:57 UTC	487	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: TPLSERCOOKIE=3059573620546902553906; Domain=infolinks.com; Expires=Thu, 18-Jul-2024 13:12:57 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Wed, 19 Apr 2023 13:12:57 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d2631db63b0c4-ATL
2024-04-19 13:12:57 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.5	50724	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	714	OUT	GET /crum?cm_dsp_id=46&external_user_id=187107314970053313&gdpr=0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:58 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d263258564576-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:58 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:58 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e9VcfMet4TRIj81kImbboJsr7aeMSLtuHX7wM%2FlNhokB5vxzzOGYK3KD2K6tvC68IFpOMv1BLvLCZ1lEjDkVAMti243Iz9qRKscgSBMfYkXLBFkmIFAmJpbPVRV2Nm8Sj%2FZv5Hs7FDkw8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.5	50725	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	769	OUT	GET /server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1 Host: ad.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2cd32817-436f-4a0b-8d96-e539ff9a7ea5; tuuid_lu=1713532355
2024-04-19 13:12:58 UTC	232	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2024-04-19 13:12:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.5	50727	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1483	OUT	GET /pcs/view?xai=AKAOjstEAVmdsUXnf-dPAjS7Onwy5C3_lXpEYNb5ICQtpd1CPiphEq-S9S3nnaVhpF-XpeqhP3Jp_Y5-sTyveLBem7cdXG3ZyEYce35Nm5GOmRh6jj30zCpwnrv6ZYlHjSaYnwJ7rvTdl0CN7F2ihEjftAIee9rEsnghQYemP8AgqhgZfCNYPC7rEjqfjkMLHbbNJ6SUGvD6VQSoslCE76bVyJ_PZdB1BzFHFEuP3UR7HpAEvCnb9mGVHs3OvRwNFs1N99HTe9AKdutdGWSyLIp1T4Y4vR7Y86Qp9I6doSf-5aQ1kWXC4GwQieBUX1QQhUeRatOzI1Z-pIPOS4W17mHw0wGscsJ-39wHYP7CbUWgn9GfYJ-adUKM7pUwzIz31SJ-cTdFUUEOh78XAjBP-9li&sai=AMfl-YQvn253gqx9habN3de5cLeqJCfVU8-oahOe9sI4soUSWM6cVFsmUgF3E4XuwusQh6tJrkJLHnKPB7vNmKTCjbKg8OBNPGZbTKXd_yQPyaAD00T_08RKHMPkmsDPzEU&sig=Cg0ArKJSzNOjMwG_TyrIEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:58 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:58 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.5	50729	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:57 UTC	1483	OUT	GET /pcs/view?xai=AKAOjssA6UKnacFO5aqJb5RdZzDH_viZcYkitM3P050WzOOTJQYmeOXpu7ah99axMgJHO692Th79sz1nzlZ1nK_GivoKY85L1KbIf00E9F01rf2gVId4dNEQHqHST7XG_cQaXy9n0Gixw2qCPh6IIoE-rHqPEti6wtzpZMjoijBiRRi1_2NIautIBeCKAvPtyQ6zA7u5Q16fFwQm6FkoJMVw6nxkXRo_aw4MtGnLqml6Spy5bjEvGMop1jcfhjE4l-vk9LTnE7cLYc66ZAyFbf2xv5Np5fqZWGSXKTVzXpD0Wwu47wnKCAajGvTs9IhaJtOa91154MI4G9Dq_9JFAQOwsnLmFofrX6AzOx6PcsI8uvc-azXfRtc2AcQyNJFJpgj_l6Lc2vmDpep5k2M9jylg&sai=AMfl-YRUOOIK5Bod5OUB32zmVzoZQSYiXCaEYoKtPZK0FglLlMZGFA5rWweV1ZPr6mAB2Gv2o-hoDma6sfjqPGJ2FtwzAy1Uq8OD7juX1I3GkAM3ViKWUCDvf8ubSMh9Hbk&sig=Cg0ArKJSzIL1Px6opTyGEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:58 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 13:12:58 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 13:27:58 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 19 Apr 2024 13:12:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.5	50736	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	737	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEMb0jRzCLadNKj4MBxK3qsk&google_cver=1&gdpr=0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:58 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d26348ee81d7e-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:58 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:58 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KgJE1n8BHhuXXIpSZFN5WnyluWYeebx31tmlfkOP%2BNIaY%2B%2FJnzDQGsmHqJP0T%2BsIHJB65pnrYF6BhlwREgkFw9Ao%2BB2RNoYhI0iSSKryeL2a8zmW5tGmaw8I48SQJIrSlEEFSiXvXd6w6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.5	50738	74.125.136.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	796	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:58 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 19 Apr 2024 13:12:58 GMT Date: Fri, 19 Apr 2024 13:12:58 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-vzexOO-Mv_2Ra-VvEOUgUA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 13:12:58 UTC	408	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 7a 65 78 4f 4f 2d 4d 76 5f 32 52 61 2d 56 76 45 4f 55 67 55 41 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="vzexOO-Mv_2Ra-VvEOUgUA">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-04-19 13:12:58 UTC	428	IN	Data Raw: 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 Data Ascii: ta);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.g
2024-04-19 13:12:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.5	50734	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	673	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=96789479&p=157743&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:58 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:57 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.5	50740	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	1302	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dg%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&ru=deb&id=bN3RE0DBar6ykeaKkGJozW&gdpr_consent=undefined&us_privacy=undefined&gpp=&gpp_sid=&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; receive-cookie-deprecation=1; uuid2=187107314970053313; anj=dTM7k!M4.FEVNsVF']wIg2GTtvwG:3!]tbP6j2F-.o%/6/guKFUZ.<L?TM@lZ:If$VV(Ig3NvFY4bZT-ilWt'gYo<Xit%W[^5(M$f@se#e+.<Q!8FetoX$<a; uids=eyJ0ZW1wVUlEcyI6eyJhbXgiOnsidWlkIjoiZThiYTZhOTctNGYwZS00ZjE3LWEwOTctMWYwNTg3OTA5ZmQwIiwiZXhwaXJlcyI6IjIwMjQtMDctMThUMTM6MTI6NTJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMTlUMTM6MTI6NTJaIn0=
2024-04-19 13:12:58 UTC	1468	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=g&us_privacy=&bidder_id=90&external_user_id=187107314970053313 AN-X-Request-Uuid: c1cfb4a3-49d3-468d-b533-5663e8f9fcd0 Set-Cookie: XANDR_PANID=3vIou115K-A-RL0ETtPZtIQyf6NUAkx9jFx4mx5wJ_gXSJQF-wOzpLdVQ1uv03rBS6Qo7DJxRmZHtuQnnHAnjeOnOnKGHLphqd-UWZp-O6U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:58 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 13:12:58 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=187107314970053313; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 13:12:58 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 639.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.5	50739	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	607	OUT	GET /static/usync/iqusync-1.29.min.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841
2024-04-19 13:12:58 UTC	403	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: application/javascript Content-Length: 2791 Connection: close last-modified: Fri, 08 Mar 2024 10:20:03 GMT etag: "ae7-6132389067692" Cache-Control: max-age=2592000 expires: Sun, 19 May 2024 09:19:15 GMT via: 1.1 google CF-Cache-Status: HIT Age: 14023 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d26358d6753be-ATL
2024-04-19 13:12:58 UTC	966	IN	Data Raw: 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 66 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3c 64 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 64 5b 66 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 28 64 29 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 6d 61 6b 65 49 74 65 72 61 74 6f 72 Data Ascii: var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(d){var f=0;return function(){return f<d.length?{done:!1,value:d[f++]}:{done:!0}}};$jscomp.arrayIterator=function(d){return{next:$jscomp.arrayIteratorImpl(d)}};$jscomp.makeIterator
2024-04-19 13:12:58 UTC	1369	IN	Data Raw: 62 29 29 7d 29 7d 3b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 61 2e 64 65 66 65 72 3d 21 30 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 61 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 69 6d 61 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 70 69 64 2e 6a 73 22 3b 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 5f 33 33 41 63 72 6f 73 73 50 Data Ascii: b))})};var c=document.getElementsByTagName("script")[0];c.parentNode.insertBefore(a,c)}function f(){var a=document.createElement("script");a.defer=!0;a.type="text/javascript";a.src="https://cdn-ima.33across.com/ppid.js";a.onload=function(){new _33AcrossP
2024-04-19 13:12:58 UTC	456	IN	Data Raw: 3b 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 49 6e 74 65 6e 74 49 71 4f 62 6a 65 63 74 28 7b 70 61 72 74 6e 65 72 3a 33 32 38 35 31 32 31 33 34 2c 74 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 3a 31 45 33 2c 73 6f 75 72 63 65 4d 65 74 61 44 61 74 61 45 78 74 65 72 6e 61 6c 3a 77 69 6e 64 6f 77 2e 69 71 69 6c 73 6f 75 72 63 65 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 65 2e 69 6c 5f 6c 73 2e 69 71 75 65 3d 62 7d 7d 29 7d 3b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 Data Ascii: ;a.onload=function(){new IntentIqObject({partner:328512134,timeoutInMillis:1E3,sourceMetaDataExternal:window.iqilsource,callback:function(b){e.il_ls.ique=b}})};var c=document.getElementsByTagName("script")[0];c.parentNode.insertBefore(a,c)}function m(){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.5	50726	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	752	OUT	GET /rum?cm_dsp_id=64&external_user_id=43832ec9-23ab-4e6d-8de1-1752b7609838-66226dd1-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: r.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; CMPS=2584; CMPRO=2584
2024-04-19 13:12:58 UTC	970	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876d2635ad8eb036-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiJtysAoIp0AACTzAsBeOAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 13:12:58 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2584; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 13:12:58 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zp2NUgpJU4QaW6aRWgPSrrLsFzl%2FDrLLuI8CK0vNv9pupncozCdauX%2B0SBAhow5JwAsHLy7r4qzRRSBhRs9voHV4ZBsPSktML%2FJIDjYBQDAAmNNa0eoM%2BPQ6Ay0dnJdWBxyA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 13:12:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.5	50742	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	667	OUT	POST /action/doq.htm?pcode=utf-8&r=17135323764401 HTTP/1.1 Host: rt3047.infolinks.com Connection: keep-alive Content-Length: 8870 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:58 UTC	8870	OUT	Data Raw: 70 74 78 74 3d 70 6c 65 61 73 65 53 6e 6f 74 65 50 74 68 69 73 53 77 65 62 73 69 74 65 53 69 6e 63 6c 75 64 65 73 53 61 6e 53 61 63 63 65 73 73 69 62 69 6c 69 74 79 53 73 79 73 74 65 6d 50 70 72 65 73 73 53 63 6f 6e 74 72 6f 6c 2d 66 31 31 53 74 6f 53 61 64 6a 75 73 74 53 74 68 65 53 77 65 62 73 69 74 65 53 74 6f 53 74 68 65 53 76 69 73 75 61 6c 6c 79 53 69 6d 70 61 69 72 65 64 53 77 68 6f 53 61 72 65 53 75 73 69 6e 67 53 61 53 73 63 72 65 65 6e 53 72 65 61 64 65 72 50 70 72 65 73 73 53 63 6f 6e 74 72 6f 6c 2d 66 31 30 53 74 6f 53 6f 70 65 6e 53 61 6e 53 61 63 63 65 73 73 69 62 69 6c 69 74 79 53 6d 65 6e 75 50 61 63 63 65 73 73 69 62 69 6c 69 74 79 50 70 72 65 73 73 53 65 6e 74 65 72 53 66 6f 72 53 61 63 63 65 73 73 69 62 69 6c 69 74 79 53 66 6f 72 53 62 Data Ascii: ptxt=pleaseSnotePthisSwebsiteSincludesSanSaccessibilitySsystemPpressScontrol-f11StoSadjustStheSwebsiteStoStheSvisuallySimpairedSwhoSareSusingSaSscreenSreaderPpressScontrol-f10StoSopenSanSaccessibilitySmenuPaccessibilityPpressSenterSforSaccessibilitySforSb
2024-04-19 13:12:58 UTC	650	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 3468 Connection: close X-Application-Context: application:prod Access-Control-Allow-Origin: https://www.justjared.com Vary: Origin Access-Control-Allow-Credentials: true Cache-Control: no-cache,no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; Domain=infolinks.com; Expires=Sun, 19-Apr-2026 13:12:58 GMT; Path=/; SameSite=None P3P: CP="NON DSP NID OUR COR" Content-Language: en-US CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876d2635bf3f456a-ATL
2024-04-19 13:12:58 UTC	719	IN	Data Raw: 7b 22 72 61 75 74 68 22 3a 7b 22 72 73 64 22 3a 22 5a 5f 56 4c 6d 7a 36 42 48 49 31 4e 41 39 5a 59 34 75 47 36 78 77 51 42 6f 54 6c 61 77 66 71 76 4c 78 54 50 44 6b 62 43 49 6f 49 62 47 49 65 35 66 72 42 44 6b 33 34 75 56 41 56 47 55 4a 45 76 67 68 64 72 6c 6f 39 47 62 70 63 35 62 65 52 5f 34 79 63 68 76 36 49 48 35 38 31 42 67 61 4c 6b 6f 64 46 36 78 53 58 6a 73 39 31 38 67 73 32 39 43 67 52 33 31 46 4e 51 50 78 58 34 7a 6e 74 54 5a 49 72 63 4c 6a 59 39 49 32 75 58 45 53 7a 77 50 63 45 36 54 2d 4d 4f 79 66 54 4c 74 76 6a 68 22 2c 22 72 73 6b 22 3a 22 36 31 22 2c 22 72 63 73 22 3a 22 41 4b 68 5a 33 49 49 63 66 6e 4c 43 34 39 35 35 30 71 51 37 2d 51 22 7d 2c 22 73 65 6e 74 65 6e 63 65 73 22 3a 7b 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 3a 22 37 71 68 Data Ascii: {"rauth":{"rsd":"Z_VLmz6BHI1NA9ZY4uG6xwQBoTlawfqvLxTPDkbCIoIbGIe5frBDk34uVAVGUJEvghdrlo9Gbpc5beR_4ychv6IH581BgaLkodF6xSXjs918gs29CgR31FNQPxX4zntTZIrcLjY9I2uXESzwPcE6T-MOyfTLtvjh","rsk":"61","rcs":"AKhZ3IIcfnLC49550qQ7-Q"},"sentences":{"accessibility":"7qh
2024-04-19 13:12:58 UTC	1369	IN	Data Raw: 69 74 48 65 69 67 68 74 43 61 70 22 3a 22 30 2e 33 35 22 2c 22 72 77 22 3a 22 74 72 75 65 22 2c 22 76 70 6c 64 22 3a 22 35 22 2c 22 6d 58 62 74 6e 53 69 7a 65 22 3a 22 33 34 22 2c 22 74 61 62 6c 65 74 4c 61 6e 64 73 63 61 70 65 48 65 69 67 68 74 43 61 70 22 3a 22 30 2e 33 35 22 2c 22 72 68 62 69 22 3a 22 74 72 75 65 22 2c 22 74 6d 69 6e 77 22 3a 22 30 2e 30 31 22 2c 22 6d 76 65 5f 62 75 74 74 6f 6e 22 3a 22 74 72 75 65 22 2c 22 6d 67 61 72 69 22 3a 22 31 35 30 30 30 22 2c 22 74 6d 61 78 77 22 3a 22 31 2e 35 22 2c 22 6f 70 65 6e 53 70 65 65 64 22 3a 22 31 30 30 30 22 2c 22 74 6d 69 6e 68 22 3a 22 30 2e 30 31 22 2c 22 67 61 72 69 22 3a 22 33 30 30 30 30 22 2c 22 6d 6d 69 6e 77 22 3a 22 30 2e 30 31 22 2c 22 62 62 63 22 3a 22 23 66 32 66 32 66 32 22 2c 22 67 Data Ascii: itHeightCap":"0.35","rw":"true","vpld":"5","mXbtnSize":"34","tabletLandscapeHeightCap":"0.35","rhbi":"true","tminw":"0.01","mve_button":"true","mgari":"15000","tmaxw":"1.5","openSpeed":"1000","tminh":"0.01","gari":"30000","mminw":"0.01","bbc":"#f2f2f2","g
2024-04-19 13:12:58 UTC	1369	IN	Data Raw: 43 55 33 52 43 49 67 63 33 52 35 62 47 55 39 49 6e 64 70 5a 48 52 6f 4f 6a 46 77 65 44 74 6f 5a 57 6c 6e 61 48 51 36 4d 58 42 34 4f 32 52 70 63 33 42 73 59 58 6b 36 62 6d 39 75 5a 53 49 2d 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 38 61 57 31 6e 49 47 52 6c 5a 6d 56 79 50 53 4a 6b 5a 57 5a 6c 63 69 49 67 63 33 4a 6a 50 53 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 39 77 5a 57 35 79 64 47 49 74 64 58 4d 74 5a 57 46 7a 64 43 30 78 4c 6d 46 34 62 32 35 70 65 43 35 6a 62 32 30 76 63 33 6c 75 50 33 4e 31 63 48 42 73 65 54 31 68 4d 57 4a 6d 5a 47 56 69 59 69 31 6d 4d 44 56 6c 4c 54 51 35 4d 6d 59 74 4f 57 4d 31 4e 53 31 6b 4e 7a 63 33 4e 44 51 78 59 32 4d 79 5a 44 49 6d 64 57 6c 6b 50 57 49 78 Data Ascii: CU3RCIgc3R5bGU9IndpZHRoOjFweDtoZWlnaHQ6MXB4O2Rpc3BsYXk6bm9uZSI-CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aW1nIGRlZmVyPSJkZWZlciIgc3JjPSJodHRwczovL29wZW5ydGItdXMtZWFzdC0xLmF4b25peC5jb20vc3luP3N1cHBseT1hMWJmZGViYi1mMDVlLTQ5MmYtOWM1NS1kNzc3NDQxY2MyZDImdWlkPWIx
2024-04-19 13:12:58 UTC	11	IN	Data Raw: 22 63 6a 73 22 3a 22 22 7d 0a 0a Data Ascii: "cjs":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.5	50743	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	765	OUT	GET /server_match?partner_id=1790&r=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dimprovedigital%26uid%3D%7BPUB_USER_ID%7D HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2cd32817-436f-4a0b-8d96-e539ff9a7ea5; tuuid_lu=1713532355
2024-04-19 13:12:58 UTC	232	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2024-04-19 13:12:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.5	50741	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	631	OUT	GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1 Host: pixel.advertising.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:58 UTC	522	IN	HTTP/1.1 301 Redirect Date: Fri, 19 Apr 2024 13:12:58 GMT Connection: close Server: ATS/9.1.10.106 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBNptImYCED2iRJ_4QzxlMhHkN5tGlREFEgEBAQG_I2YsZvGAziMA_eMAAA&S=AQAAAqTX_jjLbO5CXoXIsNBvmm0; Expires=Sat, 19 Apr 2025 19:12:58 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 360
2024-04-19 13:12:58 UTC	360	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.5	50747	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	1123	OUT	GET /pixel?redir=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsovrn-usync%3Fuid%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB; ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; _ljtrtb_103=OPUf67e9fe0c71146baa5554ff263871c94; _ljtrtb_92=187107314970053313; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW
2024-04-19 13:12:59 UTC	507	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 19 Apr 2024 13:12:58 GMT Content-Length: 0 Connection: close Location: https://router.infolinks.com/dyn/sovrn-usync?uid=IhHYAPZHgyDtLY4rTVmqUZsu Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.5	50748	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	916	OUT	GET /cs/cookiesync/Rubicon?channeluid=LV6OX7LS-1U-G1TB&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: s.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: st_ssp=Y291bnRyeV9uYW1lPVVuaXRlZCBTdGF0ZXMmY291bnRyeV9pc28yPVVTJmNvdW50cnlfaXNvMz1VU0EmcmVnaW9uX25hbWU9Ti9BJnJlZ2lvbl9pc28yPU4vQSZjaXR5X25hbWU9Ti9BJmxvbmdpdHVkZT0tOTcuODIyJmxhdGl0dWRlPTM3Ljc1MSZ6aXA9Ti9B; st_uid=53a4a572-fc56-446e-bfa3-4768d942056e
2024-04-19 13:12:59 UTC	749	IN	HTTP/1.1 204 No Content Server: openresty Date: Fri, 19 Apr 2024 13:12:59 GMT Set-Cookie: st_cs=ifllFZBC731F2Ddsj871zH9AapzxrQogKhjOBoF+6Bg=; Max-Age=31104000; Domain=.seedtag.com; Path=/; Expires=Mon, 14 Apr 2025 13:12:59 GMT; Secure; SameSite=None Set-Cookie: st_csd=1713532379019:1713532379019; Max-Age=31104000; Domain=.seedtag.com; Path=/; Expires=Mon, 14 Apr 2025 13:12:59 GMT; Secure; SameSite=None Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT, HEAD Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.5	50749	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	606	OUT	GET /flash/icon/privacy_small.svg HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	526	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:59 GMT content-type: image/svg+xml content-length: 1706 last-modified: Tue, 11 Feb 2020 14:30:28 GMT etag: "5e42ba84-6aa" expires: Mon, 14 Apr 2025 13:12:59 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	1706	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 31 35 22 20 68 65 69 67 68 74 3d 22 31 35 22 20 77 69 64 74 68 3d 22 31 39 22 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 62 67 7b 66 69 6c 6c 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 2e 36 3b 7d 0a 20 20 20 20 20 20 2e 69 63 6f 6e 7b 66 69 6c 6c 3a 23 30 30 61 65 63 64 7d 0a 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 67 22 20 64 3d 22 4d 30 20 30 4c 31 39 20 30 4c 20 31 39 20 31 35 4c 20 35 20 31 35 41 35 20 35 20 30 20 30 20 31 20 30 20 31 30 22 2f 3e 0a 20 20 20 3c 63 69 72 63 6c 65 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 19 15" height="15" width="19"> <style> .bg{fill:#fff;opacity:0.6;} .icon{fill:#00aecd} </style> <path class="bg" d="M0 0L19 0L 19 15L 5 15A5 5 0 0 1 0 10"/> <circle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.5	50752	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	605	OUT	GET /flash/icon/close_button.svg HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	525	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:59 GMT content-type: image/svg+xml content-length: 308 last-modified: Fri, 14 Feb 2020 13:51:32 GMT etag: "5e46a5e4-134" expires: Mon, 14 Apr 2025 13:12:59 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	308	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 35 22 20 20 68 65 69 67 68 74 3d 22 31 35 22 20 77 69 64 74 68 3d 22 31 35 22 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 2e 62 67 7b 66 69 6c 6c 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 2e 36 3b 7d 0d 0a 2e 69 63 6f 6e 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 3b 73 74 72 6f 6b 65 3a 23 30 30 61 65 63 64 3b 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 67 22 20 64 3d 22 4d 30 20 30 4c 31 35 20 30 4c 20 31 35 20 31 35 4c 20 30 20 31 35 22 2f 3e 0d 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 69 63 6f 6e 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 15 15" height="15" width="15"><style>.bg{fill:#fff;opacity:0.6;}.icon{stroke-width:1.25;stroke:#00aecd;}</style><path class="bg" d="M0 0L15 0L 15 15L 0 15"/><path class="icon"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.5	50753	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	605	OUT	GET /flash/icon/adchoices_en.svg HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	526	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:59 GMT content-type: image/svg+xml content-length: 1881 last-modified: Tue, 11 Feb 2020 14:27:58 GMT etag: "5e42b9ee-759" expires: Mon, 14 Apr 2025 13:12:59 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	1881	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 70 72 69 76 61 63 79 5f 73 76 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 37 20 31 35 22 20 68 65 69 67 68 74 3d 22 31 35 22 20 77 69 64 74 68 3d 22 37 37 22 3e 0a 3c 73 74 79 6c 65 3e 0a 2e 62 67 7b 66 69 6c 6c 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 2e 36 3b 7d 0a 2e 69 63 6f 6e 7b 66 69 6c 6c 3a 23 30 30 61 65 63 64 3b 7d 0a 2e 74 65 78 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 2e 35 70 78 3b 73 74 72 6f 6b 65 3a 62 6c 61 63 6b 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 32 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a Data Ascii: <svg id="privacy_svg" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 77 15" height="15" width="77"><style>.bg{fill:#fff;opacity:0.6;}.icon{fill:#00aecd;}.text{font-family:Arial;font-size:11.5px;stroke:black;stroke-width:0.25;}</style>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.5	50751	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	605	OUT	GET /flash/icon/back_button2.svg HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	525	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:59 GMT content-type: image/svg+xml content-length: 293 last-modified: Thu, 28 Apr 2022 09:09:48 GMT etag: "626a59dc-125" expires: Mon, 14 Apr 2025 13:12:59 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	293	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 68 65 69 67 68 74 3d 22 31 35 22 20 77 69 64 74 68 3d 22 31 35 22 3e 0d 0a 09 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 2e 6e 61 74 69 76 65 2d 61 72 72 6f 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 38 34 38 34 38 34 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6e 61 74 69 76 65 2d 61 72 72 6f 77 22 20 64 3d 22 4d 32 30 20 31 31 48 37 2e 38 33 6c 35 2e 35 39 2d 35 2e 35 39 4c 31 32 20 34 6c 2d 38 20 38 20 38 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 24 24" height="15" width="15"><style> .native-arrow { fill: #848484; } </style> <path class="native-arrow" d="M20 11H7.83l5.59-5.59L12 4l-8 8 8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.5	50762	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	837	OUT	GET /pixel?google_nid=openx&google_hm=YWQzYjJlMzYtMDg4My0yMWI2LWRiN2QtNWRjNTZhYzZmM2Nj HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:59 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 13:12:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:59 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.5	50763	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	798	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkdIISw_fNQLkewAE8ZU3Q8jHq51deM1CdvOpU_UQ1be_cPufrsxvgO7I58u8A
2024-04-19 13:12:59 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEAapA3rEkivth37HBNDiVB4&google_cver=1 Date: Fri, 19 Apr 2024 13:12:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:59 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 41 61 70 41 33 72 45 6b 69 76 74 68 33 37 48 42 4e 44 69 56 42 34 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEAapA3rEkivth37HBNDiVB4&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.5	50750	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	536	OUT	GET /animejs/animejs.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	530	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:59 GMT content-type: text/javascript content-length: 12673 last-modified: Tue, 26 Mar 2019 17:44:11 GMT etag: "5c9a64eb-3181" expires: Mon, 14 Apr 2025 13:12:59 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	12673	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 6e 69 6d 65 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 50 2c 75 3d 7b 75 70 64 61 74 65 3a 76 6f 69 64 20 30 2c 62 65 67 69 6e 3a 76 6f 69 64 20 30 2c 72 75 6e 3a 76 6f 69 64 20 30 2c 63 6f 6d 70 6c 65 74 65 3a 76 6f 69 64 20 30 2c 6c 6f 6f 70 3a 31 2c 64 69 72 65 63 74 69 6f 6e 3a 22 6e 6f 72 6d 61 6c 22 2c 61 75 74 6f 70 6c 61 79 3a 21 30 2c 6f 66 66 73 65 74 3a 30 7d 2c 63 3d 7b 64 75 72 61 74 69 6f 6e 3a 31 65 33 2c 64 65 6c 61 79 3a 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 45 6c 61 73 74 69 63 22 2c 65 6c 61 73 74 69 63 69 74 79 3a 35 30 30 2c 72 6f 75 6e 64 3a 30 7d 2c 72 3d 5b 22 74 72 61 6e 73 6c 61 74 65 58 22 2c 22 74 72 61 6e 73 6c 61 74 65 59 22 2c 22 74 72 61 6e 73 6c 61 74 65 5a 22 2c 22 72 6f Data Ascii: window.animejs=function(n){var P,u={update:void 0,begin:void 0,run:void 0,complete:void 0,loop:1,direction:"normal",autoplay:!0,offset:0},c={duration:1e3,delay:0,easing:"easeOutElastic",elasticity:500,round:0},r=["translateX","translateY","translateZ","ro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.5	50745	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	733	OUT	GET /assets/bounce/local_storage_frame17.min.html HTTP/1.1 Host: assets.bounceexchange.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	854	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:59 GMT Last-Modified: Thu, 18 Apr 2024 19:25:10 GMT ETag: "fc893948c3efc689b5b19d8a77958e23" x-goog-generation: 1713468310335763 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 2408 Content-Type: text/html; charset=UTF-8 x-goog-hash: crc32c=kX4cqg== x-goog-hash: md5=/Ik5SMPvxom1sZ2Kd5WOIw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 2408 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: etag Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ABPtcPpX2FwaWnY9S4x38DPEh5LPIAwBpk2A0evMBkCldXwCzCgbOl7eob2_XG2E__ewQ5O-Bh0 Server: UploadServer Vary: Accept-Encoding Cache-Control: public,max-age=31536000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 13:12:59 UTC	401	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6f 70 74 4f 75 74 4b 65 79 3d 22 67 64 70 72 5f 6f 70 74 5f 6f 75 74 22 2c 6f 70 74 4f 75 74 56 61 6c 75 65 3d 22 31 22 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 41 6c 6c 44 61 74 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 73 70 6c 69 74 28 22 3d 22 29 5b 30 5d 3b 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 6f 70 74 4f 75 74 4b 65 79 29 26 26 63 6c 65 61 72 43 6f 6f 6b 69 65 28 65 29 7d 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 63 6c 65 61 72 28 29 Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><script>var optOutKey="gdpr_opt_out",optOutValue="1";function clearAllData(){document.cookie.split(";").forEach(function(e){e=e.split("=")[0];-1===e.indexOf(optOutKey)&&clearCookie(e)}),localStorage.clear()
2024-04-19 13:12:59 UTC	1255	IN	Data Raw: 69 6f 6e 20 73 65 74 43 6f 6f 6b 69 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 2c 74 3d 28 61 2e 73 65 74 44 61 74 65 28 61 2e 67 65 74 44 61 74 65 28 29 2b 33 36 35 29 2c 74 2b 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 61 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 74 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 62 6f 75 6e 63 65 65 78 63 68 61 6e 67 65 2e 63 6f 6d 3b 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 53 65 63 75 72 65 22 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 61 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 Data Ascii: ion setCookie(e,t){var a=new Date,t=(a.setDate(a.getDate()+365),t+"; expires="+a.toUTCString());document.cookie=e+"="+t+";path=/;domain=.bounceexchange.com;SameSite=None;Secure"}function getCookie(e){for(var t,a,o=document.cookie.split(";"),s=0;s<o.length
2024-04-19 13:12:59 UTC	752	IN	Data Raw: 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 74 65 73 74 5f 6e 61 6d 65 2c 74 65 73 74 5f 76 61 6c 75 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 65 73 74 5f 6e 61 6d 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 70 74 4f 75 74 4b 65 79 29 26 26 28 74 65 73 74 5f 70 61 73 73 65 64 3d 21 31 2c 74 65 73 74 5f 66 61 69 6c 65 64 5f 6d 65 73 73 61 67 65 3d 22 67 64 70 72 5f 6f 70 74 5f 6f 75 74 22 29 7d 63 61 74 63 68 28 65 29 7b 74 65 73 74 5f 70 61 73 73 65 64 3d 21 31 2c 65 26 26 22 53 65 63 75 72 69 74 79 45 72 72 6f 72 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 74 65 73 74 5f 66 61 69 6c 65 64 5f 6d 65 73 73 61 67 65 3d 22 73 65 63 75 72 69 74 79 5f 65 72 72 6f 72 22 29 7d 74 65 73 74 5f 70 61 Data Ascii: orage.setItem(test_name,test_value),localStorage.removeItem(test_name),localStorage.getItem(optOutKey)&&(test_passed=!1,test_failed_message="gdpr_opt_out")}catch(e){test_passed=!1,e&&"SecurityError"===e.name&&(test_failed_message="security_error")}test_pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.5	50759	34.232.139.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	631	OUT	GET /sync/openx/15939bb8-5158-ed5b-ff4a-11895f73f0e5?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 13:12:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.5	50760	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	716	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=d9828181-dd5e-c4e8-0e93-85ebc817f64c HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; ad-privacy=0
2024-04-19 13:12:59 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: JYS993BQKYB9CSQSZ0QB Set-Cookie: ad-id=A_6rKX-kaUFtsS8P2mcOAD0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 13:12:59 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 13:12:59 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 13:12:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.5	50757	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	1111	OUT	GET /merge?pid=76&3pid=edba233c-2b40-451f-8921-b1dad89502fe&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; _ljtrtb_80=LV6OX7LS-1U-G1TB; ljtrtb=eJyrVjI0MFKyUkpKtEgzSTUx1DU3SkzVNU1KNte1MDIy1U0xt0gxNzczNUtJSVLSUbIwAKr1CTPzjzD3CdY1DNV1NwxxAombAMWjMr1KDHRdU1N8MnO8grKTLCoLIxwrwk2UagEtnxsp; _ljtrtb_103=OPUf67e9fe0c71146baa5554ff263871c94; _ljtrtb_92=187107314970053313; ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW
2024-04-19 13:12:59 UTC	1783	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LV6OX7LS-1U-G1TB; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=187107314970053313; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZiJt0-EedLilJRkb8yqXAxW4; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_102=ba8f4e41-72ae-5bc7-8225-d78d77656ddb; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPUf67e9fe0c71146baa5554ff263871c94; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVzc0KwjAQBOB3ydmFbLLJJt4URCiFilot3vILRS%2BCB0V8d9PrzDfMV6BUYi1icJUKIbAKBUxMDE4pA5ldZrbG5hzFqmHd8HAYq%2BXia5GJEcnGEIwxVKuy2jEmT8062Wh%2FscPE%2FQlwhD2ety33yx82JlkjeZbSaI16WVBrbnP3krAruZ8f3fEe3ec5bd5XEr8%2FWo8rNw%3D%3D; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:59 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_76=edba233c-2b40-451f-8921-b1dad89502fe; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:59 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IhHYAPZHgyDtLY4rTVmqUZsu; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:59 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJyrVrIwULIyNDc0MTcxtDQz11GyMEHlGxoYoQoYGaPxzSF8Q2NzQzPzWgCtGxCW; Path=/; Domain=.lijit.com; Expires=Sat, 19-Apr-2025 13:12:59 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-19 13:12:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.5	50765	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:58 UTC	609	OUT	GET /flash/icon/criteo_logo_2021.svg HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	526	IN	HTTP/1.1 200 OK server: nginx date: Fri, 19 Apr 2024 13:12:59 GMT content-type: image/svg+xml content-length: 2193 last-modified: Thu, 27 May 2021 13:21:59 GMT etag: "60af9cf7-891" expires: Mon, 14 Apr 2025 13:12:59 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	2193	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 30 39 2e 33 22 20 77 69 64 74 68 3d 22 31 30 35 33 2e 35 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 79 3d 22 30 22 20 78 3d 22 30 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 3c 73 74 79 6c 65 20 69 64 3d 22 73 74 79 6c 65 36 39 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 2e 73 74 30 7b 66 69 6c 6c 3a 23 66 65 35 30 30 30 7d 3c 2f 73 74 79 6c 65 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 32 33 2e 33 20 2d 32 30 39 2e 38 29 22 20 69 64 3d 22 4c 61 79 65 72 5f 32 5f 31 5f 22 3e 3c 67 20 69 64 3d 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" height="209.3" width="1053.5" xml:space="preserve" y="0" x="0" id="Layer_1" version="1.1"><style id="style69" type="text/css">.st0{fill:#fe5000}</style><g transform="translate(-223.3 -209.8)" id="Layer_2_1_"><g id="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.5	50746	174.137.133.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	684	OUT	GET /user-sync?zone=208912&t=image&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fqora-usync%3Fuid%3D%7BUID%7D HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	695	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Length: 0 Connection: close Location: //prebid.a-mo.net/cchain/0?&cb=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D208912%26dsp%3D406496%26t%3Dimage%26uid%3D Cache-Control: no-store Set-Cookie: SSPR_71=aHR0cHM6Ly9yb3V0ZXIuaW5mb2xpbmtzLmNvbS9keW4vcW9yYS11c3luYz91aWQ9QTMyMDc1MDM2ODczOTQ0NDA4NzA=; Domain=.adkernel.com; Secure; SameSite=None Set-Cookie: SSPZ=208912; Domain=.adkernel.com; Secure; SameSite=None Set-Cookie: DSP2F_71=406496; Domain=.adkernel.com; Secure; SameSite=None Set-Cookie: ADKUID=A3207503687394440870; Expires=Sun, 19 May 2024 13:12:59 GMT; Domain=.adkernel.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.5	50756	74.119.117.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	908	OUT	GET /register-source?impressionId=66226dd912a240cc09dd14c999926558&partner_domain=nomatic.com&external_uid=c180d7cf-fea2-4bfb-8f00-85b381542aa1&partner_id=100366&source_type=event&campaign_id=343905&marketing_objective_type=0&hashed_external_id=-5162943182333746466 HTTP/1.1 Host: measurement-api.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff
2024-04-19 13:12:59 UTC	248	IN	HTTP/1.1 200 OK content-length: 2 content-type: text/html date: Fri, 19 Apr 2024 13:12:58 GMT server: Kestrel set-cookie: ar_debug=1; SameSite=None; Secure; HttpOnly strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.5	50755	104.26.9.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	728	OUT	GET /track/v4?source=basics-wallet&tier_one=criteo&tier_two=343905&tier_three=11239559&tier_four=300x250&auction_id=66226dd912a240cc09dd14c999926558 HTTP/1.1 Host: metrics.getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	841	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fmetrics.getrockerbox.com%2Ftrack%2Fv4%3Fuid%3D%24UID%26source%3Dbasics-wallet%26tier_one%3Dcriteo%26tier_two%3D343905%26tier_three%3D11239559%26tier_four%3D300x250%26auction_id%3D66226dd912a240cc09dd14c999926558%26uid_ts%3D1713532379 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFKOB8L8HQ5Und9eZjhr%2FM9Oy213LKDnlD9yXxPihmjbL7MByiT0%2F2vnDtBS4%2BxBEF1hUkjoN%2FFvLGsry4Q4skg6ZWV9hQjgmyJhg1qE5YlHZX0eTUrAcCB%2FReAryMmejDkciYr7ELO5FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876d263969967bde-ATL
2024-04-19 13:12:59 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 13:12:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.5	50754	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	1190	OUT	GET /delivery/lg.php?cppv=3&cpp=-1nrnf1RgWYi7hJa0nBRJ7lUzOJRTC3fp-r0xAlHwcnZGk19AjhFgA7FlpEWckJS9fvmgRHsLDS7afX8qxXrHRzeiKMDQMpgcfnggmQ0KnE6gD_SJl7e6__A9LmFbMmM5fsbeaw12qBBJnpPQ7n1OhhayJyBn6BM4DAAhrxp3wf8RVcI6t_hIz6wXtY6ziTCjnNOXl_JVEjr4I9FJU4vTFchessgPT8WOMmUAwIlnhg_MgQuH1kAtS6scfPPcq4vTglxFt9zPbWbgqtbt62mF27DYUn9ih71znOsIT11uEwPSvp2Hy1POhB96kXJYG1sWe7HYWRvT95vh8-FncM033qWuY0dw-Q-qY_fWjz3JjwnbSWiZ9am6PL5h5PMSfJERU0-NaMIQGYfBRQfPJhvLbsPQ4dhwqT1PeS7ypGMqZ6Rf8wZtskbuCU4gkSKv3Uy4TR8XQ HTTP/1.1 Host: cat.us5.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=ea463be1-6b44-4908-9fef-8b6e74e7dcff
2024-04-19 13:12:59 UTC	425	IN	HTTP/1.1 200 OK content-type: image/gif date: Fri, 19 Apr 2024 13:12:58 GMT server: Kestrel cache-control: no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT pragma: no-cache transfer-encoding: chunked cross-origin-resource-policy: cross-origin p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" server-processing-duration-in-ticks: 2752698 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.5	50761	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	638	OUT	GET /track/cmf/openx?oxid=8154fdfc-c1f4-7f12-ce9d-077ca0243dac&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 13:12:59 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.5	50768	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	922	OUT	POST /all?cppv=3&cpp=2DOeSDRkmqKW0zTgy3qXG2ItKMOnfZt5VmzQwj9lpjPcm3F3iTBihPA7aAU4m-1WJD0kOykEnWUhiPJeIIRYmBcw7SGrqfSEgA4VTlDTZ_Tha-YbkRTfev37-tV36X-slLTcja0NrgdbejORgdpx-bPggzGDdGzO9K0Je4gMgPIXB1KZm3Ad1ccl5KFXWDxWKJXcd3QCwLPwG3l7i_n0KEsoKYLnzTN0M2iSOQjYdJ8ABrrrTIhYjk1dsYr7G0Q8KUSSfg&sds=2&rev=91864&sendBeacon=true HTTP/1.1 Host: csm.us.criteo.net Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ads.us.criteo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	36	OUT	Data Raw: 7b 22 76 77 22 3a 5b 7b 22 65 76 74 22 3a 31 32 2c 22 6d 64 22 3a 31 2c 22 74 73 22 3a 31 39 34 30 7d 5d 7d Data Ascii: {"vw":[{"evt":12,"md":1,"ts":1940}]}
2024-04-19 13:12:59 UTC	242	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 13:12:59 GMT server: Finatra content-length: 0 access-control-allow-origin: * cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.5	50769	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	799	OUT	GET /img/img?h=76&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fstatic.us5.us.criteo.net%2Fdesign%2Fdt%2F100366%2F5313039%2F275026afecd648afa3a87193a64ec6c7_logo_n_horizontal.jpg&v=3&w=596&rid=4&s=FcokYNlarkWPYPA9HUSzGSBU HTTP/1.1 Host: imageproxy.us.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	416	IN	HTTP/1.1 200 OK content-length: 1010 content-type: image/webp date: Thu, 18 Apr 2024 08:41:51 GMT server: Kestrel cache-control: public, max-age=31104000 expires: Fri, 04 Apr 2025 13:24:04 GMT last-modified: Wed, 4 Jun 2008 06:06:06 GMT timing-allow-origin: * vary: x-accept-image age: 102667 x-cache: hit accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	1010	IN	Data Raw: 52 49 46 46 ea 03 00 00 57 45 42 50 56 50 38 20 de 03 00 00 b0 18 00 9d 01 2a c8 00 32 00 3e 6d 34 96 46 a4 23 22 21 26 38 0b c8 80 0d 89 69 00 16 cf 7e 23 fe f3 a2 ce 91 4f a9 bf 80 f9 66 d2 c9 bc 11 c2 bf 9d ff a0 e3 03 b6 bf 8f 7e 3d bc f6 7f cf ff 07 e7 8b f3 1f ef 3f f1 3f bd fc 03 7f 29 fe 95 fe f3 b0 07 ed 37 b3 07 ec 01 b4 35 35 e0 97 47 43 78 3f b5 8b f9 6f 69 f5 fe c0 39 40 f6 76 f9 88 a4 4b d7 38 72 5d ce 0e 84 af b8 68 47 41 1a ed 6a 52 56 ec 34 00 0b b8 78 34 98 e2 54 83 d8 ab 38 08 f3 30 86 ec d3 d9 bc dc 68 5f 01 bb 91 be a4 18 df 51 e1 1e 5b 13 0d 28 e5 1f 81 c8 5e 22 d3 44 53 40 3e 27 80 e6 9b 38 9b ce 35 41 54 ec f8 98 d0 d6 b3 14 d2 e7 c8 02 20 05 80 00 fe fc 4a 59 f7 d2 2f d3 f6 5c da 3e eb a1 85 f7 1a 67 c4 ed e6 30 20 02 09 69 47 08 Data Ascii: RIFFWEBPVP8 *2>m4F#"!&8i~#Of~=??)755GCx?oi9@vK8r]hGAjRV4x4T80h_Q[(^"DS@>'85AT JY/\>g0 iG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.5	50771	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	823	OUT	GET /img/img?h=1200&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fstatic.us5.us.criteo.net%2Fdesign%2Fdt%2F100366%2F5344326%2F7995175e253e44348e918195e4e19394_nomatic_luma_collection_sage_1080x1920.jpg&v=3&w=1200&rid=4&s=xdrSACCyL2f4ldxL3AhxaghG HTTP/1.1 Host: imageproxy.us.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	416	IN	HTTP/1.1 200 OK content-length: 30906 content-type: image/webp date: Thu, 18 Apr 2024 11:25:05 GMT server: Kestrel cache-control: public, max-age=31104000 expires: Fri, 04 Apr 2025 13:24:19 GMT last-modified: Wed, 4 Jun 2008 06:06:06 GMT timing-allow-origin: * vary: x-accept-image age: 92872 x-cache: hit accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	15968	IN	Data Raw: 52 49 46 46 b2 78 00 00 57 45 42 50 56 50 38 20 a6 78 00 00 30 dc 02 9d 01 2a 20 03 b0 04 3e 6d 34 97 48 a4 22 a7 a4 22 91 39 d8 f0 0d 89 69 6e dc d7 3b a5 fa ea b3 07 47 9f 7b 38 cb c7 f9 ef ef a7 fd bc 7a 2c c7 ac fe 9d 0d ae 4b aa 25 3a 03 11 bc 9b c1 b0 f2 c1 50 ff fe 91 77 5d fb fa 2e 6d 74 9f b7 3f b8 89 fc ef fc cf f7 ff ef df b2 1e fd be 73 fc 7f fb 6f f1 7f b7 3e 89 f9 c9 f8 67 f0 3f b8 3f 1b 9f a4 66 cf df ff c2 f3 53 f9 ef e1 0f db ff 90 fd e1 ff 05 f3 a3 fb cf fc 9f e6 fc 73 f9 71 fe bf a8 5f e7 3f d4 bf d4 fd c7 f1 7c ef be 61 7e e5 fd ab fe e7 f8 df 5c ff a6 ff b7 fe 7f d5 3f e0 3f d1 ff e3 ff 25 f0 03 fa fd ff 8f cb 87 c4 5f f2 3f f6 bd 81 ff a0 ff 9c f5 8a ff 5f ca bf eb df f0 7d 86 7f 64 7a dc 7a 56 2f ae 98 74 75 8b a9 cb f9 52 c2 da 89 Data Ascii: RIFFxWEBPVP8 x0* >m4H""9in;G{8z,K%:Pw].mt?so>g??fSsq_?\|a~\??%_?_}dzzV/tuR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.5	50770	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	828	OUT	GET /img/img?c=3&cq=256&h=400&m=0&partner=100366&q=80&r=0&u=https%3A%2F%2Fcdn.shopify.com%2Fs%2Ffiles%2F1%2F0745%2F1299%2Ffiles%2FACTBSM-BLK-02_Toiletry_Nomatic_Sm_Front_20190702.png%3Fv%3D1713298875&v=3&w=400&rid=4&s=5FaysOc2aMU2to-MC01P5KBU&b=400 HTTP/1.1 Host: imageproxy.us.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 13:12:59 UTC	416	IN	HTTP/1.1 200 OK content-length: 42476 content-type: image/png date: Thu, 18 Apr 2024 07:30:32 GMT server: Kestrel cache-control: public, max-age=31104000 expires: Sat, 12 Apr 2025 09:52:19 GMT last-modified: Wed, 4 Jun 2008 06:06:06 GMT timing-allow-origin: * vary: x-accept-image age: 106945 x-cache: hit accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-19 13:12:59 UTC	15968	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 01 90 08 03 00 00 00 6f 64 f7 98 00 00 02 3d 50 4c 54 45 ed ed ed 3b 3b 3b 3a 3a 3a 34 34 34 33 33 33 35 35 35 38 38 38 ee ee ee 36 36 36 37 37 37 39 39 39 3c 3c 3c 32 32 32 3d 3d 3d 3e 3e 3e 40 40 40 3f 3f 3f 41 41 41 43 43 43 42 42 42 ed ee ed 44 44 44 45 45 45 31 31 31 30 30 30 ec ec ec 46 46 46 eb eb eb 2f 2f 2f 47 47 47 48 48 48 49 49 49 2e 2e 2e ee ed ee 2d 2d 2d 4a 4a 4a 4b 4b 4b 2c 2c 2c 4c 4c 4c 2b 2b 2b 4d 4d 4d 2a 2a 2a 29 29 29 f6 f6 f6 4e 4e 4e 28 28 28 51 51 51 50 50 50 52 52 52 27 27 27 4f 4f 4f f7 f7 f7 ea ea ea 26 26 26 20 20 20 f5 f5 f5 f4 f4 f4 25 25 25 f1 f1 f1 53 53 53 59 59 59 24 24 24 23 23 23 57 57 57 f3 f3 f3 f2 f2 f2 58 58 58 f0 f0 f0 54 54 54 5a 5a 5a ef ef ef 56 Data Ascii: PNGIHDRod=PLTE;;;:::444333555888666777999<<<222===>>>@@@???AAACCCBBBDDDEEE111000FFF///GGGHHHIII...---JJJKKK,,,LLL+++MMM***)))NNN(((QQQPPPRRR'''OOO&&& %%%SSSYYY$$$###WWWXXXTTTZZZV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.5	50781	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	747	OUT	GET /v1/envelope?pid=0015a0000344WLkAAM&src=ima&ver=1.9.0&us_privacy=1YNN HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.justjared.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 33x_ps=u%3D212568969054924%3As1%3D1713532371352%3Ats%3D1713532371352
2024-04-19 13:12:59 UTC	367	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://www.justjared.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Fri, 19 Apr 2024 13:12:59 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.5	50782	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	710	OUT	GET /dyn/zmn-usync?uid=Ew75cZqQhtpEcO-Pru61 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.5	50784	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	630	OUT	GET /static/iquid-01.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.5	50778	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	625	OUT	GET /static/id5.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906
2024-04-19 13:12:59 UTC	404	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 13:12:59 GMT Content-Type: application/javascript Content-Length: 58975 Connection: close last-modified: Sun, 26 Mar 2023 15:25:02 GMT etag: "e65f-5f7cf3aed6f0f" Cache-Control: max-age=2592000 expires: Sun, 19 May 2024 11:28:34 GMT via: 1.1 google CF-Cache-Status: HIT Age: 6265 Accept-Ranges: bytes Server: cloudflare CF-RAY: 876d263b2d274581-ATL
2024-04-19 13:12:59 UTC	965	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 32 39 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 69 5b 65 5d 29 72 65 74 75 72 6e 20 69 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e Data Ascii: /** * @id5io/id5-api.js * @version v1.0.29 * @link https://id5.io/ * @license Apache-2.0 */!function(n){var i={};function r(e){if(i[e])return i[e].exports;var t=i[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}r.
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 69 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 69 7d 74 2e 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 65 74 75 72 6e 20 6a 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 26 26 74 28 65 29 7d 29 2c 6e 7d 2c 74 2e 74 3d 62 2c 74 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: r===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function l(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,i=new Array(t);n<t;n++)i[n]=e[n];return i}t.b=function(e,t){var n=!0;return j(e,function(e){return n=n&&t(e)}),n},t.t=b,t.u=function(e)
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 6e 28 29 7b 6d 28 22 61 6a 61 78 22 2c 22 78 68 72 20 74 69 6d 65 6f 75 74 20 61 66 74 65 72 20 22 2c 69 2e 74 69 6d 65 6f 75 74 2c 22 6d 73 22 29 7d 2c 22 47 45 54 22 3d 3d 3d 61 26 26 6e 26 26 28 73 28 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 74 26 26 22 6e 6f 44 65 63 6f 64 65 57 68 6f 6c 65 55 52 4c 22 69 6e 20 74 26 26 74 2e 6e 6f 44 65 63 6f 64 65 57 68 6f 6c 65 55 52 4c 3f 6e 2e 68 72 65 66 3d 65 3a 6e 2e 68 72 65 66 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3b 74 3d 74 26 26 22 64 65 63 6f 64 65 53 65 61 72 63 68 41 73 53 74 72 69 6e 67 22 69 6e 20 74 26 26 74 2e 64 65 63 6f 64 65 53 65 61 72 63 68 41 73 53 74 72 Data Ascii: n(){m("ajax","xhr timeout after ",i.timeout,"ms")},"GET"===a&&n&&(s((o=function(e,t){var n=document.createElement("a");t&&"noDecodeWholeURL"in t&&t.noDecodeWholeURL?n.href=e:n.href=decodeURIComponent(e);t=t&&"decodeSearchAsString"in t&&t.decodeSearchAsStr
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 28 74 29 3f 28 65 5b 74 3d 74 2e 72 65 70 6c 61 63 65 28 22 5b 5d 22 2c 22 22 29 5d 3d 65 5b 74 5d 7c 7c 5b 5d 2c 65 5b 74 5d 2e 70 75 73 68 28 6e 29 29 3a 65 5b 74 5d 3d 6e 7c 7c 22 22 2c 65 7d 2c 7b 7d 29 3a 7b 7d 7d 28 6e 2e 73 65 61 72 63 68 7c 7c 22 22 29 2c 68 61 73 68 3a 28 6e 2e 68 61 73 68 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 2c 68 6f 73 74 3a 6e 2e 68 6f 73 74 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 7d 28 65 2c 72 29 29 2e 73 65 61 72 63 68 2c 6e 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 68 74 74 70 22 29 2b 22 3a 2f 2f 22 2b 28 65 2e 68 6f 73 74 7c 7c 65 2e 68 6f 73 74 6e 61 6d 65 2b 28 65 2e 70 6f 72 74 3f 22 3a 22 2e 63 Data Ascii: (t)?(e[t=t.replace("[]","")]=e[t]\|\|[],e[t].push(n)):e[t]=n\|\|"",e},{}):{}}(n.search\|\|""),hash:(n.hash\|\|"").replace(/^#/,""),host:n.host\|\|window.location.host}}(e,r)).search,n),e=function(e){return(e.protocol\|\|"http")+"://"+(e.host\|\|e.hostname+(e.port?":".c
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 2c 33 32 36 36 34 38 39 39 30 39 29 2c 28 34 32 39 34 39 36 37 32 39 36 2a 28 32 30 39 37 31 35 31 26 28 61 3d 69 28 61 5e 61 3e 3e 3e 31 36 2c 32 32 34 36 38 32 32 35 30 37 29 5e 69 28 72 5e 72 3e 3e 3e 31 33 2c 33 32 36 36 34 38 39 39 30 39 29 29 29 2b 28 72 3e 3e 3e 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 74 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2f 5b 28 29 2d 2e 3a 3b 3d 3f 5f 2f 5d 2f 67 3b 77 28 65 2e 62 72 61 6e 64 73 29 26 26 28 65 2e 62 72 61 6e 64 73 3d 41 28 65 2e 62 72 61 6e 64 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 28 65 2e 62 72 61 6e 64 29 26 26 65 2e 62 72 61 6e 64 2e 73 65 61 72 63 68 28 74 29 3c 30 7d 29 29 3b 77 28 65 2e 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 29 26 26 28 Data Ascii: ,3266489909),(4294967296*(2097151&(a=i(a^a>>>16,2246822507)^i(r^r>>>13,3266489909)))+(r>>>0)).toString()},t.f=function(e){var t=/[()-.:;=?_/]/g;w(e.brands)&&(e.brands=A(e.brands,function(e){return S(e.brand)&&e.brand.search(t)<0}));w(e.fullVersionList)&&(
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 65 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 77 28 65 29 7c 7c 53 28 65 29 29 72 65 74 75 72 6e 21 28 30 3c 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 69 66 28 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 Data Ascii: return f.call(e)==="[object "+t+"]"}function _(e){return C(e,a)}function S(e){return C(e,r)}function w(e){return C(e,i)}function k(e){if(!e)return!0;if(w(e)\|\|S(e))return!(0<e.length);for(var t in e)if(hasOwnProperty.call(e,t))return!1;return!0}function j(
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 65 5b 6e 5d 3d 69 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 69 2c 72 3d 7b 7d 2c 61 3d 4f 62 6a 65 Data Ascii: ){for(var t=1;t<arguments.length;t++){var n,i=arguments[t];for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e}).apply(this,arguments)}function c(e,t){if(null==e)return{};var n,i=function(e,t){if(null==e)return{};var n,i,r={},a=Obje
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 41 4c 4c 4f 57 45 44 5f 42 59 5f 43 4f 4e 46 49 47 3a 22 66 6f 72 63 65 5f 61 6c 6c 6f 77 65 64 5f 62 79 5f 63 6f 6e 66 69 67 22 2c 49 44 35 5f 43 4f 4e 53 45 4e 54 3a 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 2c 50 52 4f 56 49 53 49 4f 4e 41 4c 3a 22 70 72 6f 76 69 73 69 6f 6e 61 6c 22 2c 4a 55 52 49 53 44 49 43 54 49 4f 4e 3a 22 6a 75 72 69 73 64 69 63 74 69 6f 6e 22 2c 43 4f 4e 53 45 4e 54 5f 41 50 49 3a 22 63 6f 6e 73 65 6e 74 5f 61 70 69 22 7d 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 73 28 74 68 69 73 2c 69 29 2c 68 28 74 68 69 73 2c 22 61 6c 6c 6f 77 65 64 22 2c 21 31 29 2c 68 28 74 68 69 73 2c 22 67 72 61 6e 74 54 79 70 65 22 2c 67 2e 4e 4f 4e 45 29 2c 68 28 74 68 69 73 2c 22 61 70 69 22 2c 76 Data Ascii: ALLOWED_BY_CONFIG:"force_allowed_by_config",ID5_CONSENT:"id5_consent",PROVISIONAL:"provisional",JURISDICTION:"jurisdiction",CONSENT_API:"consent_api"}),b=function(){function i(e,t,n){s(this,i),h(this,"allowed",!1),h(this,"grantType",g.NONE),h(this,"api",v
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 29 2c 68 28 74 68 69 73 2c 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 76 6f 69 64 20 30 29 2c 68 28 74 68 69 73 2c 22 5f 63 6f 6e 73 65 6e 74 52 65 71 75 65 73 74 65 64 22 2c 21 31 29 2c 74 68 69 73 2e 69 6e 76 6f 63 61 74 69 6f 6e 49 64 3d 65 2c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 74 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 43 6f 6e 66 69 67 3d 6e 2c 74 68 69 73 2e 72 65 73 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 28 29 7d 72 65 74 75 72 6e 20 66 28 6c 2c 5b 7b 6b 65 79 3a 22 72 65 71 75 65 73 74 43 6f 6e 73 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 69 66 28 65 29 74 68 69 73 2e 63 6f 6e 73 65 6e 74 44 61 74 61 3d 6e 65 77 20 6d 2c 4f 62 6a 65 63 74 28 64 2e 75 29 28 74 68 69 Data Ascii: void 0),h(this,"localStorage",void 0),h(this,"_consentRequested",!1),this.invocationId=e,this.localStorage=t,this.storageConfig=n,this.resetConsentData()}return f(l,[{key:"requestConsent",value:function(e,t,n,i){if(e)this.consentData=new m,Object(d.u)(thi
2024-04-19 13:12:59 UTC	1369	IN	Data Raw: 41 70 69 3a 20 44 65 74 65 63 74 65 64 20 41 50 49 20 27 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6f 6e 73 65 6e 74 44 61 74 61 2e 61 70 69 2c 22 27 20 66 72 6f 6d 20 73 74 61 74 69 63 20 63 6f 6e 73 65 6e 74 20 64 61 74 61 22 29 2c 65 29 2c 74 28 74 68 69 73 2e 63 6f 6e 73 65 6e 74 44 61 74 61 29 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 6f 6b 75 70 49 61 62 43 6f 6e 73 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 5b 74 5d 3d 21 31 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 5b 74 5d 7c 7c 28 72 5b 74 5d 3d 21 30 2c 65 26 26 6f 28 69 2e 63 6f 6e 73 65 6e 74 44 61 74 61 2c 65 29 2c 72 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f Data Ascii: Api: Detected API '".concat(this.consentData.api,"' from static consent data"),e),t(this.consentData)}},{key:"lookupIabConsent",value:function(n){var i=this,r=[],e=function(t){return r[t]=!1,function(e){r[t]\|\|(r[t]=!0,e&&o(i.consentData,e),r.every(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.5	50779	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	640	OUT	GET /js/1928.005-3.034/in_cube.js HTTP/1.1 Host: resources.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.5	50791	18.64.155.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	584	OUT	GET /did-004d.min.js HTTP/1.1 Host: d-code.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.justjared.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=ce1549f6-5f69-408d-8be4-53070adcf92a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.5	50789	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	633	OUT	GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.5	50793	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	600	OUT	GET /flash/icon/privacy.svg HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.us.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.5	50792	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	839	OUT	GET /cchain/0?&cb=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D208912%26dsp%3D406496%26t%3Dimage%26uid%3D HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; sd_amuid2=a662aef0-1110-44c8-b99d-2acba4a5db18; _sv3_7=1; amdgt_lk%40cfs=0; __amc=2_1713532366_1713532372

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.5	50783	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	712	OUT	GET /dyn/apn-usync?user_id=187107314970053313 HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.5	50786	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	731	OUT	GET /dyn/eqv-us?user_id=1845939505169848484&gdpr=0&gdpr_consent= HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.5	50787	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	728	OUT	GET /dyn/sthr-us?user_id=7456771a-49ee-4e2a-b013-668de61e15dd HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.5	50785	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	723	OUT	GET /dyn/iqm-us?uid=8597407f-382f-4152-97fa-68cf7fa48a6d HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.5	50790	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 13:12:59 UTC	742	OUT	GET /dyn/frwh-us?user_id=d39541fc28fcd5da73be98a65b5c60&gdpr_consent=&gdpr= HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://router.infolinks.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cuid=b15ba36a-d001-43e3-a9a7-1bd658012841; TPLSERCOOKIE=3059573620546902553906

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.5	50795	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.5	50788	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.5	50796	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.5	50797	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.5	50798	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.5	50800	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.5	50801	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.5	50799	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.5	50794	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.5	50802	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.5	50803	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.5	50804	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.5	50805	34.149.40.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.5	50806	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.5	50809	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.5	50807	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.5	50808	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.5	50814	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.5	50811	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.5	50823	104.26.9.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.5	50818	8.2.110.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.5	50810	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.5	50827	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.5	50822	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.5	50826	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.5	50824	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.5	50819	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.5	50829	3.211.134.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.5	50833	3.161.193.107	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.5	50832	18.164.78.74	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.5	50830	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.5	50825	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.5	50831	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.5	50828	54.159.181.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.5	50835	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.5	50834	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.5	50840	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.5	50839	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.5	50837	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.5	50844	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.5	50841	35.214.251.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.5	50851	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.5	50850	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.5	50848	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.5	50852	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.5	50853	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.5	50845	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.5	50855	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.5	50854	74.119.117.15	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.5	50859	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.5	50857	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.5	50858	23.105.12.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.5	50856	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.5	50846	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.5	50847	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.5	50861	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.5	50860	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.5	50869	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.5	50862	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.5	50865	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.5	50867	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.5	50871	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.5	50868	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.5	50863	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.5	50874	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.5	50872	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.5	50836	52.5.14.134	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.5	50873	35.207.24.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.5	50877	54.166.111.231	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.5	50876	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.5	50878	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.5	50887	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.5	50888	216.22.16.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.5	50893	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.5	50896	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.5	50892	8.2.110.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.5	50900	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.5	50902	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.5	50904	35.71.139.29	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.5	50898	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.5	50895	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.5	50882	52.44.75.209	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.5	50894	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.5	50901	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.5	50897	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.5	50905	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.5	50899	82.145.213.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.5	50930	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.5	50910	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.5	50912	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.5	50911	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.5	50914	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.5	50915	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.5	50918	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.5	50917	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.5	50922	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.5	50913	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.5	50937	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.5	50948	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.5	50944	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.5	50926	142.250.9.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.5	50940	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.5	50951	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.5	50920	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.5	50943	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.5	50950	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.5	50928	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.5	50949	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.5	50941	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.5	50954	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.5	50921	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.5	50934	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.5	50935	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.5	50919	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.5	50939	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.5	50938	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.5	50946	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.5	50952	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.5	50959	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.5	50955	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.5	50907	34.203.128.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.5	50932	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.5	50960	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.5	50933	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.5	50956	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.5	50936	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.5	50953	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.5	50964	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.5	50968	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.5	50963	54.161.39.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.5	50967	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.5	50961	51.222.105.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.5	50962	47.253.61.56	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.5	50969	34.149.40.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.5	50971	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.5	50973	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.5	50972	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.5	50975	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.5	50977	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.5	50978	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.5	50980	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.5	50983	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.5	50984	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.5	50982	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.5	50976	8.2.110.134	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.5	50993	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.5	50997	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.5	50996	18.64.155.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.5	50990	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.5	50974	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.5	50991	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.5	50979	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.5	50985	216.219.92.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.5	50925	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.5	51002	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.5	51000	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.5	51003	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.5	51001	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.5	51012	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.5	51010	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.5	51015	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.5	51007	169.197.150.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.5	51014	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.5	51008	96.46.186.57	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.5	51004	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.5	51009	54.88.142.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.5	51018	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.5	51030	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.5	51022	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.5	51027	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.5	51023	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.5	51026	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.5	51024	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.5	51025	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.5	51020	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.5	51017	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.5	51019	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.5	51032	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.5	51031	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.5	51016	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.5	51028	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.5	51036	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.5	51033	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.5	51029	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.5	51037	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.5	51034	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.5	51021	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.5	51044	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.5	51043	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.5	51038	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.5	51052	35.211.233.246	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.5	51046	18.67.76.126	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.5	51065	69.166.1.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.5	51057	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.5	51059	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.5	51060	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.5	51064	35.186.193.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.5	51041	52.40.39.43	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.5	51056	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.5	51054	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.5	51062	52.95.115.255	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.5	51063	52.95.115.255	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.5	51067	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.5	51050	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.5	51077	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.5	51076	155.204.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.5	51080	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.5	51079	3.211.134.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.5	51066	35.214.188.43	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.5	51081	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.5	51068	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.5	51084	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.5	51086	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.5	51069	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.5	51087	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.5	51091	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.5	51090	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.5	51073	35.214.251.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.5	51082	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.5	51078	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.5	51094	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.5	51085	54.145.65.57	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.5	51098	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.5	51097	34.226.174.113	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.5	51115	142.250.9.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.5	51118	64.233.185.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.5	51119	8.28.7.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.5	51103	51.75.88.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.5	51106	51.75.93.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.5	51100	51.75.92.187	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.5	51102	57.129.23.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.5	51099	51.75.95.135	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.5	51101	51.75.92.187	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.5	51104	51.75.92.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.5	51105	51.75.88.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.5	51112	51.75.95.112	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.5	51107	51.75.95.152	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.5	51109	51.75.88.178	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.5	51113	51.75.89.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.5	51111	51.75.95.112	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.5	51108	57.129.23.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.5	51110	51.75.92.187	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.5	51114	57.129.23.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.5	51120	35.207.24.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.5	50886	52.44.75.209	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.5	51071	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.5	51126	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.5	51132	142.250.9.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.5	51137	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.5	51145	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.5	51143	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.5	51144	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.5	51146	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.5	51140	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.5	51139	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.5	51148	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.5	51149	52.5.14.134	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.5	51150	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.5	51151	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.5	51152	142.250.9.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.5	51141	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.5	51135	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.5	51156	104.18.25.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.5	51162	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.5	51163	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.5	51157	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.5	51166	3.161.193.77	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.5	51164	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.5	51168	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.5	51167	18.67.76.70	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.5	51158	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.5	51136	54.199.208.110	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.5	51161	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.5	51165	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.5	51173	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.5	51171	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.5	51172	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.5	51174	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.5	51170	143.244.220.80	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.5	51159	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.5	51175	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.5	51160	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.5	51177	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.5	51185	18.165.116.47	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.5	51176	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.5	51178	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.5	51181	54.159.181.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.5	51183	155.204.117.12	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.5	51179	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.5	51169	174.137.133.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.5	51188	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.5	51189	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.5	51190	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.5	51191	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.5	51198	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.5	51200	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.5	51201	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.5	51199	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.5	51196	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.5	51194	23.105.12.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.5	51184	34.235.210.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.5	51193	35.211.118.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.5	51202	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.5	51203	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.5	51197	34.234.6.154	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.5	51192	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.5	51195	142.234.204.77	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.5	51187	54.144.51.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.5	51212	142.251.15.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.5	51214	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.5	51213	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.5	51211	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.5	51210	35.207.24.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.5	51215	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.5	51218	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.5	51219	104.18.24.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.5	51217	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.5	51207	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.5	51208	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.5	51209	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.5	51216	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.5	51227	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.5	51228	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.5	51232	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.5	51233	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.5	51236	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.5	51237	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.5	51045	35.211.233.246	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.5	51234	82.145.213.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.5	51224	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.5	51226	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.5	51225	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.5	51221	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.5	51223	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.5	51222	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.5	51230	35.190.80.1	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.5	51182	159.89.246.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.5	51240	35.244.154.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.5	51243	172.240.155.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.5	51249	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.5	51248	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.5	51250	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.5	51244	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.5	51245	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.5	51247	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.5	51246	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.5	51235	35.244.154.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.5	51252	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.5	51251	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.5	51255	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.5	51260	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.5	51267	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.5	51272	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.5	51266	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.5	51259	35.207.24.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.5	51271	172.253.124.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.5	51268	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.5	51265	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.5	51264	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.5	51273	35.190.80.1	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.5	51253	44.196.251.236	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.5	51258	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.5	51269	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.5	51274	8.2.110.206	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.5	51277	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.5	51279	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.5	51276	96.46.186.57	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.5	51275	192.132.33.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.5	51280	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.5	51281	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.5	51290	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.5	51292	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.5	51291	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.5	51289	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.5	51287	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.5	51288	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.5	51282	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.5	51285	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.5	51293	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.5	51284	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.5	51298	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.5	51297	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.5	51302	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.5	51303	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.5	51286	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.5	51300	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.5	51301	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.5	51306	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.5	51295	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.5	51312	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.5	51314	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.5	51315	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.5	51313	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.5	51317	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.5	51283	174.137.133.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.5	51296	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.5	51294	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.5	51318	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.5	51299	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.5	51320	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.5	51304	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.5	51307	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.5	51322	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.5	51319	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.5	51326	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.5	51329	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.5	51331	172.64.153.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.5	51335	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.5	51323	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.5	51334	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.5	51327	143.244.220.80	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.5	51338	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.5	51324	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.5	51333	34.202.246.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.5	51336	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.5	51332	18.154.227.93	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.5	51339	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.5	51330	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.5	51337	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.5	51340	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.5	51328	52.22.142.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.5	51343	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.5	51342	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.5	51344	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.5	51348	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.5	51350	172.64.153.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.5	51345	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.5	51349	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.5	51346	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.5	51353	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.5	51356	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.5	51355	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.5	51351	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.5	51352	18.154.227.93	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.5	51354	34.202.246.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.5	51347	52.22.142.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.5	51357	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.5	51361	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.5	51359	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.5	51363	104.244.42.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.5	51368	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.5	51367	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.5	51365	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.5	51370	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.5	51369	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.5	51366	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.5	51371	54.230.253.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.5	51372	74.119.117.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.5	51376	74.119.117.12	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.5	51377	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.5	51379	13.32.230.117	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.5	51378	35.214.251.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.5	51380	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.5	51381	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.5	51383	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.5	51382	74.119.117.12	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.5	51384	34.102.193.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.5	51385	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.5	51386	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.5	51387	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.5	51389	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.5	51390	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.5	51388	3.222.148.106	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.5	51393	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.5	51392	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.5	51391	157.245.86.108	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.5	51407	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.5	51404	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.5	51405	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.5	51400	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.5	51403	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.5	51397	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.5	51401	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.5	51399	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.5	51408	3.162.112.21	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.5	51409	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.5	51013	80.77.87.166	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.5	51416	172.64.153.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.5	51413	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.5	51415	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.5	51410	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.5	51423	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.5	51419	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.5	51429	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.5	51414	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.5	51411	34.202.246.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.5	51427	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.5	51421	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.5	51430	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.5	51424	74.119.117.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.5	51412	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.5	51428	74.119.117.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.5	51422	18.154.227.93	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.5	51418	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.5	51420	52.22.142.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.5	51417	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.5	51435	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.5	51432	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.5	51434	74.119.117.12	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.5	50849	138.201.8.249	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.5	51438	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.5	51437	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.5	51440	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.5	51442	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.5	51449	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.5	51445	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.5	51444	54.159.181.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.5	51443	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.5	51446	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.5	51441	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.5	51447	54.87.122.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.5	51450	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.5	51454	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.5	51448	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.5	51452	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.5	51436	54.243.52.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.5	51453	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.5	51459	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.5	51458	35.171.243.167	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.5	51456	35.241.34.106	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.5	51461	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.5	51463	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.5	51467	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.5	51466	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.5	51464	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.5	51460	74.119.117.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.5	51465	74.119.117.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.5	51462	74.119.117.12	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.5	51471	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.5	51468	18.244.202.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.5	51469	104.17.25.14	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.5	51470	74.119.117.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.5	51479	121.127.42.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.5	51477	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.5	51475	34.202.40.204	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.5	51480	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.5	51483	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.5	51476	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.5	51484	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.5	51486	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.5	51473	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.5	51482	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.5	51491	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.5	51496	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.5	51490	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.5	51503	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.5	51492	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.5	51499	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.5	51501	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.5	51506	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.5	51505	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.5	51513	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.5	51514	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.5	51512	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.5	51510	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.5	51509	54.208.231.58	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.5	51502	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.5	51517	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.5	51516	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.5	51488	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.5	51520	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.5	51489	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.5	51494	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.5	51497	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.5	51493	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.5	51524	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.5	51521	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.5	51525	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.5	51526	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.5	51522	44.219.73.112	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.5	51498	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.5	51515	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.5	51523	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.5	51511	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.5	51527	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.5	51518	152.199.5.184	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.5	51504	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.5	51528	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.5	51530	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.5	51532	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.5	51545	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.5	51539	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.5	51538	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.5	51536	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.5	51544	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.5	51540	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.5	51542	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.5	51546	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.5	51547	54.208.231.58	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.5	51548	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.5	51550	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.5	51549	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.5	51551	74.119.117.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.5	51555	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.5	51531	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.5	51556	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.5	51560	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.5	51558	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.5	51541	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.5	51559	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.5	51561	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.5	51566	8.28.7.105	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.5	51557	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.5	51537	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.5	51563	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.5	51574	169.197.150.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.5	51575	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.5	51568	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.5	51529	34.160.20.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.5	51533	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.5	51543	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.5	51553	23.105.12.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.5	51564	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.5	51588	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.5	51584	52.85.132.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.5	51597	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.5	51598	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.5	51587	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.5	51599	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.5	51594	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.5	51602	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.5	51603	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.5	51600	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.5	51601	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.5	51604	3.162.112.21	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.5	51605	3.162.112.21	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.5	51609	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.5	51607	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.5	51608	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.5	51589	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.5	51591	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.5	51619	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.5	51616	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.5	51623	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.5	51621	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.5	51611	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.5	51612	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.5	51620	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.5	51628	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.5	51629	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.5	51631	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.5	51630	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.5	51632	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.5	51637	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.5	51638	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.5	51639	23.23.219.186	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.5	51641	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.5	51644	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.5	51552	18.213.217.220	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.5	51554	141.226.224.48	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.5	51565	178.250.1.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.5	51562	69.90.254.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.5	51570	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.5	51571	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.5	51578	54.205.61.221	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.5	51581	34.160.19.107	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.5	51580	34.233.220.139	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.5	51586	34.203.128.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.5	51590	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.5	51593	23.105.12.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.5	51610	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.5	51606	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.5	51613	18.244.202.102	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.5	51615	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.5	51622	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.5	51624	151.101.193.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.5	51625	151.101.193.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.5	51626	151.101.193.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.5	51636	104.76.210.74	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.5	51642	104.26.9.169	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.5	51569	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.5	51579	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.5	51576	104.18.25.173	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.5	51627	74.125.136.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.5	51646	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.5	51645	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.5	51649	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.5	51647	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.5	51648	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.5	51650	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.5	51658	74.119.117.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.5	51655	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.5	51656	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.5	51661	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.5	51653	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.5	51654	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.5	51660	3.162.112.21	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.5	51652	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.5	51674	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.5	51678	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.5	51682	23.207.52.22	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.5	51673	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.5	51675	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.5	51662	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.5	51687	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.5	51672	121.127.42.98	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.5	51683	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.5	51679	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.5	51689	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.5	51677	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.5	51693	169.197.150.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.5	51694	64.233.185.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.5	51704	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.5	51707	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.5	51700	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.5	51706	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.5	51715	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.5	51670	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.5	51714	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.5	51712	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.5	51713	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.5	51671	34.235.210.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.5	51720	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.5	51718	169.197.150.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.5	51721	35.244.154.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.5	51663	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.5	51688	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.5	51691	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.5	51727	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.5	51728	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.5	51699	35.214.251.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.5	51719	185.184.8.90	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.5	51726	54.161.140.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.5	51676	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.5	51735	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.5	51729	54.230.252.87	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.5	51740	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.5	51739	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.5	51732	54.211.215.248	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.5	51741	82.145.213.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.5	51747	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.5	51746	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.5	51643	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.5	51651	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.5	51665	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.5	51664	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.5	51666	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.5	51669	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.5	51668	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.5	51667	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.5	51680	74.119.117.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.5	51681	74.119.117.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.5	51684	23.105.12.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.5	51685	23.105.12.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.5	51686	23.105.12.120	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.5	51690	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.5	51692	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.5	51701	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.5	51716	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.5	51695	35.194.66.159	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.5	51702	54.158.42.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.5	51703	34.198.78.192	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.5	51749	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.5	51748	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.5	51708	3.163.115.69	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.5	51750	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.5	51709	44.217.123.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.5	51723	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.5	51705	54.145.3.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.5	51696	192.132.33.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.5	51744	3.212.148.28	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.5	51745	18.214.197.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.5	51742	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.5	51734	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.5	51730	34.203.128.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.5	51755	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.5	51757	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.5	51753	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.5	51752	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.5	51754	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.5	51764	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.5	51759	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.5	51761	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.5	51758	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.5	51756	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.5	51762	54.224.27.195	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.5	51763	35.172.99.217	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.5	51766	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.5	51760	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.5	51767	174.137.133.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.5	51769	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.5	51779	3.161.150.60	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.5	51787	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.5	51771	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.5	51781	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.5	51773	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.5	51804	74.125.136.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.5	51785	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.5	51772	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.5	51796	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.5	51784	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.5	51770	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.5	51791	96.46.186.57	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.5	51790	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.5	51810	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.5	51794	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.5	51802	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.5	51807	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.5	51786	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.5	51821	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.5	51812	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.5	51818	18.213.217.220	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.5	51793	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.5	51815	54.159.181.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.5	51792	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.5	51783	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.5	51780	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.5	51820	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.5	51789	54.224.27.195	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.5	51795	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.5	51816	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.5	51803	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.5	51824	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.5	51823	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.5	51829	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.5	51834	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.5	51838	35.244.154.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.5	51840	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.5	51806	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.5	51831	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.5	51813	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.5	51830	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.5	51842	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.5	51827	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.5	51836	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.5	51814	35.214.251.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.5	51849	52.7.147.100	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.5	51854	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.5	51855	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.5	51850	35.168.150.191	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.5	51860	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.5	51861	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.5	51851	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.5	51862	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.5	51859	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.5	51870	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.5	51863	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.5	51852	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.5	51856	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.5	51828	64.202.112.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.5	51839	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.5	51847	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.5	51826	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.5	51848	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.5	51873	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.5	51874	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.5	51853	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.5	51858	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.5	51875	52.2.0.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.5	51876	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.5	51877	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.5	51882	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.5	51782	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.5	51805	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.5	51808	184.25.164.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.5	51800	89.187.171.26	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.5	51788	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.5	51809	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.5	51817	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.5	51819	74.119.117.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.5	51797	150.136.25.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.5	51774	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.5	51775	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.5	51777	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.5	51778	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.5	51776	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.5	51868	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.5	51822	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.5	51846	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.5	51869	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.5	51832	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.5	51841	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.5	51833	74.119.117.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.5	51799	54.227.149.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.5	51825	54.145.3.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.5	51837	192.132.33.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.5	51857	69.90.254.78	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.5	51843	44.239.80.115	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.5	51844	44.239.80.115	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.5	51798	204.44.79.1	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.5	51883	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.5	51885	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.5	51887	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.5	51888	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.5	51889	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.5	51886	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.5	51894	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.5	51897	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.5	51893	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.5	51900	209.54.182.161	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.5	51910	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.5	51912	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.5	51890	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.5	51920	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.5	51921	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.5	51922	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.5	51923	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.5	51898	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.5	51908	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.5	51915	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.5	51925	68.67.160.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.5	51895	34.86.207.18	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.5	51902	192.184.67.143	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.5	51904	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.5	51903	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.5	51914	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.5	51916	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.5	51899	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.5	51906	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.5	51901	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.5	51905	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.5	51917	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.5	51929	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.5	51930	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.5	51928	34.98.72.95	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.5	51911	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.5	51924	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.5	51913	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.5	51933	104.26.9.169	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.5	51937	142.251.15.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.5	51967	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.5	51951	52.22.99.196	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.5	51954	23.105.12.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.5	51971	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.5	51907	216.200.232.249	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.5	51973	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.5	51948	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.5	51953	3.33.220.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.5	51945	3.161.188.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.5	51944	3.161.188.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.5	51942	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.5	51962	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.5	51947	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.5	51946	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.5	51976	142.250.105.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.5	51968	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.5	51970	34.197.249.125	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.5	51959	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.5	51955	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.5	51956	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.5	51957	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.5	51935	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.5	51958	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.5	51939	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.5	51938	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.5	51940	18.208.103.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.5	51961	18.208.103.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.5	51975	35.244.154.8	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.5	51978	150.136.25.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.5	51972	54.144.51.35	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.5	51981	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.5	51983	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.5	51982	67.202.105.33	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.5	51984	18.164.81.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.5	51986	44.219.73.112	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.5	51988	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.5	51997	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.5	51996	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.5	51995	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.5	52001	151.101.193.16	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.5	51994	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.5	52009	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.5	52008	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.5	52006	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.5	52000	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.5	52020	18.165.83.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.5	52021	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.5	52004	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.5	52005	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.5	52015	34.117.239.71	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.5	51991	34.235.204.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.5	51992	34.235.204.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.5	51990	34.235.204.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.5	52010	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.5	52007	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.5	52018	18.155.1.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.5	52011	18.67.79.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.5	52017	204.48.22.20	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.5	52022	3.163.115.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.5	52013	35.190.90.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.5	51989	34.235.204.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.5	52024	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.5	52026	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.5	52023	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.5	52028	64.233.185.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.5	52029	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.5	52030	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.5	52031	162.19.138.116	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.5	52035	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.5	52038	35.244.193.51	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.5	52044	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.5	52046	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.5	52043	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.5	52045	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.5	52039	68.67.160.75	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.5	52042	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.5	52040	35.71.131.137	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.5	52048	52.46.143.56	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.5	52053	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.5	52027	34.236.82.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.5	52025	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.5	52037	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.5	52033	34.235.204.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.5	52034	34.235.204.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.5	52050	69.194.240.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.5	52051	159.127.43.146	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.5	52047	52.46.143.56	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.5	52069	18.154.227.93	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.5	52068	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.5	52061	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.5	52064	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.5	52065	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.5	52067	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.5	52063	52.22.142.177	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.5	52057	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.5	52060	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.5	52066	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.5	52059	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.5	52058	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1804	192.168.2.5	52062	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.5	52075	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.5	52074	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.5	52076	34.111.8.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.5	52081	142.251.15.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.5	52080	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.5	52089	34.111.113.62	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.5	52090	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.5	52094	150.136.25.38	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.5	52092	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.5	52091	44.239.80.115	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.5	52054	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.5	52096	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.5	51731	80.77.87.166	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.5	52078	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1819	192.168.2.5	52077	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.5	52093	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.5	52099	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.5	52100	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.5	52098	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.5	52103	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.5	52105	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.5	52108	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.5	52109	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.5	52107	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.5	52117	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.5	52118	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.5	52116	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.5	52120	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.5	52110	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.5	52134	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.5	52132	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.5	52131	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.5	52141	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.5	52139	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.5	52142	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.5	52138	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.5	52127	3.162.112.21	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.5	52129	3.162.112.21	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.5	52130	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.5	52137	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.5	52135	198.148.27.131	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.5	52140	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.5	52151	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.5	52150	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.5	52152	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.5	52136	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.5	52157	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.5	52161	54.159.181.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.5	52159	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.5	52155	54.208.163.26	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.5	52160	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.5	52156	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.5	52167	74.119.117.17	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.5	52169	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.5	52171	18.165.83.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.5	52170	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.5	52178	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.5	52176	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.5	52179	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.5	52175	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.5	52173	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.5	52172	172.66.42.247	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.5	52177	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.5	52181	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.5	52180	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.5	52182	174.137.133.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.5	52184	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.5	52115	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.5	52114	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1874	192.168.2.5	52125	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1875	192.168.2.5	52111	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1876	192.168.2.5	52112	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1877	192.168.2.5	52121	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1878	192.168.2.5	52124	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1879	192.168.2.5	52126	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1880	192.168.2.5	52122	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1881	192.168.2.5	52123	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1882	192.168.2.5	52119	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1883	192.168.2.5	52168	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1884	192.168.2.5	52113	162.19.138.83	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1885	192.168.2.5	52148	107.178.254.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1886	192.168.2.5	52158	35.161.161.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1887	192.168.2.5	52164	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1888	192.168.2.5	52165	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1889	192.168.2.5	52166	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1890	192.168.2.5	52174	18.244.202.102	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1891	192.168.2.5	52183	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1892	192.168.2.5	52189	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1893	192.168.2.5	52195	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1894	192.168.2.5	52186	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1895	192.168.2.5	52191	52.223.22.214	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1896	192.168.2.5	52192	3.217.159.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1897	192.168.2.5	52193	51.222.239.230	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1898	192.168.2.5	52196	172.66.41.9	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1899	192.168.2.5	52194	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1900	192.168.2.5	52197	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1901	192.168.2.5	52198	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1902	192.168.2.5	52201	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1903	192.168.2.5	52200	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1904	192.168.2.5	52202	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1905	192.168.2.5	52204	172.217.215.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1906	192.168.2.5	52210	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1907	192.168.2.5	52206	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1908	192.168.2.5	52209	54.86.25.128	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1909	192.168.2.5	52211	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1910	192.168.2.5	52207	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1911	192.168.2.5	52220	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1912	192.168.2.5	52219	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1913	192.168.2.5	52217	147.75.195.55	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1914	192.168.2.5	52230	18.154.227.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1915	192.168.2.5	52223	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1916	192.168.2.5	52185	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1917	192.168.2.5	52225	18.210.126.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1918	192.168.2.5	52226	18.210.126.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1919	192.168.2.5	52187	172.64.151.101	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1920	192.168.2.5	52229	18.154.227.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1921	192.168.2.5	52232	23.21.115.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1922	192.168.2.5	52215	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1923	192.168.2.5	52216	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1924	192.168.2.5	52214	34.145.228.212	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1925	192.168.2.5	52213	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1926	192.168.2.5	52199	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1927	192.168.2.5	52190	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1928	192.168.2.5	52227	104.18.34.178	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1929	192.168.2.5	52221	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1930	192.168.2.5	52205	34.145.228.212	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1931	192.168.2.5	52203	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1932	192.168.2.5	52222	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1933	192.168.2.5	52231	23.21.115.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1934	192.168.2.5	52228	104.18.34.178	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1935	192.168.2.5	52224	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1936	192.168.2.5	52233	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1937	192.168.2.5	52237	104.18.27.216	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1938	192.168.2.5	52238	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1939	192.168.2.5	52236	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1940	192.168.2.5	52269	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1941	192.168.2.5	52261	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1942	192.168.2.5	52278	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1943	192.168.2.5	52304	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1944	192.168.2.5	52273	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1945	192.168.2.5	52262	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1946	192.168.2.5	52257	23.21.115.50	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1947	192.168.2.5	52249	18.154.227.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1948	192.168.2.5	52275	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1949	192.168.2.5	52243	147.28.146.89	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1950	192.168.2.5	52240	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1951	192.168.2.5	52242	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1952	192.168.2.5	52267	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1953	192.168.2.5	52281	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1954	192.168.2.5	52303	34.117.4.53	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1955	192.168.2.5	52265	68.67.181.211	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1956	192.168.2.5	52260	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1957	192.168.2.5	52235	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1958	192.168.2.5	52259	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1959	192.168.2.5	52272	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1960	192.168.2.5	52264	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1961	192.168.2.5	52247	18.210.126.54	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1962	192.168.2.5	52302	204.44.79.1	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1963	192.168.2.5	52301	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1964	192.168.2.5	52294	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1965	192.168.2.5	52300	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1966	192.168.2.5	52256	54.243.52.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1967	192.168.2.5	52255	54.243.52.226	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1968	192.168.2.5	52298	18.208.103.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1969	192.168.2.5	52266	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1970	192.168.2.5	52297	18.208.103.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1971	192.168.2.5	52239	34.149.20.76	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1972	192.168.2.5	52292	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1973	192.168.2.5	52277	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1974	192.168.2.5	52283	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1975	192.168.2.5	52268	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1976	192.168.2.5	52279	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1977	192.168.2.5	52245	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1978	192.168.2.5	52250	104.18.34.178	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1979	192.168.2.5	52270	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1980	192.168.2.5	52287	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1981	192.168.2.5	52280	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1982	192.168.2.5	52290	3.161.188.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1983	192.168.2.5	52286	3.161.188.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1984	192.168.2.5	52295	3.161.188.91	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1985	192.168.2.5	52258	69.166.1.32	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1986	192.168.2.5	52285	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1987	192.168.2.5	52289	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1988	192.168.2.5	52291	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1989	192.168.2.5	52282	67.202.105.23	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1990	192.168.2.5	52296	18.244.202.102	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1991	192.168.2.5	52310	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1992	192.168.2.5	52311	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1993	192.168.2.5	52315	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1994	192.168.2.5	52314	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1995	192.168.2.5	52317	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1996	192.168.2.5	52318	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1997	192.168.2.5	52306	75.2.64.67	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1998	192.168.2.5	52309	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1999	192.168.2.5	52316	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2000	192.168.2.5	52312	67.231.251.190	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2001	192.168.2.5	52320	54.227.149.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2002	192.168.2.5	52321	54.227.149.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2003	192.168.2.5	52299	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2004	192.168.2.5	52319	74.119.117.12	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2005	192.168.2.5	52324	69.166.1.34	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2006	192.168.2.5	52322	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2007	192.168.2.5	52329	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2008	192.168.2.5	52325	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2009	192.168.2.5	52327	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2010	192.168.2.5	52331	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2011	192.168.2.5	52326	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2012	192.168.2.5	52330	54.227.149.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2013	192.168.2.5	52333	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2014	192.168.2.5	52335	172.253.124.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2015	192.168.2.5	52336	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2016	192.168.2.5	52334	172.253.124.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2017	192.168.2.5	52337	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2018	192.168.2.5	52338	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2019	192.168.2.5	52339	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2020	192.168.2.5	52332	204.44.79.1	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2021	192.168.2.5	52341	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2022	192.168.2.5	52342	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2023	192.168.2.5	52343	54.159.181.30	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2024	192.168.2.5	52347	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2025	192.168.2.5	52345	15.204.241.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2026	192.168.2.5	52346	15.204.241.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2027	192.168.2.5	52344	69.194.240.13	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2028	192.168.2.5	52349	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2029	192.168.2.5	52351	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2030	192.168.2.5	52350	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2031	192.168.2.5	52348	44.195.41.223	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2032	192.168.2.5	52352	15.204.241.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2033	192.168.2.5	52354	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2034	192.168.2.5	52355	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2035	192.168.2.5	52357	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2036	192.168.2.5	52356	74.119.117.25	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2037	192.168.2.5	52358	142.251.15.149	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2038	192.168.2.5	52362	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2039	192.168.2.5	52359	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2040	192.168.2.5	52360	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2041	192.168.2.5	52363	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2042	192.168.2.5	52366	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2043	192.168.2.5	52365	18.64.237.14	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2044	192.168.2.5	52367	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2045	192.168.2.5	52369	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2046	192.168.2.5	52370	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2047	192.168.2.5	52372	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2048	192.168.2.5	52361	204.44.79.1	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2049	192.168.2.5	52374	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2050	192.168.2.5	52376	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2051	192.168.2.5	52375	74.119.117.6	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2052	192.168.2.5	52378	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2053	192.168.2.5	52380	74.119.117.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2054	192.168.2.5	52379	74.119.117.37	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2055	192.168.2.5	52383	74.125.138.148	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2056	192.168.2.5	52384	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2057	192.168.2.5	52385	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2058	192.168.2.5	52387	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2059	192.168.2.5	52388	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2060	192.168.2.5	52389	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2061	192.168.2.5	52391	3.163.80.52	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2062	192.168.2.5	52394	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2063	192.168.2.5	52396	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2064	192.168.2.5	52398	64.233.176.104	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2065	192.168.2.5	52397	74.119.117.4	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2066	192.168.2.5	52401	3.163.80.126	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2067	192.168.2.5	52402	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2068	192.168.2.5	52403	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2069	192.168.2.5	52404	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2070	192.168.2.5	52405	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2071	192.168.2.5	52407	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2072	192.168.2.5	52408	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2073	192.168.2.5	52406	35.169.222.158	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2074	192.168.2.5	52409	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2075	192.168.2.5	52411	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2076	192.168.2.5	52410	44.239.80.115	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2077	192.168.2.5	52412	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2078	192.168.2.5	52413	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2079	192.168.2.5	52416	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2080	192.168.2.5	52417	34.145.228.212	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2081	192.168.2.5	52418	157.245.140.233	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2082	192.168.2.5	52419	34.200.65.202	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2083	192.168.2.5	52425	8.28.7.82	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2084	192.168.2.5	52421	184.73.252.128	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2085	192.168.2.5	52420	184.73.252.128	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2086	192.168.2.5	52427	34.98.64.218	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2087	192.168.2.5	52430	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2088	192.168.2.5	52431	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2089	192.168.2.5	52429	52.223.40.198	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2090	192.168.2.5	52432	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2091	192.168.2.5	52433	18.214.54.215	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2092	192.168.2.5	52435	107.178.254.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2093	192.168.2.5	52438	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2094	192.168.2.5	52434	107.178.254.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2095	192.168.2.5	52436	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2096	192.168.2.5	52437	3.161.136.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2097	192.168.2.5	52439	3.225.218.10	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2098	192.168.2.5	52440	54.227.149.130	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2099	192.168.2.5	52441	34.145.228.212	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2100	192.168.2.5	52443	172.253.124.156	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2101	192.168.2.5	52444	184.73.252.128	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2102	192.168.2.5	52446	184.73.252.128	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2103	192.168.2.5	52445	184.73.252.128	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2104	192.168.2.5	52448	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2105	192.168.2.5	52449	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2106	192.168.2.5	52452	107.178.254.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2107	192.168.2.5	52451	15.204.241.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2108	192.168.2.5	52453	107.178.254.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2109	192.168.2.5	52454	107.178.254.65	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2110	192.168.2.5	52456	89.187.171.27	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2111	192.168.2.5	52457	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2112	192.168.2.5	52459	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2113	192.168.2.5	52458	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2114	192.168.2.5	52461	34.36.216.150	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2115	192.168.2.5	52462	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2116	192.168.2.5	52463	18.165.83.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2117	192.168.2.5	52466	8.28.7.81	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2118	192.168.2.5	52464	34.232.139.140	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2119	192.168.2.5	52467	212.36.83.246	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2120	192.168.2.5	52470	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2121	192.168.2.5	52469	69.194.240.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2122	192.168.2.5	52472	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2123	192.168.2.5	52471	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2124	192.168.2.5	52473	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2125	192.168.2.5	52468	35.211.178.172	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2126	192.168.2.5	52478	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2127	192.168.2.5	52477	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2128	192.168.2.5	52479	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2129	192.168.2.5	52476	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2130	192.168.2.5	52474	159.127.43.146	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2131	192.168.2.5	52484	34.149.50.64	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2132	192.168.2.5	52480	3.232.158.174	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2133	192.168.2.5	52482	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2134	192.168.2.5	52481	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2135	192.168.2.5	52483	68.67.179.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2136	192.168.2.5	52487	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2137	192.168.2.5	52485	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2138	192.168.2.5	52486	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2139	192.168.2.5	52488	18.154.227.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2140	192.168.2.5	52493	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2141	192.168.2.5	52494	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2142	192.168.2.5	52495	74.125.136.157	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2143	192.168.2.5	52496	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2144	192.168.2.5	52497	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2145	192.168.2.5	52492	69.194.240.11	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2146	192.168.2.5	52491	212.36.83.246	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2147	192.168.2.5	52498	104.18.36.155	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2148	192.168.2.5	52499	207.65.37.179	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2149	192.168.2.5	52500	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2150	192.168.2.5	52501	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2151	192.168.2.5	52503	74.119.117.24	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2152	192.168.2.5	52504	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2153	192.168.2.5	52505	35.227.252.103	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2154	192.168.2.5	52506	18.165.109.188	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2155	192.168.2.5	52507	34.145.228.212	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2156	192.168.2.5	52510	209.54.181.42	443	1868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2157	192.168.2.5	52513	74.125.136.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2158	192.168.2.5	52514	74.125.136.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2159	192.168.2.5	52516	74.125.136.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2160	192.168.2.5	52518	74.125.136.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2161	192.168.2.5	52519	74.119.117.24	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2162	192.168.2.5	52520	34.111.8.32	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	15:12:16
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:12:19
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:12:22
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.justjared.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	15:12:36
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=4716 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	15:13:48
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=19136 --field-trial-handle=2024,i,772575169605041939,9431119311643740679,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.justjared.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Windows Analysis Report
http://www.justjared.com